@playcademy/sandbox 0.12.2-beta.4 → 0.12.2-beta.6

package/dist/cli.js

@@ -2517,7 +2517,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@playcademy/sandbox",
-    version: "0.12.2-beta.4",
+    version: "0.12.2-beta.6",
     description: "Local development server for Playcademy game development",
     type: "module",
     exports: {
@@ -20895,12 +20895,13 @@ var init_table7 = __esm(() => {
 });
 
 // ../data/src/domains/embed/table.ts
-var embedPartners, embedLaunches, embedLaunchesRelations;
+var embedContextRoleEnum, embedPartners, embedLaunches, embedLaunchesRelations;
 var init_table8 = __esm(() => {
   init_drizzle_orm();
   init_pg_core();
   init_table5();
   init_table3();
+  embedContextRoleEnum = pgEnum("embed_context_role", ["host"]);
   embedPartners = pgTable("embed_partners", {
     id: uuid("id").primaryKey().defaultRandom(),
     name: text("name").notNull(),
@@ -20917,6 +20918,8 @@ var init_table8 = __esm(() => {
     gameId: uuid("game_id").notNull().references(() => games.id, { onDelete: "cascade" }),
     parentOrigin: text("parent_origin").notNull(),
     timebackCourseId: text("timeback_course_id"),
+    contextId: text("context_id"),
+    contextRole: embedContextRoleEnum("context_role"),
     passHash: text("pass_hash").unique(),
     passExpiresAt: timestamp("pass_expires_at", { withTimezone: true }).notNull(),
     redeemedAt: timestamp("redeemed_at", { withTimezone: true }),
@@ -20956,6 +20959,7 @@ __export(exports_tables_index, {
   deploymentProviderEnum: () => deploymentProviderEnum,
   deploymentTargetEnum: () => deploymentTargetEnum,
   developerStatusEnum: () => developerStatusEnum,
+  embedContextRoleEnum: () => embedContextRoleEnum,
   embedLaunches: () => embedLaunches,
   embedLaunchesRelations: () => embedLaunchesRelations,
   embedPartners: () => embedPartners,
@@ -50823,13 +50827,21 @@ function isCanonicalOrigin(value) {
   }
   return url.protocol === "https:" || url.protocol === "http:" && isLocalHostname(url.hostname);
 }
-var LOCAL_HOSTNAMES, EmbedOriginSchema, EmbedPartnerClientIdSchema, EnsureEmbedPartnerSchema, AddEmbedPartnerOriginSchema, CreateEmbedLaunchSchema, RedeemEmbedPassSchema;
+var LOCAL_HOSTNAMES, EmbedOriginSchema, EmbedContextIdSchema, EmbedContextSchema, EmbedPartnerClientIdSchema, EnsureEmbedPartnerSchema, AddEmbedPartnerOriginSchema, CreateEmbedLaunchSchema, RedeemEmbedPassSchema;
 var init_schemas5 = __esm(() => {
   init_esm();
+  init_table8();
   LOCAL_HOSTNAMES = new Set(["localhost", "127.0.0.1"]);
   EmbedOriginSchema = stringType().refine(isCanonicalOrigin, {
     message: "Origin must be a bare https origin like https://example.com, with no path or slash"
   });
+  EmbedContextIdSchema = stringType().regex(/^[A-Za-z0-9._~-]{1,128}$/, {
+    message: "context.id must be 1-128 URL-safe characters (letters, digits, . _ ~ -)"
+  });
+  EmbedContextSchema = objectType({
+    id: EmbedContextIdSchema,
+    role: enumType(embedContextRoleEnum.enumValues).optional()
+  }).strict();
   EmbedPartnerClientIdSchema = stringType().trim().min(1).max(200);
   EnsureEmbedPartnerSchema = objectType({
     name: stringType().trim().min(1).max(100)
@@ -50841,7 +50853,8 @@ var init_schemas5 = __esm(() => {
     timebackId: stringType().trim().min(1).max(200),
     gameSlug: stringType().trim().min(1).max(100),
     parentOrigin: EmbedOriginSchema,
-    timebackCourseId: stringType().trim().min(1).max(200).optional()
+    timebackCourseId: stringType().trim().min(1).max(200).optional(),
+    context: EmbedContextSchema.optional()
   }).strict();
   RedeemEmbedPassSchema = objectType({
     pass: stringType().min(1).max(200),
@@ -95683,6 +95696,21 @@ var init_embed_util = __esm(() => {
 });
 
 // ../api-core/src/services/embed.service.ts
+async function scopedContextId(partnerId, contextId) {
+  return sha256Hex(`${partnerId}:${contextId}`);
+}
+function launchTokenClaims(launch) {
+  if (!launch.contextId) {
+    return {};
+  }
+  return {
+    context: {
+      id: launch.contextId,
+      ...launch.contextRole && { role: launch.contextRole }
+    }
+  };
+}
+
 class EmbedService {
   deps;
   constructor(deps) {
@@ -95726,6 +95754,8 @@ class EmbedService {
       gameId: game.id,
       parentOrigin: input.parentOrigin,
       timebackCourseId: input.timebackCourseId ?? null,
+      contextId: input.context ? await scopedContextId(partner.id, input.context.id) : null,
+      contextRole: input.context?.role ?? null,
       passHash: await sha256Hex(pass),
       passExpiresAt,
       expiresAt: new Date(now + EMBED_LAUNCH_TTL_MS)
@@ -95733,7 +95763,12 @@ class EmbedService {
     if (!launch) {
       throw new InternalError("Failed to create embed launch");
     }
-    setAttributes({ "app.launch.id": launch.id, "app.user.id": user.id });
+    setAttributes({
+      "app.launch.id": launch.id,
+      "app.user.id": user.id,
+      "app.embed.has_context": input.context !== undefined,
+      ...input.context?.role && { "app.embed.context_role": input.context.role }
+    });
     return { launchId: launch.id, pass, passExpiresAt, gameSlug: game.slug };
   }
   async redeemLaunch(input, timeZone) {
@@ -95748,7 +95783,7 @@ class EmbedService {
       const [game, profile, token] = await Promise.all([
         this.deps.getGameForStudent(launch.gameId, user),
         this.deps.getGameProfile(user, launch.gameId, timeZone),
-        this.deps.mintGameToken(launch.gameId, user.id)
+        this.deps.mintGameToken(launch.gameId, user.id, launchTokenClaims(launch))
       ]);
       await this.deps.db.update(embedLaunches).set({ redeemedAt: new Date }).where(eq(embedLaunches.id, launch.id));
       return {
@@ -95780,7 +95815,7 @@ class EmbedService {
     if (outcome) {
       throw new AccessDeniedError("This launch has ended");
     }
-    return this.deps.mintGameToken(launch.gameId, launch.userId);
+    return this.deps.mintGameToken(launch.gameId, launch.userId, launchTokenClaims(launch));
   }
   async endLaunch(launchId) {
     await this.deps.db.update(embedLaunches).set({ endedAt: sql`coalesce(${embedLaunches.endedAt}, now())`, passHash: null }).where(eq(embedLaunches.id, launchId));
@@ -96882,10 +96917,10 @@ function createSandboxAuthProvider() {
       }
       return deleted;
     },
-    async mintGameToken(gameId, userId) {
+    async mintGameToken(gameId, userId, claims) {
       const header = btoa(JSON.stringify({ alg: "none", typ: "sandbox" }));
       const exp = Math.floor(Date.now() / 1000) + 15 * 60;
-      const payload = btoa(JSON.stringify({ sub: gameId, uid: userId, exp }));
+      const payload = btoa(JSON.stringify({ ...claims, sub: gameId, uid: userId, exp }));
       const token = `${header}.${payload}.sandbox`;
       return { token, exp: exp * 1000 };
     },

package/dist/server.js

@@ -697,7 +697,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@playcademy/sandbox",
-    version: "0.12.2-beta.4",
+    version: "0.12.2-beta.6",
     description: "Local development server for Playcademy game development",
     type: "module",
     exports: {
@@ -19075,12 +19075,13 @@ var init_table7 = __esm(() => {
 });
 
 // ../data/src/domains/embed/table.ts
-var embedPartners, embedLaunches, embedLaunchesRelations;
+var embedContextRoleEnum, embedPartners, embedLaunches, embedLaunchesRelations;
 var init_table8 = __esm(() => {
   init_drizzle_orm();
   init_pg_core();
   init_table5();
   init_table3();
+  embedContextRoleEnum = pgEnum("embed_context_role", ["host"]);
   embedPartners = pgTable("embed_partners", {
     id: uuid("id").primaryKey().defaultRandom(),
     name: text("name").notNull(),
@@ -19097,6 +19098,8 @@ var init_table8 = __esm(() => {
     gameId: uuid("game_id").notNull().references(() => games.id, { onDelete: "cascade" }),
     parentOrigin: text("parent_origin").notNull(),
     timebackCourseId: text("timeback_course_id"),
+    contextId: text("context_id"),
+    contextRole: embedContextRoleEnum("context_role"),
     passHash: text("pass_hash").unique(),
     passExpiresAt: timestamp("pass_expires_at", { withTimezone: true }).notNull(),
     redeemedAt: timestamp("redeemed_at", { withTimezone: true }),
@@ -19136,6 +19139,7 @@ __export(exports_tables_index, {
   deploymentProviderEnum: () => deploymentProviderEnum,
   deploymentTargetEnum: () => deploymentTargetEnum,
   developerStatusEnum: () => developerStatusEnum,
+  embedContextRoleEnum: () => embedContextRoleEnum,
   embedLaunches: () => embedLaunches,
   embedLaunchesRelations: () => embedLaunchesRelations,
   embedPartners: () => embedPartners,
@@ -49003,13 +49007,21 @@ function isCanonicalOrigin(value) {
   }
   return url.protocol === "https:" || url.protocol === "http:" && isLocalHostname(url.hostname);
 }
-var LOCAL_HOSTNAMES, EmbedOriginSchema, EmbedPartnerClientIdSchema, EnsureEmbedPartnerSchema, AddEmbedPartnerOriginSchema, CreateEmbedLaunchSchema, RedeemEmbedPassSchema;
+var LOCAL_HOSTNAMES, EmbedOriginSchema, EmbedContextIdSchema, EmbedContextSchema, EmbedPartnerClientIdSchema, EnsureEmbedPartnerSchema, AddEmbedPartnerOriginSchema, CreateEmbedLaunchSchema, RedeemEmbedPassSchema;
 var init_schemas5 = __esm(() => {
   init_esm();
+  init_table8();
   LOCAL_HOSTNAMES = new Set(["localhost", "127.0.0.1"]);
   EmbedOriginSchema = stringType().refine(isCanonicalOrigin, {
     message: "Origin must be a bare https origin like https://example.com, with no path or slash"
   });
+  EmbedContextIdSchema = stringType().regex(/^[A-Za-z0-9._~-]{1,128}$/, {
+    message: "context.id must be 1-128 URL-safe characters (letters, digits, . _ ~ -)"
+  });
+  EmbedContextSchema = objectType({
+    id: EmbedContextIdSchema,
+    role: enumType(embedContextRoleEnum.enumValues).optional()
+  }).strict();
   EmbedPartnerClientIdSchema = stringType().trim().min(1).max(200);
   EnsureEmbedPartnerSchema = objectType({
     name: stringType().trim().min(1).max(100)
@@ -49021,7 +49033,8 @@ var init_schemas5 = __esm(() => {
     timebackId: stringType().trim().min(1).max(200),
     gameSlug: stringType().trim().min(1).max(100),
     parentOrigin: EmbedOriginSchema,
-    timebackCourseId: stringType().trim().min(1).max(200).optional()
+    timebackCourseId: stringType().trim().min(1).max(200).optional(),
+    context: EmbedContextSchema.optional()
   }).strict();
   RedeemEmbedPassSchema = objectType({
     pass: stringType().min(1).max(200),
@@ -93863,6 +93876,21 @@ var init_embed_util = __esm(() => {
 });
 
 // ../api-core/src/services/embed.service.ts
+async function scopedContextId(partnerId, contextId) {
+  return sha256Hex(`${partnerId}:${contextId}`);
+}
+function launchTokenClaims(launch) {
+  if (!launch.contextId) {
+    return {};
+  }
+  return {
+    context: {
+      id: launch.contextId,
+      ...launch.contextRole && { role: launch.contextRole }
+    }
+  };
+}
+
 class EmbedService {
   deps;
   constructor(deps) {
@@ -93906,6 +93934,8 @@ class EmbedService {
       gameId: game.id,
       parentOrigin: input.parentOrigin,
       timebackCourseId: input.timebackCourseId ?? null,
+      contextId: input.context ? await scopedContextId(partner.id, input.context.id) : null,
+      contextRole: input.context?.role ?? null,
       passHash: await sha256Hex(pass),
       passExpiresAt,
       expiresAt: new Date(now + EMBED_LAUNCH_TTL_MS)
@@ -93913,7 +93943,12 @@ class EmbedService {
     if (!launch) {
       throw new InternalError("Failed to create embed launch");
     }
-    setAttributes({ "app.launch.id": launch.id, "app.user.id": user.id });
+    setAttributes({
+      "app.launch.id": launch.id,
+      "app.user.id": user.id,
+      "app.embed.has_context": input.context !== undefined,
+      ...input.context?.role && { "app.embed.context_role": input.context.role }
+    });
     return { launchId: launch.id, pass, passExpiresAt, gameSlug: game.slug };
   }
   async redeemLaunch(input, timeZone) {
@@ -93928,7 +93963,7 @@ class EmbedService {
       const [game, profile, token] = await Promise.all([
         this.deps.getGameForStudent(launch.gameId, user),
         this.deps.getGameProfile(user, launch.gameId, timeZone),
-        this.deps.mintGameToken(launch.gameId, user.id)
+        this.deps.mintGameToken(launch.gameId, user.id, launchTokenClaims(launch))
       ]);
       await this.deps.db.update(embedLaunches).set({ redeemedAt: new Date }).where(eq(embedLaunches.id, launch.id));
       return {
@@ -93960,7 +93995,7 @@ class EmbedService {
     if (outcome) {
       throw new AccessDeniedError("This launch has ended");
     }
-    return this.deps.mintGameToken(launch.gameId, launch.userId);
+    return this.deps.mintGameToken(launch.gameId, launch.userId, launchTokenClaims(launch));
   }
   async endLaunch(launchId) {
     await this.deps.db.update(embedLaunches).set({ endedAt: sql`coalesce(${embedLaunches.endedAt}, now())`, passHash: null }).where(eq(embedLaunches.id, launchId));
@@ -95062,10 +95097,10 @@ function createSandboxAuthProvider() {
       }
       return deleted;
     },
-    async mintGameToken(gameId, userId) {
+    async mintGameToken(gameId, userId, claims) {
       const header = btoa(JSON.stringify({ alg: "none", typ: "sandbox" }));
       const exp = Math.floor(Date.now() / 1000) + 15 * 60;
-      const payload = btoa(JSON.stringify({ sub: gameId, uid: userId, exp }));
+      const payload = btoa(JSON.stringify({ ...claims, sub: gameId, uid: userId, exp }));
       const token = `${header}.${payload}.sandbox`;
       return { token, exp: exp * 1000 };
     },

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@playcademy/sandbox",
-    "version": "0.12.2-beta.4",
+    "version": "0.12.2-beta.6",
     "description": "Local development server for Playcademy game development",
     "type": "module",
     "exports": {