@playcademy/sandbox 0.10.1-beta.6 → 0.10.1-beta.8

package/dist/cli.js

@@ -1128,7 +1128,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@playcademy/sandbox",
-    version: "0.10.1-beta.6",
+    version: "0.10.1-beta.8",
     description: "Local development server for Playcademy game development",
     type: "module",
     exports: {
@@ -18645,7 +18645,10 @@ var init_table5 = __esm(() => {
     bookmarkCapturedAt: timestamp("bookmark_captured_at", { withTimezone: true }),
     isActive: boolean("is_active").notNull().default(false),
     resources: jsonb("resources").$type(),
-    deployedAt: timestamp("deployed_at", { withTimezone: true }).notNull().defaultNow()
+    deployedAt: timestamp("deployed_at", { withTimezone: true }).notNull().defaultNow(),
+    deployJobId: uuid("deploy_job_id").references(() => gameDeployJobs.id, {
+      onDelete: "set null"
+    })
   }, (table3) => [index("game_deployments_game_target_idx").on(table3.gameId, table3.target)]);
   gameDeployJobs = pgTable("game_deploy_jobs", {
     id: uuid("id").primaryKey().defaultRandom(),
@@ -30464,7 +30467,11 @@ class DeployJobService {
     const uploadDeps = this.buildUploadDeps();
     try {
       assertLease();
-      for await (const step of this.deps.runDeploy(game2.slug, request, user, uploadDeps, extractZipToDirectory)) {
+      for await (const step of this.deps.runDeploy(game2.slug, request, user, {
+        uploadDeps,
+        extractZip: extractZipToDirectory,
+        jobId
+      })) {
         assertLease();
         if (step.type === "status" && "message" in step.data && typeof step.data.message === "string") {
           const details = "details" in step.data && isEventDetails(step.data.details) ? step.data.details : undefined;
@@ -35892,9 +35899,9 @@ class DeployService {
     }
     return cf;
   }
-  async* deploy(slug, request, user, uploadDeps, extractZip) {
+  async* deploy(slug, request, user, options = {}) {
     const game2 = await this.deps.validateDeveloperAccessBySlug(user, slug);
-    const context2 = { slug, request, user, game: game2, uploadDeps, extractZip };
+    const context2 = { slug, request, user, game: game2, ...options };
     switch (request.target ?? "game") {
       case "dashboard": {
         yield* this.deployDashboard(context2);
@@ -35910,7 +35917,7 @@ class DeployService {
     }
   }
   async* deployGame(context2) {
-    const { slug, request, user, game: game2, uploadDeps, extractZip } = context2;
+    const { slug, request, user, game: game2, uploadDeps, extractZip, jobId } = context2;
     const cf = this.getCloudflare();
     const db2 = this.deps.db;
     const flags2 = this.validateGameRequest(request);
@@ -36015,7 +36022,8 @@ class DeployService {
       request,
       user,
       flags: flags2,
-      database: databaseOutcome
+      database: databaseOutcome,
+      jobId
     });
     if (request.pruneSecrets?.length) {
       yield* this.pruneManagedSecretsStep(game2.id, result.deploymentId, request.pruneSecrets);
@@ -36023,7 +36031,7 @@ class DeployService {
     yield { type: "complete", data: updatedGame };
   }
   async* deployDashboard(context2) {
-    const { slug, request, user, game: game2 } = context2;
+    const { slug, request, user, game: game2, jobId } = context2;
     const db2 = this.deps.db;
     const contract = this.validateDashboardRequest(request, context2.uploadDeps, context2.extractZip);
     const deploymentId = getDashboardDeploymentId(slug, this.deps.config.sstStage);
@@ -36113,7 +36121,8 @@ class DeployService {
       url: result.url,
       codeHash,
       resources: result.resources,
-      target: "dashboard"
+      target: "dashboard",
+      deployJobId: jobId
     });
     setAttribute("app.deploy.code_hash", codeHash);
     try {
@@ -36743,7 +36752,8 @@ class DeployService {
     request,
     user,
     flags: flags2,
-    database
+    database,
+    jobId
   }) {
     const { hasBackend, hasFrontend, hasMetadata } = flags2;
     const db2 = this.deps.db;
@@ -36758,7 +36768,8 @@ class DeployService {
       timeTravelBookmark: database.timeTravelBookmark,
       bookmarkCapturedAt: database.bookmarkCapturedAt,
       resources: result.resources,
-      target: "game"
+      target: "game",
+      deployJobId: jobId
     });
     await this.persistArtifactHashes(game2.id, {
       buildHash: hasFrontend ? request.buildHash : undefined,
@@ -37032,7 +37043,8 @@ class DeployService {
         timeTravelBookmark: record.timeTravelBookmark ?? null,
         bookmarkCapturedAt: record.bookmarkCapturedAt ?? null,
         resources: record.resources,
-        isActive: true
+        isActive: true,
+        deployJobId: record.deployJobId ?? null
       });
     });
   }
@@ -38455,7 +38467,7 @@ function createGameServices(deps) {
     uploadBucket: config3.uploadBucket,
     storage,
     validateDeveloperAccessBySlug: (user, slug) => game2.validateDeveloperAccessBySlug(user, slug),
-    runDeploy: (slug, request, user, uploadDeps, extractZip) => deploy.deploy(slug, request, user, uploadDeps, extractZip),
+    runDeploy: (slug, request, user, options) => deploy.deploy(slug, request, user, options),
     notifyDeploymentFailure: (failure) => deploy.notifyDeploymentFailure(failure)
   });
   const logs = new LogsService({
@@ -46851,6 +46863,95 @@ var init_kv_service = __esm(() => {
   init_errors2();
 });
 
+// ../utils/src/url.ts
+function publishableRepositoryUrl(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    return null;
+  }
+  if (url.protocol !== "https:" || url.username || url.password || url.search || url.hash) {
+    return null;
+  }
+  return value;
+}
+
+// ../api-core/src/services/releases.service.ts
+class ReleasesService {
+  deps;
+  constructor(deps) {
+    this.deps = deps;
+  }
+  async list() {
+    const rows = await this.deps.db.select(releaseColumns()).from(gameDeployments).innerJoin(games, eq(gameDeployments.gameId, games.id)).leftJoin(gameDeployJobs, eq(gameDeployments.deployJobId, gameDeployJobs.id)).where(and(activeWorkerDeployment(), listedGame())).orderBy(games.slug);
+    setAttributes({ "app.releases.count": rows.length });
+    return { releases: rows.map(toRelease) };
+  }
+  async get(slug, { history } = {}) {
+    const game2 = await this.deps.db.query.games.findFirst({
+      where: and(eq(games.slug, slug), listedGame()),
+      columns: { id: true }
+    });
+    if (!game2) {
+      throw new NotFoundError("Game", slug);
+    }
+    const rows = await this.deps.db.select(releaseColumns()).from(gameDeployments).innerJoin(games, eq(gameDeployments.gameId, games.id)).leftJoin(gameDeployJobs, eq(gameDeployments.deployJobId, gameDeployJobs.id)).where(and(eq(gameDeployments.gameId, game2.id), eq(gameDeployments.target, "game"))).orderBy(desc(gameDeployments.deployedAt)).limit(Math.max(1, history ?? 0));
+    setAttributes({
+      "app.releases.history_requested": history ?? 0,
+      "app.releases.history_rows": rows.length
+    });
+    const releases = rows.map(toRelease);
+    const current = releases[0] ?? null;
+    return history === undefined ? { current } : { current, history: releases };
+  }
+}
+function releaseColumns() {
+  return {
+    slug: games.slug,
+    url: games.deploymentUrl,
+    source: sql`${gameDeployJobs.request} -> 'source'`,
+    deployedAt: gameDeployments.deployedAt
+  };
+}
+function listedGame() {
+  return ne(games.visibility, "internal");
+}
+function activeWorkerDeployment() {
+  return and(eq(gameDeployments.isActive, true), eq(gameDeployments.target, "game"));
+}
+function toRelease(row) {
+  return {
+    slug: row.slug,
+    url: row.url,
+    source: normalizeSource(row.source),
+    deployedAt: row.deployedAt.toISOString()
+  };
+}
+function normalizeSource(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    return null;
+  }
+  const raw = value;
+  const repository = nullableString(raw.repository);
+  return {
+    repository: repository === null ? null : publishableRepositoryUrl(repository),
+    commit: nullableString(raw.commit),
+    branch: nullableString(raw.branch),
+    dirty: raw.dirty === true,
+    externalBuild: raw.externalBuild === true
+  };
+}
+function nullableString(value) {
+  return typeof value === "string" && value.length > 0 ? value : null;
+}
+var init_releases_service = __esm(() => {
+  init_drizzle_orm();
+  init_tables_index();
+  init_spans();
+  init_errors2();
+});
+
 // ../api-core/src/services/secrets.service.ts
 class SecretsService {
   deps;
@@ -47590,7 +47691,7 @@ var init_emoji = __esm(() => {
 function requestsBinding(binding) {
   return binding === true || Array.isArray(binding) && binding.length > 0;
 }
-var HttpUrlSchema, GameEmojiSchema, GamePermissionsSchema, GameMetadataRecordSchema, InsertGameSchema, UpdateGameSchema, InsertGameDeploymentSchema, InsertGameDeployJobSchema, InsertGameDeploymentStateSchema, UpsertGameMetadataSchema, PatchGameMetadataSchema, AddGameMemberSchema, UpdateGameMemberRoleSchema, AddGameDashboardUserSchema, VerifyGameDashboardLoginSchema, AcceptGameDashboardInviteSchema, AcceptGameDashboardResetSchema, ALLOWED_UPLOAD_EXTENSIONS, InitiateUploadSchema, AddCustomHostnameSchema, SetSecretsRequestSchema, SecretsDiffRequestSchema, SeedRequestSchema, SchemaInfoSchema, VerifyTokenSchema, KVSeedRequestSchema, DeployMigrationSchema, DeployDatabaseSchema, DatabaseResetDatabaseSchema, DatabaseResetRequestSchema, BaselineEvidenceSchema, DeployBaselineSchema, DeploymentStateBaselineSchema, MigrationRealignSchema, MigrationResolveSchema, DatabaseRestoreSchema, DeployBlockedReportSchema, DeployRequestSchema;
+var HttpUrlSchema, GameEmojiSchema, GamePermissionsSchema, GameMetadataRecordSchema, InsertGameSchema, UpdateGameSchema, InsertGameDeploymentSchema, InsertGameDeployJobSchema, InsertGameDeploymentStateSchema, UpsertGameMetadataSchema, PatchGameMetadataSchema, AddGameMemberSchema, UpdateGameMemberRoleSchema, AddGameDashboardUserSchema, VerifyGameDashboardLoginSchema, AcceptGameDashboardInviteSchema, AcceptGameDashboardResetSchema, ALLOWED_UPLOAD_EXTENSIONS, InitiateUploadSchema, AddCustomHostnameSchema, SetSecretsRequestSchema, SecretsDiffRequestSchema, SeedRequestSchema, SchemaInfoSchema, VerifyTokenSchema, KVSeedRequestSchema, DeployMigrationSchema, DeployDatabaseSchema, DatabaseResetDatabaseSchema, DatabaseResetRequestSchema, BaselineEvidenceSchema, DeployBaselineSchema, DeploySourceSchema, DeploymentStateBaselineSchema, MigrationRealignSchema, MigrationResolveSchema, DatabaseRestoreSchema, DeployBlockedReportSchema, DeployRequestSchema;
 var init_schemas2 = __esm(() => {
   init_drizzle_zod();
   init_esm();
@@ -47836,6 +47937,13 @@ var init_schemas2 = __esm(() => {
     message: "A baseline must claim something — migration history, a schema snapshot, or artifact hashes",
     path: ["lastAppliedMigrationTag"]
   });
+  DeploySourceSchema = exports_external.object({
+    repository: exports_external.string().url().nullable().transform((value) => value === null ? null : publishableRepositoryUrl(value)),
+    commit: exports_external.string().regex(/^[0-9a-f]{40}$/, "commit must be a full 40-character lowercase SHA").nullable(),
+    branch: exports_external.string().min(1).nullable(),
+    dirty: exports_external.boolean(),
+    externalBuild: exports_external.boolean().default(false)
+  });
   DeploymentStateBaselineSchema = exports_external.object({
     lastAppliedMigrationTag: exports_external.string().min(1).optional(),
     journal: exports_external.array(exports_external.object({
@@ -47907,6 +48015,7 @@ var init_schemas2 = __esm(() => {
     buildHash: exports_external.string().min(1).optional(),
     integrationsHash: exports_external.string().min(1).optional(),
     pruneSecrets: exports_external.array(exports_external.string().min(1)).optional(),
+    source: DeploySourceSchema.optional(),
     metadata: exports_external.object({
       displayName: exports_external.string().optional(),
       description: exports_external.string().optional(),
@@ -109825,6 +109934,7 @@ function createPlatformServices(deps) {
   const kv = new KVService({ db: db2, cloudflare: cloudflare2, validateDeveloperAccessBySlug });
   const secrets = new SecretsService({ db: db2, config: config5, cloudflare: cloudflare2, validateDeveloperAccessBySlug });
   const domain3 = new DomainService({ db: db2, cloudflare: cloudflare2, corsKvs, validateDeveloperAccessBySlug });
+  const releases = new ReleasesService({ db: db2 });
   const deploymentState = new DeploymentStateService({
     db: db2,
     config: config5,
@@ -109884,6 +109994,7 @@ function createPlatformServices(deps) {
     kv,
     secrets,
     domain: domain3,
+    releases,
     deploymentState,
     database,
     seed,
@@ -109902,6 +110013,7 @@ var init_platform2 = __esm(async () => {
   init_deployment_state_service();
   init_domain_service();
   init_kv_service();
+  init_releases_service();
   init_secrets_service();
   init_seed_service();
   init_upload_service();
@@ -167633,6 +167745,47 @@ var init_lti_controller = __esm(() => {
   });
 });
 
+// ../api-core/src/controllers/releases.controller.ts
+function requireNoQuery(url4) {
+  if (url4.search !== "") {
+    throw ApiError.badRequest("This endpoint takes no query parameters");
+  }
+}
+function parseHistoryParam(url4) {
+  if (url4.search === "") {
+    return;
+  }
+  const match3 = CANONICAL_HISTORY.exec(url4.search);
+  if (!match3) {
+    throw ApiError.badRequest(`The only supported query is ?history=N with N an integer between 1 and ${MAX_HISTORY}`);
+  }
+  return Number(match3[1]);
+}
+function cached3(body2) {
+  return Response.json(body2, {
+    headers: {
+      "Content-Type": "application/json",
+      "Cache-Control": CACHE_CONTROL2
+    }
+  });
+}
+async function list3(ctx) {
+  requireNoQuery(ctx.url);
+  return cached3(await ctx.services.releases.list());
+}
+async function get2(ctx) {
+  const slug2 = requireSlug(ctx.params.slug);
+  const history2 = parseHistoryParam(ctx.url);
+  return cached3(await ctx.services.releases.get(slug2, { history: history2 }));
+}
+var CACHE_CONTROL2 = "public, max-age=60", MAX_HISTORY = 100, CANONICAL_HISTORY, releases;
+var init_releases_controller = __esm(() => {
+  init_errors2();
+  init_utils7();
+  CANONICAL_HISTORY = /^\?history=([1-9]\d?|100)$/;
+  releases = defineControllerNames("releases", { list: list3, get: get2 });
+});
+
 // ../api-core/src/controllers/secrets.controller.ts
 var listKeys2, setSecrets, deleteSecret, diff, secrets;
 var init_secrets_controller = __esm(() => {
@@ -168795,6 +168948,7 @@ var init_controllers = __esm(() => {
   init_leaderboard_controller();
   init_logs_controller();
   init_lti_controller();
+  init_releases_controller();
   init_secrets_controller();
   init_seed_controller();
   init_session_controller();
@@ -169246,7 +169400,8 @@ var init_deploy = __esm(async () => {
         config: body2.config,
         bindings: body2.bindings,
         schema: body2.schema,
-        metadata: body2.metadata
+        metadata: body2.metadata,
+        source: body2.source
       },
       events,
       result: {

package/dist/server.js

@@ -1127,7 +1127,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@playcademy/sandbox",
-    version: "0.10.1-beta.6",
+    version: "0.10.1-beta.8",
     description: "Local development server for Playcademy game development",
     type: "module",
     exports: {
@@ -18644,7 +18644,10 @@ var init_table5 = __esm(() => {
     bookmarkCapturedAt: timestamp("bookmark_captured_at", { withTimezone: true }),
     isActive: boolean("is_active").notNull().default(false),
     resources: jsonb("resources").$type(),
-    deployedAt: timestamp("deployed_at", { withTimezone: true }).notNull().defaultNow()
+    deployedAt: timestamp("deployed_at", { withTimezone: true }).notNull().defaultNow(),
+    deployJobId: uuid("deploy_job_id").references(() => gameDeployJobs.id, {
+      onDelete: "set null"
+    })
   }, (table3) => [index("game_deployments_game_target_idx").on(table3.gameId, table3.target)]);
   gameDeployJobs = pgTable("game_deploy_jobs", {
     id: uuid("id").primaryKey().defaultRandom(),
@@ -30463,7 +30466,11 @@ class DeployJobService {
     const uploadDeps = this.buildUploadDeps();
     try {
       assertLease();
-      for await (const step of this.deps.runDeploy(game2.slug, request, user, uploadDeps, extractZipToDirectory)) {
+      for await (const step of this.deps.runDeploy(game2.slug, request, user, {
+        uploadDeps,
+        extractZip: extractZipToDirectory,
+        jobId
+      })) {
         assertLease();
         if (step.type === "status" && "message" in step.data && typeof step.data.message === "string") {
           const details = "details" in step.data && isEventDetails(step.data.details) ? step.data.details : undefined;
@@ -35891,9 +35898,9 @@ class DeployService {
     }
     return cf;
   }
-  async* deploy(slug, request, user, uploadDeps, extractZip) {
+  async* deploy(slug, request, user, options = {}) {
     const game2 = await this.deps.validateDeveloperAccessBySlug(user, slug);
-    const context2 = { slug, request, user, game: game2, uploadDeps, extractZip };
+    const context2 = { slug, request, user, game: game2, ...options };
     switch (request.target ?? "game") {
       case "dashboard": {
         yield* this.deployDashboard(context2);
@@ -35909,7 +35916,7 @@ class DeployService {
     }
   }
   async* deployGame(context2) {
-    const { slug, request, user, game: game2, uploadDeps, extractZip } = context2;
+    const { slug, request, user, game: game2, uploadDeps, extractZip, jobId } = context2;
     const cf = this.getCloudflare();
     const db2 = this.deps.db;
     const flags2 = this.validateGameRequest(request);
@@ -36014,7 +36021,8 @@ class DeployService {
       request,
       user,
       flags: flags2,
-      database: databaseOutcome
+      database: databaseOutcome,
+      jobId
     });
     if (request.pruneSecrets?.length) {
       yield* this.pruneManagedSecretsStep(game2.id, result.deploymentId, request.pruneSecrets);
@@ -36022,7 +36030,7 @@ class DeployService {
     yield { type: "complete", data: updatedGame };
   }
   async* deployDashboard(context2) {
-    const { slug, request, user, game: game2 } = context2;
+    const { slug, request, user, game: game2, jobId } = context2;
     const db2 = this.deps.db;
     const contract = this.validateDashboardRequest(request, context2.uploadDeps, context2.extractZip);
     const deploymentId = getDashboardDeploymentId(slug, this.deps.config.sstStage);
@@ -36112,7 +36120,8 @@ class DeployService {
       url: result.url,
       codeHash,
       resources: result.resources,
-      target: "dashboard"
+      target: "dashboard",
+      deployJobId: jobId
     });
     setAttribute("app.deploy.code_hash", codeHash);
     try {
@@ -36742,7 +36751,8 @@ class DeployService {
     request,
     user,
     flags: flags2,
-    database
+    database,
+    jobId
   }) {
     const { hasBackend, hasFrontend, hasMetadata } = flags2;
     const db2 = this.deps.db;
@@ -36757,7 +36767,8 @@ class DeployService {
       timeTravelBookmark: database.timeTravelBookmark,
       bookmarkCapturedAt: database.bookmarkCapturedAt,
       resources: result.resources,
-      target: "game"
+      target: "game",
+      deployJobId: jobId
     });
     await this.persistArtifactHashes(game2.id, {
       buildHash: hasFrontend ? request.buildHash : undefined,
@@ -37031,7 +37042,8 @@ class DeployService {
         timeTravelBookmark: record.timeTravelBookmark ?? null,
         bookmarkCapturedAt: record.bookmarkCapturedAt ?? null,
         resources: record.resources,
-        isActive: true
+        isActive: true,
+        deployJobId: record.deployJobId ?? null
       });
     });
   }
@@ -38454,7 +38466,7 @@ function createGameServices(deps) {
     uploadBucket: config3.uploadBucket,
     storage,
     validateDeveloperAccessBySlug: (user, slug) => game2.validateDeveloperAccessBySlug(user, slug),
-    runDeploy: (slug, request, user, uploadDeps, extractZip) => deploy.deploy(slug, request, user, uploadDeps, extractZip),
+    runDeploy: (slug, request, user, options) => deploy.deploy(slug, request, user, options),
     notifyDeploymentFailure: (failure) => deploy.notifyDeploymentFailure(failure)
   });
   const logs = new LogsService({
@@ -46850,6 +46862,95 @@ var init_kv_service = __esm(() => {
   init_errors2();
 });
 
+// ../utils/src/url.ts
+function publishableRepositoryUrl(value) {
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    return null;
+  }
+  if (url.protocol !== "https:" || url.username || url.password || url.search || url.hash) {
+    return null;
+  }
+  return value;
+}
+
+// ../api-core/src/services/releases.service.ts
+class ReleasesService {
+  deps;
+  constructor(deps) {
+    this.deps = deps;
+  }
+  async list() {
+    const rows = await this.deps.db.select(releaseColumns()).from(gameDeployments).innerJoin(games, eq(gameDeployments.gameId, games.id)).leftJoin(gameDeployJobs, eq(gameDeployments.deployJobId, gameDeployJobs.id)).where(and(activeWorkerDeployment(), listedGame())).orderBy(games.slug);
+    setAttributes({ "app.releases.count": rows.length });
+    return { releases: rows.map(toRelease) };
+  }
+  async get(slug, { history } = {}) {
+    const game2 = await this.deps.db.query.games.findFirst({
+      where: and(eq(games.slug, slug), listedGame()),
+      columns: { id: true }
+    });
+    if (!game2) {
+      throw new NotFoundError("Game", slug);
+    }
+    const rows = await this.deps.db.select(releaseColumns()).from(gameDeployments).innerJoin(games, eq(gameDeployments.gameId, games.id)).leftJoin(gameDeployJobs, eq(gameDeployments.deployJobId, gameDeployJobs.id)).where(and(eq(gameDeployments.gameId, game2.id), eq(gameDeployments.target, "game"))).orderBy(desc(gameDeployments.deployedAt)).limit(Math.max(1, history ?? 0));
+    setAttributes({
+      "app.releases.history_requested": history ?? 0,
+      "app.releases.history_rows": rows.length
+    });
+    const releases = rows.map(toRelease);
+    const current = releases[0] ?? null;
+    return history === undefined ? { current } : { current, history: releases };
+  }
+}
+function releaseColumns() {
+  return {
+    slug: games.slug,
+    url: games.deploymentUrl,
+    source: sql`${gameDeployJobs.request} -> 'source'`,
+    deployedAt: gameDeployments.deployedAt
+  };
+}
+function listedGame() {
+  return ne(games.visibility, "internal");
+}
+function activeWorkerDeployment() {
+  return and(eq(gameDeployments.isActive, true), eq(gameDeployments.target, "game"));
+}
+function toRelease(row) {
+  return {
+    slug: row.slug,
+    url: row.url,
+    source: normalizeSource(row.source),
+    deployedAt: row.deployedAt.toISOString()
+  };
+}
+function normalizeSource(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    return null;
+  }
+  const raw = value;
+  const repository = nullableString(raw.repository);
+  return {
+    repository: repository === null ? null : publishableRepositoryUrl(repository),
+    commit: nullableString(raw.commit),
+    branch: nullableString(raw.branch),
+    dirty: raw.dirty === true,
+    externalBuild: raw.externalBuild === true
+  };
+}
+function nullableString(value) {
+  return typeof value === "string" && value.length > 0 ? value : null;
+}
+var init_releases_service = __esm(() => {
+  init_drizzle_orm();
+  init_tables_index();
+  init_spans();
+  init_errors2();
+});
+
 // ../api-core/src/services/secrets.service.ts
 class SecretsService {
   deps;
@@ -47589,7 +47690,7 @@ var init_emoji = __esm(() => {
 function requestsBinding(binding) {
   return binding === true || Array.isArray(binding) && binding.length > 0;
 }
-var HttpUrlSchema, GameEmojiSchema, GamePermissionsSchema, GameMetadataRecordSchema, InsertGameSchema, UpdateGameSchema, InsertGameDeploymentSchema, InsertGameDeployJobSchema, InsertGameDeploymentStateSchema, UpsertGameMetadataSchema, PatchGameMetadataSchema, AddGameMemberSchema, UpdateGameMemberRoleSchema, AddGameDashboardUserSchema, VerifyGameDashboardLoginSchema, AcceptGameDashboardInviteSchema, AcceptGameDashboardResetSchema, ALLOWED_UPLOAD_EXTENSIONS, InitiateUploadSchema, AddCustomHostnameSchema, SetSecretsRequestSchema, SecretsDiffRequestSchema, SeedRequestSchema, SchemaInfoSchema, VerifyTokenSchema, KVSeedRequestSchema, DeployMigrationSchema, DeployDatabaseSchema, DatabaseResetDatabaseSchema, DatabaseResetRequestSchema, BaselineEvidenceSchema, DeployBaselineSchema, DeploymentStateBaselineSchema, MigrationRealignSchema, MigrationResolveSchema, DatabaseRestoreSchema, DeployBlockedReportSchema, DeployRequestSchema;
+var HttpUrlSchema, GameEmojiSchema, GamePermissionsSchema, GameMetadataRecordSchema, InsertGameSchema, UpdateGameSchema, InsertGameDeploymentSchema, InsertGameDeployJobSchema, InsertGameDeploymentStateSchema, UpsertGameMetadataSchema, PatchGameMetadataSchema, AddGameMemberSchema, UpdateGameMemberRoleSchema, AddGameDashboardUserSchema, VerifyGameDashboardLoginSchema, AcceptGameDashboardInviteSchema, AcceptGameDashboardResetSchema, ALLOWED_UPLOAD_EXTENSIONS, InitiateUploadSchema, AddCustomHostnameSchema, SetSecretsRequestSchema, SecretsDiffRequestSchema, SeedRequestSchema, SchemaInfoSchema, VerifyTokenSchema, KVSeedRequestSchema, DeployMigrationSchema, DeployDatabaseSchema, DatabaseResetDatabaseSchema, DatabaseResetRequestSchema, BaselineEvidenceSchema, DeployBaselineSchema, DeploySourceSchema, DeploymentStateBaselineSchema, MigrationRealignSchema, MigrationResolveSchema, DatabaseRestoreSchema, DeployBlockedReportSchema, DeployRequestSchema;
 var init_schemas2 = __esm(() => {
   init_drizzle_zod();
   init_esm();
@@ -47835,6 +47936,13 @@ var init_schemas2 = __esm(() => {
     message: "A baseline must claim something — migration history, a schema snapshot, or artifact hashes",
     path: ["lastAppliedMigrationTag"]
   });
+  DeploySourceSchema = exports_external.object({
+    repository: exports_external.string().url().nullable().transform((value) => value === null ? null : publishableRepositoryUrl(value)),
+    commit: exports_external.string().regex(/^[0-9a-f]{40}$/, "commit must be a full 40-character lowercase SHA").nullable(),
+    branch: exports_external.string().min(1).nullable(),
+    dirty: exports_external.boolean(),
+    externalBuild: exports_external.boolean().default(false)
+  });
   DeploymentStateBaselineSchema = exports_external.object({
     lastAppliedMigrationTag: exports_external.string().min(1).optional(),
     journal: exports_external.array(exports_external.object({
@@ -47906,6 +48014,7 @@ var init_schemas2 = __esm(() => {
     buildHash: exports_external.string().min(1).optional(),
     integrationsHash: exports_external.string().min(1).optional(),
     pruneSecrets: exports_external.array(exports_external.string().min(1)).optional(),
+    source: DeploySourceSchema.optional(),
     metadata: exports_external.object({
       displayName: exports_external.string().optional(),
       description: exports_external.string().optional(),
@@ -109824,6 +109933,7 @@ function createPlatformServices(deps) {
   const kv = new KVService({ db: db2, cloudflare: cloudflare2, validateDeveloperAccessBySlug });
   const secrets = new SecretsService({ db: db2, config: config5, cloudflare: cloudflare2, validateDeveloperAccessBySlug });
   const domain3 = new DomainService({ db: db2, cloudflare: cloudflare2, corsKvs, validateDeveloperAccessBySlug });
+  const releases = new ReleasesService({ db: db2 });
   const deploymentState = new DeploymentStateService({
     db: db2,
     config: config5,
@@ -109883,6 +109993,7 @@ function createPlatformServices(deps) {
     kv,
     secrets,
     domain: domain3,
+    releases,
     deploymentState,
     database,
     seed,
@@ -109901,6 +110012,7 @@ var init_platform2 = __esm(async () => {
   init_deployment_state_service();
   init_domain_service();
   init_kv_service();
+  init_releases_service();
   init_secrets_service();
   init_seed_service();
   init_upload_service();
@@ -167632,6 +167744,47 @@ var init_lti_controller = __esm(() => {
   });
 });
 
+// ../api-core/src/controllers/releases.controller.ts
+function requireNoQuery(url4) {
+  if (url4.search !== "") {
+    throw ApiError.badRequest("This endpoint takes no query parameters");
+  }
+}
+function parseHistoryParam(url4) {
+  if (url4.search === "") {
+    return;
+  }
+  const match3 = CANONICAL_HISTORY.exec(url4.search);
+  if (!match3) {
+    throw ApiError.badRequest(`The only supported query is ?history=N with N an integer between 1 and ${MAX_HISTORY}`);
+  }
+  return Number(match3[1]);
+}
+function cached3(body2) {
+  return Response.json(body2, {
+    headers: {
+      "Content-Type": "application/json",
+      "Cache-Control": CACHE_CONTROL2
+    }
+  });
+}
+async function list3(ctx) {
+  requireNoQuery(ctx.url);
+  return cached3(await ctx.services.releases.list());
+}
+async function get2(ctx) {
+  const slug2 = requireSlug(ctx.params.slug);
+  const history2 = parseHistoryParam(ctx.url);
+  return cached3(await ctx.services.releases.get(slug2, { history: history2 }));
+}
+var CACHE_CONTROL2 = "public, max-age=60", MAX_HISTORY = 100, CANONICAL_HISTORY, releases;
+var init_releases_controller = __esm(() => {
+  init_errors2();
+  init_utils7();
+  CANONICAL_HISTORY = /^\?history=([1-9]\d?|100)$/;
+  releases = defineControllerNames("releases", { list: list3, get: get2 });
+});
+
 // ../api-core/src/controllers/secrets.controller.ts
 var listKeys2, setSecrets, deleteSecret, diff, secrets;
 var init_secrets_controller = __esm(() => {
@@ -168794,6 +168947,7 @@ var init_controllers = __esm(() => {
   init_leaderboard_controller();
   init_logs_controller();
   init_lti_controller();
+  init_releases_controller();
   init_secrets_controller();
   init_seed_controller();
   init_session_controller();
@@ -169245,7 +169399,8 @@ var init_deploy = __esm(async () => {
         config: body2.config,
         bindings: body2.bindings,
         schema: body2.schema,
-        metadata: body2.metadata
+        metadata: body2.metadata,
+        source: body2.source
       },
       events,
       result: {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@playcademy/sandbox",
-    "version": "0.10.1-beta.6",
+    "version": "0.10.1-beta.8",
     "description": "Local development server for Playcademy game development",
     "type": "module",
     "exports": {