@playcademy/sandbox 0.12.2-beta.4 → 0.12.2-beta.5

package/dist/cli.js

@@ -2517,7 +2517,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@playcademy/sandbox",
-    version: "0.12.2-beta.4",
+    version: "0.12.2-beta.5",
     description: "Local development server for Playcademy game development",
     type: "module",
     exports: {
@@ -20917,6 +20917,7 @@ var init_table8 = __esm(() => {
     gameId: uuid("game_id").notNull().references(() => games.id, { onDelete: "cascade" }),
     parentOrigin: text("parent_origin").notNull(),
     timebackCourseId: text("timeback_course_id"),
+    contextId: text("context_id"),
     passHash: text("pass_hash").unique(),
     passExpiresAt: timestamp("pass_expires_at", { withTimezone: true }).notNull(),
     redeemedAt: timestamp("redeemed_at", { withTimezone: true }),
@@ -50823,13 +50824,16 @@ function isCanonicalOrigin(value) {
   }
   return url.protocol === "https:" || url.protocol === "http:" && isLocalHostname(url.hostname);
 }
-var LOCAL_HOSTNAMES, EmbedOriginSchema, EmbedPartnerClientIdSchema, EnsureEmbedPartnerSchema, AddEmbedPartnerOriginSchema, CreateEmbedLaunchSchema, RedeemEmbedPassSchema;
+var LOCAL_HOSTNAMES, EmbedOriginSchema, EmbedContextIdSchema, EmbedPartnerClientIdSchema, EnsureEmbedPartnerSchema, AddEmbedPartnerOriginSchema, CreateEmbedLaunchSchema, RedeemEmbedPassSchema;
 var init_schemas5 = __esm(() => {
   init_esm();
   LOCAL_HOSTNAMES = new Set(["localhost", "127.0.0.1"]);
   EmbedOriginSchema = stringType().refine(isCanonicalOrigin, {
     message: "Origin must be a bare https origin like https://example.com, with no path or slash"
   });
+  EmbedContextIdSchema = stringType().regex(/^[A-Za-z0-9._~-]{1,128}$/, {
+    message: "contextId must be 1-128 URL-safe characters (letters, digits, . _ ~ -)"
+  });
   EmbedPartnerClientIdSchema = stringType().trim().min(1).max(200);
   EnsureEmbedPartnerSchema = objectType({
     name: stringType().trim().min(1).max(100)
@@ -50841,7 +50845,8 @@ var init_schemas5 = __esm(() => {
     timebackId: stringType().trim().min(1).max(200),
     gameSlug: stringType().trim().min(1).max(100),
     parentOrigin: EmbedOriginSchema,
-    timebackCourseId: stringType().trim().min(1).max(200).optional()
+    timebackCourseId: stringType().trim().min(1).max(200).optional(),
+    contextId: EmbedContextIdSchema.optional()
   }).strict();
   RedeemEmbedPassSchema = objectType({
     pass: stringType().min(1).max(200),
@@ -95683,6 +95688,13 @@ var init_embed_util = __esm(() => {
 });
 
 // ../api-core/src/services/embed.service.ts
+async function scopedContextId(partnerId, contextId) {
+  return sha256Hex(`${partnerId}:${contextId}`);
+}
+function launchTokenClaims(launch) {
+  return launch.contextId ? { contextId: launch.contextId } : {};
+}
+
 class EmbedService {
   deps;
   constructor(deps) {
@@ -95726,6 +95738,7 @@ class EmbedService {
       gameId: game.id,
       parentOrigin: input.parentOrigin,
       timebackCourseId: input.timebackCourseId ?? null,
+      contextId: input.contextId ? await scopedContextId(partner.id, input.contextId) : null,
       passHash: await sha256Hex(pass),
       passExpiresAt,
       expiresAt: new Date(now + EMBED_LAUNCH_TTL_MS)
@@ -95733,7 +95746,11 @@ class EmbedService {
     if (!launch) {
       throw new InternalError("Failed to create embed launch");
     }
-    setAttributes({ "app.launch.id": launch.id, "app.user.id": user.id });
+    setAttributes({
+      "app.launch.id": launch.id,
+      "app.user.id": user.id,
+      "app.embed.has_context": input.contextId !== undefined
+    });
     return { launchId: launch.id, pass, passExpiresAt, gameSlug: game.slug };
   }
   async redeemLaunch(input, timeZone) {
@@ -95748,7 +95765,7 @@ class EmbedService {
       const [game, profile, token] = await Promise.all([
         this.deps.getGameForStudent(launch.gameId, user),
         this.deps.getGameProfile(user, launch.gameId, timeZone),
-        this.deps.mintGameToken(launch.gameId, user.id)
+        this.deps.mintGameToken(launch.gameId, user.id, launchTokenClaims(launch))
       ]);
       await this.deps.db.update(embedLaunches).set({ redeemedAt: new Date }).where(eq(embedLaunches.id, launch.id));
       return {
@@ -95780,7 +95797,7 @@ class EmbedService {
     if (outcome) {
       throw new AccessDeniedError("This launch has ended");
     }
-    return this.deps.mintGameToken(launch.gameId, launch.userId);
+    return this.deps.mintGameToken(launch.gameId, launch.userId, launchTokenClaims(launch));
   }
   async endLaunch(launchId) {
     await this.deps.db.update(embedLaunches).set({ endedAt: sql`coalesce(${embedLaunches.endedAt}, now())`, passHash: null }).where(eq(embedLaunches.id, launchId));
@@ -96882,10 +96899,10 @@ function createSandboxAuthProvider() {
       }
       return deleted;
     },
-    async mintGameToken(gameId, userId) {
+    async mintGameToken(gameId, userId, claims) {
       const header = btoa(JSON.stringify({ alg: "none", typ: "sandbox" }));
       const exp = Math.floor(Date.now() / 1000) + 15 * 60;
-      const payload = btoa(JSON.stringify({ sub: gameId, uid: userId, exp }));
+      const payload = btoa(JSON.stringify({ ...claims, sub: gameId, uid: userId, exp }));
       const token = `${header}.${payload}.sandbox`;
       return { token, exp: exp * 1000 };
     },

package/dist/server.js

@@ -697,7 +697,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@playcademy/sandbox",
-    version: "0.12.2-beta.4",
+    version: "0.12.2-beta.5",
     description: "Local development server for Playcademy game development",
     type: "module",
     exports: {
@@ -19097,6 +19097,7 @@ var init_table8 = __esm(() => {
     gameId: uuid("game_id").notNull().references(() => games.id, { onDelete: "cascade" }),
     parentOrigin: text("parent_origin").notNull(),
     timebackCourseId: text("timeback_course_id"),
+    contextId: text("context_id"),
     passHash: text("pass_hash").unique(),
     passExpiresAt: timestamp("pass_expires_at", { withTimezone: true }).notNull(),
     redeemedAt: timestamp("redeemed_at", { withTimezone: true }),
@@ -49003,13 +49004,16 @@ function isCanonicalOrigin(value) {
   }
   return url.protocol === "https:" || url.protocol === "http:" && isLocalHostname(url.hostname);
 }
-var LOCAL_HOSTNAMES, EmbedOriginSchema, EmbedPartnerClientIdSchema, EnsureEmbedPartnerSchema, AddEmbedPartnerOriginSchema, CreateEmbedLaunchSchema, RedeemEmbedPassSchema;
+var LOCAL_HOSTNAMES, EmbedOriginSchema, EmbedContextIdSchema, EmbedPartnerClientIdSchema, EnsureEmbedPartnerSchema, AddEmbedPartnerOriginSchema, CreateEmbedLaunchSchema, RedeemEmbedPassSchema;
 var init_schemas5 = __esm(() => {
   init_esm();
   LOCAL_HOSTNAMES = new Set(["localhost", "127.0.0.1"]);
   EmbedOriginSchema = stringType().refine(isCanonicalOrigin, {
     message: "Origin must be a bare https origin like https://example.com, with no path or slash"
   });
+  EmbedContextIdSchema = stringType().regex(/^[A-Za-z0-9._~-]{1,128}$/, {
+    message: "contextId must be 1-128 URL-safe characters (letters, digits, . _ ~ -)"
+  });
   EmbedPartnerClientIdSchema = stringType().trim().min(1).max(200);
   EnsureEmbedPartnerSchema = objectType({
     name: stringType().trim().min(1).max(100)
@@ -49021,7 +49025,8 @@ var init_schemas5 = __esm(() => {
     timebackId: stringType().trim().min(1).max(200),
     gameSlug: stringType().trim().min(1).max(100),
     parentOrigin: EmbedOriginSchema,
-    timebackCourseId: stringType().trim().min(1).max(200).optional()
+    timebackCourseId: stringType().trim().min(1).max(200).optional(),
+    contextId: EmbedContextIdSchema.optional()
   }).strict();
   RedeemEmbedPassSchema = objectType({
     pass: stringType().min(1).max(200),
@@ -93863,6 +93868,13 @@ var init_embed_util = __esm(() => {
 });
 
 // ../api-core/src/services/embed.service.ts
+async function scopedContextId(partnerId, contextId) {
+  return sha256Hex(`${partnerId}:${contextId}`);
+}
+function launchTokenClaims(launch) {
+  return launch.contextId ? { contextId: launch.contextId } : {};
+}
+
 class EmbedService {
   deps;
   constructor(deps) {
@@ -93906,6 +93918,7 @@ class EmbedService {
       gameId: game.id,
       parentOrigin: input.parentOrigin,
       timebackCourseId: input.timebackCourseId ?? null,
+      contextId: input.contextId ? await scopedContextId(partner.id, input.contextId) : null,
       passHash: await sha256Hex(pass),
       passExpiresAt,
       expiresAt: new Date(now + EMBED_LAUNCH_TTL_MS)
@@ -93913,7 +93926,11 @@ class EmbedService {
     if (!launch) {
       throw new InternalError("Failed to create embed launch");
     }
-    setAttributes({ "app.launch.id": launch.id, "app.user.id": user.id });
+    setAttributes({
+      "app.launch.id": launch.id,
+      "app.user.id": user.id,
+      "app.embed.has_context": input.contextId !== undefined
+    });
     return { launchId: launch.id, pass, passExpiresAt, gameSlug: game.slug };
   }
   async redeemLaunch(input, timeZone) {
@@ -93928,7 +93945,7 @@ class EmbedService {
       const [game, profile, token] = await Promise.all([
         this.deps.getGameForStudent(launch.gameId, user),
         this.deps.getGameProfile(user, launch.gameId, timeZone),
-        this.deps.mintGameToken(launch.gameId, user.id)
+        this.deps.mintGameToken(launch.gameId, user.id, launchTokenClaims(launch))
       ]);
       await this.deps.db.update(embedLaunches).set({ redeemedAt: new Date }).where(eq(embedLaunches.id, launch.id));
       return {
@@ -93960,7 +93977,7 @@ class EmbedService {
     if (outcome) {
       throw new AccessDeniedError("This launch has ended");
     }
-    return this.deps.mintGameToken(launch.gameId, launch.userId);
+    return this.deps.mintGameToken(launch.gameId, launch.userId, launchTokenClaims(launch));
   }
   async endLaunch(launchId) {
     await this.deps.db.update(embedLaunches).set({ endedAt: sql`coalesce(${embedLaunches.endedAt}, now())`, passHash: null }).where(eq(embedLaunches.id, launchId));
@@ -95062,10 +95079,10 @@ function createSandboxAuthProvider() {
       }
       return deleted;
     },
-    async mintGameToken(gameId, userId) {
+    async mintGameToken(gameId, userId, claims) {
       const header = btoa(JSON.stringify({ alg: "none", typ: "sandbox" }));
       const exp = Math.floor(Date.now() / 1000) + 15 * 60;
-      const payload = btoa(JSON.stringify({ sub: gameId, uid: userId, exp }));
+      const payload = btoa(JSON.stringify({ ...claims, sub: gameId, uid: userId, exp }));
       const token = `${header}.${payload}.sandbox`;
       return { token, exp: exp * 1000 };
     },

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@playcademy/sandbox",
-    "version": "0.12.2-beta.4",
+    "version": "0.12.2-beta.5",
     "description": "Local development server for Playcademy game development",
     "type": "module",
     "exports": {