castle-web-cli 0.4.40 → 0.4.42

package/dist/agent-prompts.js

@@ -105,12 +105,12 @@ export function buildTaskPrompt(opts) {
     // Claude-only: collapsing the wrap-up (progress 90 + restart + notes) into
     // one shell call reliably saves 1-2 serial ~7s turns there. Cursor's
     // composer sometimes reacts to the same rule with MORE calls, so it stays
-    // on the plain instructions. Read-before-overwrite likewise targets
-    // claude's Write-tool precondition (a blind Write to an existing file is
-    // rejected, forcing a wasted failed-call + Read + retry cycle).
+    // on the plain instructions.
+    // (We deliberately do NOT tell agents to overwrite files via `cat > … <<EOF`
+    // -- blind whole-file rewrites made parallel agents clobber each other's
+    // edits. Read-then-edit is slower but safe; that is the right tradeoff.)
     const wrapUp = opts.backend === 'claude'
-        ? `\n- NEVER point your Write tool at a file that already exists (scenes/main.scene especially): it rejects files it has not Read, and the failed call + forced Read wastes two turns. Replace existing files with ONE shell command instead (\`cat > scenes/main.scene <<'EOF' ... EOF\`); reserve the Write tool for brand-new files.
-- Wrap up in ONE tool call, not several: once your last file edit is done, combine the 90-progress write, the final \`npm run restart\`, and writing the notes file into a single shell command (\`;\`-separated so the notes land even if the restart hiccups). Then stop -- no extra turns after it.`
+        ? `\n- Wrap up in ONE tool call, not several: once your last file edit is done, combine the 90-progress write, the final \`npm run restart\`, and writing the notes file into a single shell command (\`;\`-separated so the notes land even if the restart hiccups). Then stop -- no extra turns after it.`
         : '';
     return `You are a background build agent for the Castle deck "${opts.deckLabel}" (current directory). A separate conversation agent dispatched you with one task. Read the deck's CLAUDE.md / AGENTS.md first and follow its workflow (including reloading the served deck after changes, e.g. \`npm run restart\`).
 
@@ -123,6 +123,7 @@ Operating rules:
 - The USER is the verifier -- the whole tasks system exists so the user playtests every change themselves. Your first priority is to finish as soon as possible with the change genuinely in place and reachable in the running deck, so the user can test it right away. Do NOT run verification (screenshots especially) unless you are really sure it will catch something a re-read of your own change cannot -- and even then at most one cheap check, never a retry loop. Time spent verifying is time the user is left waiting.
 - The moment implementation is complete and you switch to verifying, write 90 to the progress file -- verification time must not read as stalled progress.
 - Do this one task completely, then stop. Do not expand scope.
+- Other task agents may be editing this same deck IN PARALLEL. When you change an existing file, READ it first and make a targeted edit to just the part you need -- never overwrite a whole file you have not read. A blind full-file rewrite clobbers other agents' in-flight changes. Being a bit slower and careful here is the right tradeoff.
 - Update your progress VERY frequently: write a bare integer 0-100 to ${opts.progressPath} (e.g. \`echo 30 > ${opts.progressPath}\`) every time you advance -- at least every 10 points, or every 20 for properly small tasks. Start near 10, write 90 just before wrapping up. Never let it sit stale while you work.
 - Before finishing, write ${opts.notesPath}: a SHORT test guide for the user -- 2-4 brief sentences. Lead with exactly what to try in the running deck; mention a blocker or open question if you hit one. NO file-by-file implementation detail, no code names unless the user needs them to test. The user reads this verbatim when checking your work off.${wrapUp}
 - If you are truly blocked, write the blocker to the notes file and stop rather than guessing wildly.

package/dist/init.js

@@ -223,12 +223,15 @@ function hasPnpm() {
 // store is baked in, so this is near-instant (hardlinks from the store, no
 // download). Fall back to npm when pnpm isn't on PATH (e.g. a laptop that never
 // installed it). --prefer-offline uses the store/cache first; --ignore-scripts
-// skips dep build scripts (pnpm 10 gates them and exits non-zero otherwise, and
-// the deck's deps are all prebuilt pure JS that don't need them).
-function installDeps(projectDir) {
+// skips dep build scripts (pnpm 10+ gates them and exits non-zero otherwise,
+// and the deck's deps are all prebuilt pure JS that don't need them). `frozen`
+// installs straight from the shipped lockfile (skips resolution -> no network,
+// fast + deterministic); used in published mode where the kit lockfile matches.
+function installDeps(projectDir, frozen) {
     if (hasPnpm()) {
         console.log('Installing deps (pnpm)...');
-        execSync('pnpm install --prefer-offline --ignore-scripts', {
+        const frozenFlag = frozen ? '--frozen-lockfile ' : '';
+        execSync(`pnpm install ${frozenFlag}--prefer-offline --ignore-scripts`, {
             cwd: projectDir,
             stdio: 'inherit',
         });
@@ -259,10 +262,20 @@ export async function init(dir, opts = {}) {
     // Always install deps so the deck is ready to serve/edit immediately.
     // `--no-serve` only skips the serve step below (callers like the cloud
     // launcher run their own serve, but still want deps in place).
+    //
+    // Published kit decks ship a matching pnpm-lock.yaml -> frozen install (no
+    // resolution, no network; hardlinks from the template's warm store). Workspace
+    // decks rewrite the sdk to file:../../sdk, which the shipped (published)
+    // lockfile won't match -> drop it and let pnpm resolve. Bare decks have no
+    // lockfile -> non-frozen.
+    const lockPath = path.join(projectDir, 'pnpm-lock.yaml');
+    if (resolveScaffoldRefs().workspaceMode)
+        fs.rmSync(lockPath, { force: true });
+    const frozen = fs.existsSync(lockPath);
     console.log('');
     let installed = false;
     try {
-        installDeps(projectDir);
+        installDeps(projectDir, frozen);
         installed = true;
     }
     catch {