@playcademy/sandbox 0.2.2 → 0.3.0

package/dist/cli.js

@@ -6389,7 +6389,7 @@ If you have no idea what this means or what Pirates is, let me explain: Pirates
         resolve2(data);
       });
     });
-    var readFileSync = (fp) => {
+    var readFileSync2 = (fp) => {
       return _fs.default.readFileSync(fp, "utf8");
     };
     var pathExists = (fp) => new Promise((resolve2) => {
@@ -6620,7 +6620,7 @@ If you have no idea what this means or what Pirates is, let me explain: Pirates
                 data: this.packageJsonCache.get(filepath)[options.packageKey]
               };
             }
-            const data = this.options.parseJSON(readFileSync(filepath));
+            const data = this.options.parseJSON(readFileSync2(filepath));
             return {
               path: filepath,
               data
@@ -6628,7 +6628,7 @@ If you have no idea what this means or what Pirates is, let me explain: Pirates
           }
           return {
             path: filepath,
-            data: readFileSync(filepath)
+            data: readFileSync2(filepath)
           };
         }
         return {};
@@ -8227,19 +8227,19 @@ If you have no idea what this means or what Pirates is, let me explain: Pirates
       return walkForTsConfig(parentDirectory, readdirSync);
     }
     exports2.walkForTsConfig = walkForTsConfig;
-    function loadTsconfig(configFilePath, existsSync2, readFileSync) {
-      if (existsSync2 === undefined) {
-        existsSync2 = fs3.existsSync;
+    function loadTsconfig(configFilePath, existsSync3, readFileSync2) {
+      if (existsSync3 === undefined) {
+        existsSync3 = fs3.existsSync;
       }
-      if (readFileSync === undefined) {
-        readFileSync = function(filename) {
+      if (readFileSync2 === undefined) {
+        readFileSync2 = function(filename) {
           return fs3.readFileSync(filename, "utf8");
         };
       }
-      if (!existsSync2(configFilePath)) {
+      if (!existsSync3(configFilePath)) {
         return;
       }
-      var configString = readFileSync(configFilePath);
+      var configString = readFileSync2(configFilePath);
       var cleanedJson = StripBom(configString);
       var config2;
       try {
@@ -8252,27 +8252,27 @@ If you have no idea what this means or what Pirates is, let me explain: Pirates
         var base = undefined;
         if (Array.isArray(extendedConfig)) {
           base = extendedConfig.reduce(function(currBase, extendedConfigElement) {
-            return mergeTsconfigs(currBase, loadTsconfigFromExtends(configFilePath, extendedConfigElement, existsSync2, readFileSync));
+            return mergeTsconfigs(currBase, loadTsconfigFromExtends(configFilePath, extendedConfigElement, existsSync3, readFileSync2));
           }, {});
         } else {
-          base = loadTsconfigFromExtends(configFilePath, extendedConfig, existsSync2, readFileSync);
+          base = loadTsconfigFromExtends(configFilePath, extendedConfig, existsSync3, readFileSync2);
         }
         return mergeTsconfigs(base, config2);
       }
       return config2;
     }
     exports2.loadTsconfig = loadTsconfig;
-    function loadTsconfigFromExtends(configFilePath, extendedConfigValue, existsSync2, readFileSync) {
+    function loadTsconfigFromExtends(configFilePath, extendedConfigValue, existsSync3, readFileSync2) {
       var _a;
       if (typeof extendedConfigValue === "string" && extendedConfigValue.indexOf(".json") === -1) {
         extendedConfigValue += ".json";
       }
       var currentDir = path.dirname(configFilePath);
       var extendedConfigPath = path.join(currentDir, extendedConfigValue);
-      if (extendedConfigValue.indexOf("/") !== -1 && extendedConfigValue.indexOf(".") !== -1 && !existsSync2(extendedConfigPath)) {
+      if (extendedConfigValue.indexOf("/") !== -1 && extendedConfigValue.indexOf(".") !== -1 && !existsSync3(extendedConfigPath)) {
         extendedConfigPath = path.join(currentDir, "node_modules", extendedConfigValue);
       }
-      var config2 = loadTsconfig(extendedConfigPath, existsSync2, readFileSync) || {};
+      var config2 = loadTsconfig(extendedConfigPath, existsSync3, readFileSync2) || {};
       if ((_a = config2.compilerOptions) === null || _a === undefined ? undefined : _a.baseUrl) {
         var extendsDir = path.dirname(extendedConfigValue);
         config2.compilerOptions.baseUrl = path.join(extendsDir, config2.compilerOptions.baseUrl);
@@ -32322,7 +32322,7 @@ globstar while`, file, fr, pattern, pr2, swallowee);
           return new SQL2([new StringChunk2(str)]);
         }
         sql22.raw = raw2;
-        function join3(chunks, separator) {
+        function join4(chunks, separator) {
           const result = [];
           for (const [i3, chunk] of chunks.entries()) {
             if (i3 > 0 && separator !== undefined) {
@@ -32332,7 +32332,7 @@ globstar while`, file, fr, pattern, pr2, swallowee);
           }
           return new SQL2(result);
         }
-        sql22.join = join3;
+        sql22.join = join4;
         function identifier(value) {
           return new Name2(value);
         }
@@ -35162,7 +35162,7 @@ params: ${params}`);
             const tableName = getTableLikeName2(table62);
             for (const item of extractUsedTable(table62))
               this.usedTables.add(item);
-            if (typeof tableName === "string" && this.config.joins?.some((join3) => join3.alias === tableName)) {
+            if (typeof tableName === "string" && this.config.joins?.some((join4) => join4.alias === tableName)) {
               throw new Error(`Alias "${tableName}" is already used in this query`);
             }
             if (!this.isPartialSelect) {
@@ -36020,7 +36020,7 @@ params: ${params}`);
         createJoin(joinType) {
           return (table62, on2) => {
             const tableName = getTableLikeName2(table62);
-            if (typeof tableName === "string" && this.config.joins.some((join3) => join3.alias === tableName)) {
+            if (typeof tableName === "string" && this.config.joins.some((join4) => join4.alias === tableName)) {
               throw new Error(`Alias "${tableName}" is already used in this query`);
             }
             if (typeof on2 === "function") {
@@ -36066,10 +36066,10 @@ params: ${params}`);
                 const fromFields = this.getTableLikeFields(this.config.from);
                 fields[tableName] = fromFields;
               }
-              for (const join3 of this.config.joins) {
-                const tableName2 = getTableLikeName2(join3.table);
-                if (typeof tableName2 === "string" && !is2(join3.table, SQL2)) {
-                  const fromFields = this.getTableLikeFields(join3.table);
+              for (const join4 of this.config.joins) {
+                const tableName2 = getTableLikeName2(join4.table);
+                if (typeof tableName2 === "string" && !is2(join4.table, SQL2)) {
+                  const fromFields = this.getTableLikeFields(join4.table);
                   fields[tableName2] = fromFields;
                 }
               }
@@ -39644,7 +39644,7 @@ ORDER BY
             const tableName = getTableLikeName2(table62);
             for (const item of extractUsedTable2(table62))
               this.usedTables.add(item);
-            if (typeof tableName === "string" && this.config.joins?.some((join3) => join3.alias === tableName)) {
+            if (typeof tableName === "string" && this.config.joins?.some((join4) => join4.alias === tableName)) {
               throw new Error(`Alias "${tableName}" is already used in this query`);
             }
             if (!this.isPartialSelect) {
@@ -40085,7 +40085,7 @@ ORDER BY
         createJoin(joinType) {
           return (table62, on2) => {
             const tableName = getTableLikeName2(table62);
-            if (typeof tableName === "string" && this.config.joins.some((join3) => join3.alias === tableName)) {
+            if (typeof tableName === "string" && this.config.joins.some((join4) => join4.alias === tableName)) {
               throw new Error(`Alias "${tableName}" is already used in this query`);
             }
             if (typeof on2 === "function") {
@@ -43692,7 +43692,7 @@ ${withStyle.errorWarning(`We've found duplicated view name across ${source_defau
             const tableName = getTableLikeName2(table62);
             for (const item of extractUsedTable3(table62))
               this.usedTables.add(item);
-            if (typeof tableName === "string" && this.config.joins?.some((join3) => join3.alias === tableName)) {
+            if (typeof tableName === "string" && this.config.joins?.some((join4) => join4.alias === tableName)) {
               throw new Error(`Alias "${tableName}" is already used in this query`);
             }
             if (!this.isPartialSelect) {
@@ -47734,7 +47734,7 @@ AND
             const tableName = getTableLikeName2(table62);
             for (const item of extractUsedTable4(table62))
               this.usedTables.add(item);
-            if (typeof tableName === "string" && this.config.joins?.some((join3) => join3.alias === tableName)) {
+            if (typeof tableName === "string" && this.config.joins?.some((join4) => join4.alias === tableName)) {
               throw new Error(`Alias "${tableName}" is already used in this query`);
             }
             if (!this.isPartialSelect) {
@@ -135071,7 +135071,7 @@ function hasTimebackCredentials() {
   return false;
 }
 function hasTimebackFullConfig() {
-  return hasTimebackCredentials() && !!(config.timeback.courseId && config.timeback.studentId);
+  return hasTimebackCredentials() && !!(config.timeback.courseId && config.timeback.timebackId);
 }
 function requireTimebackCredentials() {
   if (hasTimebackCredentials())
@@ -135125,11 +135125,36 @@ function configureTimeback(options) {
     config.timeback.courseId = options.courseId;
     process.env.SANDBOX_TIMEBACK_COURSE_ID = options.courseId;
   }
-  if (options.studentId) {
-    config.timeback.studentId = options.studentId;
-    process.env.SANDBOX_TIMEBACK_STUDENT_ID = options.studentId;
+  if (options.timebackId) {
+    config.timeback.timebackId = options.timebackId;
+    process.env.SANDBOX_TIMEBACK_STUDENT_ID = options.timebackId;
+    const isMockMode = options.timebackId === "mock";
+    process.env.SANDBOX_TIMEBACK_MOCK_MODE = isMockMode ? "true" : "false";
+  }
+  if (options.organization) {
+    config.timeback.organization = options.organization;
+    process.env.SANDBOX_TIMEBACK_ORG_ID = options.organization.id;
+    if (options.organization.name) {
+      process.env.SANDBOX_TIMEBACK_ORG_NAME = options.organization.name;
+    }
+    if (options.organization.type) {
+      process.env.SANDBOX_TIMEBACK_ORG_TYPE = options.organization.type;
+    }
+  }
+  if (options.role) {
+    config.timeback.role = options.role;
+    process.env.SANDBOX_TIMEBACK_ROLE = options.role;
   }
 }
+function getTimebackDisplayMode() {
+  const { timebackId, mode } = config.timeback;
+  if (!timebackId)
+    return null;
+  if (timebackId === "mock" || !hasTimebackCredentials()) {
+    return "mock";
+  }
+  return mode;
+}
 
 // src/config/mutators.ts
 function setEmbeddedMode(embedded) {
@@ -135152,13 +135177,203 @@ var config = {
     clientSecret: process.env.TIMEBACK_API_CLIENT_SECRET,
     authUrl: process.env.TIMEBACK_API_AUTH_URL,
     courseId: process.env.SANDBOX_TIMEBACK_COURSE_ID,
-    studentId: process.env.SANDBOX_TIMEBACK_STUDENT_ID
+    timebackId: process.env.SANDBOX_TIMEBACK_STUDENT_ID
   }
 };
 process.env.BETTER_AUTH_SECRET = config.auth.betterAuthSecret;
 process.env.GAME_JWT_SECRET = config.auth.gameJwtSecret;
 process.env.PUBLIC_IS_LOCAL = "true";
 
+// src/constants/demo-users.ts
+var now = new Date;
+var DEMO_USER_IDS = {
+  player: "00000000-0000-0000-0000-000000000001",
+  developer: "00000000-0000-0000-0000-000000000002",
+  admin: "00000000-0000-0000-0000-000000000003",
+  pendingDeveloper: "00000000-0000-0000-0000-000000000004",
+  unverifiedPlayer: "00000000-0000-0000-0000-000000000005"
+};
+var DEMO_USERS = {
+  admin: {
+    id: DEMO_USER_IDS.admin,
+    name: "Admin User",
+    username: "admin_user",
+    email: "admin@playcademy.com",
+    emailVerified: true,
+    image: null,
+    role: "admin",
+    developerStatus: "approved",
+    createdAt: now,
+    updatedAt: now
+  },
+  player: {
+    id: DEMO_USER_IDS.player,
+    name: "Player User",
+    username: "player_user",
+    email: "player@playcademy.com",
+    emailVerified: true,
+    image: null,
+    role: "player",
+    developerStatus: "none",
+    createdAt: now,
+    updatedAt: now
+  },
+  developer: {
+    id: DEMO_USER_IDS.developer,
+    name: "Developer User",
+    username: "developer_user",
+    email: "developer@playcademy.com",
+    emailVerified: true,
+    image: null,
+    role: "developer",
+    developerStatus: "approved",
+    createdAt: now,
+    updatedAt: now
+  },
+  pendingDeveloper: {
+    id: DEMO_USER_IDS.pendingDeveloper,
+    name: "Pending Developer",
+    username: "pending_dev",
+    email: "pending@playcademy.com",
+    emailVerified: true,
+    image: null,
+    role: "developer",
+    developerStatus: "pending",
+    createdAt: now,
+    updatedAt: now
+  },
+  unverifiedPlayer: {
+    id: DEMO_USER_IDS.unverifiedPlayer,
+    name: "Unverified Player",
+    username: "unverified_player",
+    email: "unverified@playcademy.com",
+    emailVerified: false,
+    image: null,
+    role: "player",
+    developerStatus: "none",
+    createdAt: now,
+    updatedAt: now
+  }
+};
+var DEMO_USER = DEMO_USERS.player;
+// src/constants/demo-tokens.ts
+var DEMO_TOKENS = {
+  "sandbox-demo-token": DEMO_USERS.player,
+  "sandbox-admin-token": DEMO_USERS.admin,
+  "sandbox-player-token": DEMO_USERS.player,
+  "sandbox-developer-token": DEMO_USERS.developer,
+  "sandbox-pending-dev-token": DEMO_USERS.pendingDeveloper,
+  "sandbox-unverified-token": DEMO_USERS.unverifiedPlayer,
+  "mock-game-token-for-local-dev": DEMO_USERS.player
+};
+var DEMO_TOKEN = "sandbox-demo-token";
+var MOCK_GAME_ID = "mock-game-id-from-template";
+// src/constants/demo-items.ts
+var DEMO_ITEM_IDS = {
+  playcademyCredits: "10000000-0000-0000-0000-000000000001",
+  foundingMemberBadge: "10000000-0000-0000-0000-000000000002",
+  earlyAdopterBadge: "10000000-0000-0000-0000-000000000003",
+  firstGameBadge: "10000000-0000-0000-0000-000000000004",
+  commonSword: "10000000-0000-0000-0000-000000000005",
+  smallHealthPotion: "10000000-0000-0000-0000-000000000006",
+  smallBackpack: "10000000-0000-0000-0000-000000000007"
+};
+var PLAYCADEMY_CREDITS_ID = DEMO_ITEM_IDS.playcademyCredits;
+var SAMPLE_ITEMS = [
+  {
+    id: PLAYCADEMY_CREDITS_ID,
+    slug: "PLAYCADEMY_CREDITS",
+    gameId: null,
+    displayName: "PLAYCADEMY credits",
+    description: "The main currency used across PLAYCADEMY.",
+    type: "currency",
+    isPlaceable: false,
+    imageUrl: "http://playcademy-sandbox.local/playcademy-credit.png",
+    metadata: {
+      rarity: "common"
+    }
+  },
+  {
+    id: DEMO_ITEM_IDS.foundingMemberBadge,
+    slug: "FOUNDING_MEMBER_BADGE",
+    gameId: null,
+    displayName: "Founding Member Badge",
+    description: "Reserved for founding core team of the PLAYCADEMY platform.",
+    type: "badge",
+    isPlaceable: false,
+    imageUrl: null,
+    metadata: {
+      rarity: "legendary"
+    }
+  },
+  {
+    id: DEMO_ITEM_IDS.earlyAdopterBadge,
+    slug: "EARLY_ADOPTER_BADGE",
+    gameId: null,
+    displayName: "Early Adopter Badge",
+    description: "Awarded to users who joined during the beta phase.",
+    type: "badge",
+    isPlaceable: false,
+    imageUrl: null,
+    metadata: {
+      rarity: "epic"
+    }
+  },
+  {
+    id: DEMO_ITEM_IDS.firstGameBadge,
+    slug: "FIRST_GAME_BADGE",
+    gameId: null,
+    displayName: "First Game Played",
+    description: "Awarded for playing your first game in the Playcademy platform.",
+    type: "badge",
+    isPlaceable: false,
+    imageUrl: "http://playcademy-sandbox.local/first-game-badge.png",
+    metadata: {
+      rarity: "uncommon"
+    }
+  },
+  {
+    id: DEMO_ITEM_IDS.commonSword,
+    slug: "COMMON_SWORD",
+    gameId: null,
+    displayName: "Common Sword",
+    description: "A basic sword, good for beginners.",
+    type: "unlock",
+    isPlaceable: false,
+    imageUrl: "http://playcademy-sandbox.local/common-sword.png",
+    metadata: undefined
+  },
+  {
+    id: DEMO_ITEM_IDS.smallHealthPotion,
+    slug: "SMALL_HEALTH_POTION",
+    gameId: null,
+    displayName: "Small Health Potion",
+    description: "Restores a small amount of health.",
+    type: "other",
+    isPlaceable: false,
+    imageUrl: "http://playcademy-sandbox.local/small-health-potion.png",
+    metadata: undefined
+  },
+  {
+    id: DEMO_ITEM_IDS.smallBackpack,
+    slug: "SMALL_BACKPACK",
+    gameId: null,
+    displayName: "Small Backpack",
+    description: "Increases your inventory capacity by 5 slots.",
+    type: "upgrade",
+    isPlaceable: false,
+    imageUrl: "http://playcademy-sandbox.local/small-backpack.png",
+    metadata: undefined
+  }
+];
+var SAMPLE_INVENTORY = [
+  {
+    id: "20000000-0000-0000-0000-000000000001",
+    userId: DEMO_USER.id,
+    itemId: PLAYCADEMY_CREDITS_ID,
+    quantity: 1000
+  }
+];
 // ../../node_modules/@hono/node-server/dist/index.mjs
 import { createServer as createServerHTTP } from "http";
 import { Http2ServerRequest as Http2ServerRequest2 } from "http2";
@@ -135700,10 +135915,106 @@ var serve = (options, listeningListener) => {
   });
   return server;
 };
+
+// ../utils/src/port.ts
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { createServer } from "node:net";
+import { homedir } from "node:os";
+import { join } from "node:path";
+function getRegistryPath() {
+  const home = homedir();
+  const dir = join(home, ".playcademy");
+  if (!existsSync(dir)) {
+    mkdirSync(dir, { recursive: true });
+  }
+  return join(dir, ".proc");
+}
+function readRegistry() {
+  const registryPath = getRegistryPath();
+  if (!existsSync(registryPath)) {
+    return {};
+  }
+  try {
+    const content = readFileSync(registryPath, "utf-8");
+    return JSON.parse(content);
+  } catch {
+    return {};
+  }
+}
+function writeRegistry(registry) {
+  const registryPath = getRegistryPath();
+  writeFileSync(registryPath, JSON.stringify(registry, null, 2), "utf-8");
+}
+function getServerKey(type, port) {
+  return `${type}-${port}`;
+}
+function writeServerInfo(type, info2) {
+  const registry = readRegistry();
+  const key = getServerKey(type, info2.port);
+  registry[key] = info2;
+  writeRegistry(registry);
+}
+function cleanupServerInfo(type, projectRoot, pid) {
+  const registry = readRegistry();
+  const keysToRemove = [];
+  for (const [key, info2] of Object.entries(registry)) {
+    if (key.startsWith(`${type}-`)) {
+      let matches = true;
+      if (projectRoot && info2.projectRoot !== projectRoot) {
+        matches = false;
+      }
+      if (pid !== undefined && info2.pid !== pid) {
+        matches = false;
+      }
+      if (matches) {
+        keysToRemove.push(key);
+      }
+    }
+  }
+  for (const key of keysToRemove) {
+    delete registry[key];
+  }
+  if (keysToRemove.length > 0) {
+    writeRegistry(registry);
+  }
+}
+async function isPortInUse(port) {
+  return new Promise((resolve) => {
+    const server = createServer();
+    server.once("error", () => {
+      resolve(true);
+    });
+    server.once("listening", () => {
+      server.close();
+      resolve(false);
+    });
+    server.listen(port);
+  });
+}
+async function waitForPort(port, timeoutMs = 5000) {
+  const start2 = Date.now();
+  while (await isPortInUse(port)) {
+    if (Date.now() - start2 > timeoutMs) {
+      throw new Error(`Port ${port} is already in use.
+` + `Stop the other server or specify a different port with --port <number>.`);
+    }
+    await new Promise((resolve) => setTimeout(resolve, 100));
+  }
+}
+async function requirePortAvailable(port, timeoutMs = 100) {
+  const start2 = Date.now();
+  while (await isPortInUse(port)) {
+    if (Date.now() - start2 > timeoutMs) {
+      throw new Error(`Port ${port} is already in use.
+` + `Stop the other server or specify a different port with --port <number>.`);
+    }
+    await new Promise((resolve) => setTimeout(resolve, 50));
+  }
+}
 // package.json
 var package_default = {
   name: "@playcademy/sandbox",
-  version: "0.2.2",
+  version: "0.3.0",
   description: "Local development server for Playcademy game development",
   type: "module",
   exports: {
@@ -135718,6 +136029,10 @@ var package_default = {
     "./config": {
       import: "./dist/config.js",
       types: "./dist/config.d.ts"
+    },
+    "./constants": {
+      import: "./dist/constants.js",
+      types: "./dist/constants.d.ts"
     }
   },
   bin: {
@@ -138213,7 +138528,7 @@ function sql(strings, ...params) {
     return new SQL([new StringChunk(str)]);
   }
   sql2.raw = raw2;
-  function join(chunks, separator) {
+  function join2(chunks, separator) {
     const result = [];
     for (const [i2, chunk] of chunks.entries()) {
       if (i2 > 0 && separator !== undefined) {
@@ -138223,7 +138538,7 @@ function sql(strings, ...params) {
     }
     return new SQL(result);
   }
-  sql2.join = join;
+  sql2.join = join2;
   function identifier(value) {
     return new Name(value);
   }
@@ -141200,7 +141515,7 @@ class PgSelectQueryBuilderBase extends TypedQueryBuilder {
     return (table, on) => {
       const baseTableName = this.tableName;
       const tableName = getTableLikeName(table);
-      if (typeof tableName === "string" && this.config.joins?.some((join) => join.alias === tableName)) {
+      if (typeof tableName === "string" && this.config.joins?.some((join2) => join2.alias === tableName)) {
         throw new Error(`Alias "${tableName}" is already used in this query`);
       }
       if (!this.isPartialSelect) {
@@ -141709,7 +142024,7 @@ class PgUpdateBase extends QueryPromise {
   createJoin(joinType) {
     return (table, on) => {
       const tableName = getTableLikeName(table);
-      if (typeof tableName === "string" && this.config.joins.some((join) => join.alias === tableName)) {
+      if (typeof tableName === "string" && this.config.joins.some((join2) => join2.alias === tableName)) {
         throw new Error(`Alias "${tableName}" is already used in this query`);
       }
       if (typeof on === "function") {
@@ -141759,10 +142074,10 @@ class PgUpdateBase extends QueryPromise {
           const fromFields = this.getTableLikeFields(this.config.from);
           fields[tableName] = fromFields;
         }
-        for (const join of this.config.joins) {
-          const tableName2 = getTableLikeName(join.table);
-          if (typeof tableName2 === "string" && !is(join.table, SQL)) {
-            const fromFields = this.getTableLikeFields(join.table);
+        for (const join2 of this.config.joins) {
+          const tableName2 = getTableLikeName(join2.table);
+          if (typeof tableName2 === "string" && !is(join2.table, SQL)) {
+            const fromFields = this.getTableLikeFields(join2.table);
             fields[tableName2] = fromFields;
           }
         }
@@ -142905,195 +143220,6 @@ var notificationsRelations = relations(notifications, ({ one }) => ({
     references: [users.id]
   })
 }));
-// src/constants/demo-users.ts
-var now = new Date;
-var DEMO_USER_IDS = {
-  admin: "00000000-0000-0000-0000-000000000001",
-  player: "00000000-0000-0000-0000-000000000002",
-  developer: "00000000-0000-0000-0000-000000000003",
-  pendingDeveloper: "00000000-0000-0000-0000-000000000004",
-  unverifiedPlayer: "00000000-0000-0000-0000-000000000005"
-};
-var DEMO_USERS = {
-  admin: {
-    id: DEMO_USER_IDS.admin,
-    name: "Admin User",
-    username: "admin_user",
-    email: "admin@playcademy.com",
-    emailVerified: true,
-    image: null,
-    role: "admin",
-    developerStatus: "approved",
-    createdAt: now,
-    updatedAt: now
-  },
-  player: {
-    id: DEMO_USER_IDS.player,
-    name: "Player User",
-    username: "player_user",
-    email: "player@playcademy.com",
-    emailVerified: true,
-    image: null,
-    role: "player",
-    developerStatus: "none",
-    createdAt: now,
-    updatedAt: now
-  },
-  developer: {
-    id: DEMO_USER_IDS.developer,
-    name: "Developer User",
-    username: "developer_user",
-    email: "developer@playcademy.com",
-    emailVerified: true,
-    image: null,
-    role: "developer",
-    developerStatus: "approved",
-    createdAt: now,
-    updatedAt: now
-  },
-  pendingDeveloper: {
-    id: DEMO_USER_IDS.pendingDeveloper,
-    name: "Pending Developer",
-    username: "pending_dev",
-    email: "pending@playcademy.com",
-    emailVerified: true,
-    image: null,
-    role: "developer",
-    developerStatus: "pending",
-    createdAt: now,
-    updatedAt: now
-  },
-  unverifiedPlayer: {
-    id: DEMO_USER_IDS.unverifiedPlayer,
-    name: "Unverified Player",
-    username: "unverified_player",
-    email: "unverified@playcademy.com",
-    emailVerified: false,
-    image: null,
-    role: "player",
-    developerStatus: "none",
-    createdAt: now,
-    updatedAt: now
-  }
-};
-var DEMO_USER = DEMO_USERS.admin;
-// src/constants/demo-tokens.ts
-var DEMO_TOKENS = {
-  "sandbox-demo-token": DEMO_USERS.admin,
-  "sandbox-admin-token": DEMO_USERS.admin,
-  "sandbox-player-token": DEMO_USERS.player,
-  "sandbox-developer-token": DEMO_USERS.developer,
-  "sandbox-pending-dev-token": DEMO_USERS.pendingDeveloper,
-  "sandbox-unverified-token": DEMO_USERS.unverifiedPlayer,
-  "mock-game-token-for-local-dev": DEMO_USERS.admin
-};
-var MOCK_GAME_ID = "mock-game-id-from-template";
-// src/constants/demo-items.ts
-var DEMO_ITEM_IDS = {
-  playcademyCredits: "10000000-0000-0000-0000-000000000001",
-  foundingMemberBadge: "10000000-0000-0000-0000-000000000002",
-  earlyAdopterBadge: "10000000-0000-0000-0000-000000000003",
-  firstGameBadge: "10000000-0000-0000-0000-000000000004",
-  commonSword: "10000000-0000-0000-0000-000000000005",
-  smallHealthPotion: "10000000-0000-0000-0000-000000000006",
-  smallBackpack: "10000000-0000-0000-0000-000000000007"
-};
-var PLAYCADEMY_CREDITS_ID = DEMO_ITEM_IDS.playcademyCredits;
-var SAMPLE_ITEMS = [
-  {
-    id: PLAYCADEMY_CREDITS_ID,
-    slug: "PLAYCADEMY_CREDITS",
-    gameId: null,
-    displayName: "PLAYCADEMY credits",
-    description: "The main currency used across PLAYCADEMY.",
-    type: "currency",
-    isPlaceable: false,
-    imageUrl: "http://playcademy-sandbox.local/playcademy-credit.png",
-    metadata: {
-      rarity: "common"
-    }
-  },
-  {
-    id: DEMO_ITEM_IDS.foundingMemberBadge,
-    slug: "FOUNDING_MEMBER_BADGE",
-    gameId: null,
-    displayName: "Founding Member Badge",
-    description: "Reserved for founding core team of the PLAYCADEMY platform.",
-    type: "badge",
-    isPlaceable: false,
-    imageUrl: null,
-    metadata: {
-      rarity: "legendary"
-    }
-  },
-  {
-    id: DEMO_ITEM_IDS.earlyAdopterBadge,
-    slug: "EARLY_ADOPTER_BADGE",
-    gameId: null,
-    displayName: "Early Adopter Badge",
-    description: "Awarded to users who joined during the beta phase.",
-    type: "badge",
-    isPlaceable: false,
-    imageUrl: null,
-    metadata: {
-      rarity: "epic"
-    }
-  },
-  {
-    id: DEMO_ITEM_IDS.firstGameBadge,
-    slug: "FIRST_GAME_BADGE",
-    gameId: null,
-    displayName: "First Game Played",
-    description: "Awarded for playing your first game in the Playcademy platform.",
-    type: "badge",
-    isPlaceable: false,
-    imageUrl: "http://playcademy-sandbox.local/first-game-badge.png",
-    metadata: {
-      rarity: "uncommon"
-    }
-  },
-  {
-    id: DEMO_ITEM_IDS.commonSword,
-    slug: "COMMON_SWORD",
-    gameId: null,
-    displayName: "Common Sword",
-    description: "A basic sword, good for beginners.",
-    type: "unlock",
-    isPlaceable: false,
-    imageUrl: "http://playcademy-sandbox.local/common-sword.png",
-    metadata: undefined
-  },
-  {
-    id: DEMO_ITEM_IDS.smallHealthPotion,
-    slug: "SMALL_HEALTH_POTION",
-    gameId: null,
-    displayName: "Small Health Potion",
-    description: "Restores a small amount of health.",
-    type: "other",
-    isPlaceable: false,
-    imageUrl: "http://playcademy-sandbox.local/small-health-potion.png",
-    metadata: undefined
-  },
-  {
-    id: DEMO_ITEM_IDS.smallBackpack,
-    slug: "SMALL_BACKPACK",
-    gameId: null,
-    displayName: "Small Backpack",
-    description: "Increases your inventory capacity by 5 slots.",
-    type: "upgrade",
-    isPlaceable: false,
-    imageUrl: "http://playcademy-sandbox.local/small-backpack.png",
-    metadata: undefined
-  }
-];
-var SAMPLE_INVENTORY = [
-  {
-    id: "20000000-0000-0000-0000-000000000001",
-    userId: DEMO_USER.id,
-    itemId: PLAYCADEMY_CREDITS_ID,
-    quantity: 1000
-  }
-];
 // src/server/auth.ts
 function extractBearerToken(authHeader) {
   if (!authHeader?.startsWith("Bearer ")) {
@@ -143101,25 +143227,53 @@ function extractBearerToken(authHeader) {
   }
   return authHeader.substring(7);
 }
-function parseJwtUserId(token) {
+function parseSandboxToken(token) {
+  try {
+    const parts2 = token.split(".");
+    if (parts2.length !== 3 || parts2[2] !== "sandbox") {
+      return null;
+    }
+    const header = JSON.parse(atob(parts2[0]));
+    if (header.typ !== "sandbox") {
+      return null;
+    }
+    const payload = JSON.parse(atob(parts2[1]));
+    if (!payload.uid || !payload.sub) {
+      return null;
+    }
+    return {
+      userId: payload.uid,
+      gameSlug: payload.sub
+    };
+  } catch {
+    return null;
+  }
+}
+function parseJwtClaims(token) {
   try {
     const parts2 = token.split(".");
     if (parts2.length === 3 && parts2[1]) {
       const payload = JSON.parse(atob(parts2[1]));
-      return payload.uid || null;
+      if (payload.uid) {
+        return {
+          userId: payload.uid,
+          gameId: payload.sub
+        };
+      }
     }
-  } catch (error) {
-    console.warn("[Auth] Failed to decode JWT token:", error);
-  }
+  } catch {}
   return null;
 }
-function resolveUserId(token) {
+function resolveAuth(token) {
   const demoUser = DEMO_TOKENS[token];
-  if (demoUser) {
-    return demoUser.id;
-  }
+  if (demoUser)
+    return { userId: demoUser.id };
   if (token.includes(".")) {
-    return parseJwtUserId(token);
+    const sandboxClaims = parseSandboxToken(token);
+    if (sandboxClaims) {
+      return sandboxClaims;
+    }
+    return parseJwtClaims(token);
   }
   return null;
 }
@@ -143134,6 +143288,18 @@ async function fetchUserFromDatabase(db, userId) {
     throw error;
   }
 }
+async function resolveGameIdFromSlug(db, slug) {
+  try {
+    const game = await db.query.games.findFirst({
+      where: eq(games.slug, slug),
+      columns: { id: true }
+    });
+    return game?.id || null;
+  } catch (error) {
+    console.error("[Auth] Error looking up game by slug:", error);
+    return null;
+  }
+}
 function isPublicRoute(path, exceptions) {
   return exceptions.some((exception) => {
     if (path === exception)
@@ -143155,11 +143321,11 @@ async function authenticateRequest(c) {
       shouldReturn404: true
     };
   }
-  let targetUserId;
+  let claims;
   if (apiKey && !bearerToken) {
-    targetUserId = DEMO_USERS.admin.id;
+    claims = { userId: DEMO_USERS.admin.id };
   } else {
-    const resolved = resolveUserId(token);
+    const resolved = resolveAuth(token);
     if (!resolved) {
       return {
         success: false,
@@ -143167,26 +143333,22 @@ async function authenticateRequest(c) {
         shouldReturn404: true
       };
     }
-    targetUserId = resolved;
+    claims = resolved;
   }
   const db = c.get("db");
   if (!db) {
     console.error("[Auth] Database not available in context");
-    return {
-      success: false,
-      error: "Internal server error",
-      shouldReturn404: false
-    };
+    return { success: false, error: "Internal server error", shouldReturn404: false };
   }
-  const user = await fetchUserFromDatabase(db, targetUserId);
+  const user = await fetchUserFromDatabase(db, claims.userId);
   if (!user) {
-    return {
-      success: false,
-      error: "User not found or token invalid",
-      shouldReturn404: true
-    };
+    return { success: false, error: "User not found or token invalid", shouldReturn404: true };
   }
-  return { success: true, user };
+  let gameId = claims.gameId;
+  if (!gameId && claims.gameSlug) {
+    gameId = await resolveGameIdFromSlug(db, claims.gameSlug) ?? undefined;
+  }
+  return { success: true, user, gameId };
 }
 function setupAuth(options = {}) {
   const { exceptions = [] } = options;
@@ -143198,6 +143360,8 @@ function setupAuth(options = {}) {
       const result = await authenticateRequest(c);
       if (result.success) {
         c.set("user", result.user);
+        if (result.gameId)
+          c.set("gameId", result.gameId);
         await next();
         return;
       }
@@ -149059,34 +149223,34 @@ function getDatabase() {
 
 // src/database/path-manager.ts
 import fs2 from "node:fs";
-import { dirname, isAbsolute, join as join2 } from "node:path";
+import { dirname, isAbsolute, join as join3 } from "node:path";
 
 class DatabasePathManager {
-  static DEFAULT_DB_SUBPATH = join2("@playcademy", "vite-plugin", "node_modules", ".playcademy", "sandbox.db");
+  static DEFAULT_DB_SUBPATH = join3("@playcademy", "vite-plugin", "node_modules", ".playcademy", "sandbox.db");
   static findNodeModulesPath() {
     let currentDir = process.cwd();
     while (currentDir !== dirname(currentDir)) {
-      const nodeModulesPath = join2(currentDir, "node_modules");
+      const nodeModulesPath = join3(currentDir, "node_modules");
       if (fs2.existsSync(nodeModulesPath)) {
         return nodeModulesPath;
       }
       currentDir = dirname(currentDir);
     }
-    return join2(process.cwd(), "node_modules");
+    return join3(process.cwd(), "node_modules");
   }
   static resolveDatabasePath(customPath) {
     if (customPath) {
       if (customPath === ":memory:")
         return ":memory:";
-      return isAbsolute(customPath) ? customPath : join2(process.cwd(), customPath);
+      return isAbsolute(customPath) ? customPath : join3(process.cwd(), customPath);
     }
-    return join2(this.findNodeModulesPath(), this.DEFAULT_DB_SUBPATH);
+    return join3(this.findNodeModulesPath(), this.DEFAULT_DB_SUBPATH);
   }
   static ensureDatabaseDirectory(dbPath) {
     if (dbPath === ":memory:")
       return;
     const dirPath = dirname(dbPath);
-    const absolutePath = isAbsolute(dirPath) ? dirPath : join2(process.cwd(), dirPath);
+    const absolutePath = isAbsolute(dirPath) ? dirPath : join3(process.cwd(), dirPath);
     try {
       if (!fs2.existsSync(absolutePath)) {
         fs2.mkdirSync(absolutePath, { recursive: true });
@@ -149413,7 +149577,51 @@ var init_overworld = __esm3(() => {
     FIRST_GAME: ITEM_SLUGS2.FIRST_GAME_BADGE
   };
 });
-var init_timeback = () => {};
+var TIMEBACK_ORG_SOURCED_ID = "PLAYCADEMY";
+var TIMEBACK_ORG_NAME = "Playcademy Studios";
+var TIMEBACK_ORG_TYPE = "department";
+var TIMEBACK_COURSE_DEFAULTS;
+var TIMEBACK_RESOURCE_DEFAULTS;
+var TIMEBACK_COMPONENT_DEFAULTS;
+var TIMEBACK_COMPONENT_RESOURCE_DEFAULTS;
+var init_timeback = __esm3(() => {
+  TIMEBACK_COURSE_DEFAULTS = {
+    gradingScheme: "STANDARD",
+    level: {
+      elementary: "Elementary",
+      middle: "Middle",
+      high: "High",
+      ap: "AP"
+    },
+    goals: {
+      dailyXp: 50,
+      dailyLessons: 3
+    },
+    metrics: {
+      totalXp: 1000,
+      totalLessons: 50
+    }
+  };
+  TIMEBACK_RESOURCE_DEFAULTS = {
+    vendorId: "playcademy",
+    roles: ["primary"],
+    importance: "primary",
+    metadata: {
+      type: "interactive",
+      toolProvider: "Playcademy",
+      instructionalMethod: "exploratory",
+      language: "en-US"
+    }
+  };
+  TIMEBACK_COMPONENT_DEFAULTS = {
+    sortOrder: 1,
+    prerequisiteCriteria: "ALL"
+  };
+  TIMEBACK_COMPONENT_RESOURCE_DEFAULTS = {
+    sortOrder: 1,
+    lessonType: "quiz"
+  };
+});
 var init_workers = () => {};
 var init_src2 = __esm3(() => {
   init_auth();
@@ -149454,7 +149662,6 @@ var HTTP_DEFAULTS;
 var AUTH_DEFAULTS;
 var CACHE_DEFAULTS;
 var CONFIG_DEFAULTS;
-var DEFAULT_PLAYCADEMY_ORGANIZATION_ID;
 var PLAYCADEMY_DEFAULTS;
 var RESOURCE_DEFAULTS;
 var HTTP_STATUS;
@@ -149601,54 +149808,26 @@ var init_constants = __esm3(() => {
   CONFIG_DEFAULTS = {
     fileNames: ["timeback.config.js", "timeback.config.json"]
   };
-  DEFAULT_PLAYCADEMY_ORGANIZATION_ID = process.env.TIMEBACK_ORG_SOURCE_ID || "PLAYCADEMY";
   PLAYCADEMY_DEFAULTS = {
-    organization: DEFAULT_PLAYCADEMY_ORGANIZATION_ID,
+    organization: TIMEBACK_ORG_SOURCED_ID,
     launchBaseUrls: PLAYCADEMY_BASE_URLS
   };
   RESOURCE_DEFAULTS = {
     organization: {
-      name: "Playcademy Studios",
-      type: "department"
+      name: TIMEBACK_ORG_NAME,
+      type: TIMEBACK_ORG_TYPE
     },
     course: {
-      gradingScheme: "STANDARD",
-      level: {
-        elementary: "Elementary",
-        middle: "Middle",
-        high: "High",
-        ap: "AP"
-      },
+      gradingScheme: TIMEBACK_COURSE_DEFAULTS.gradingScheme,
+      level: TIMEBACK_COURSE_DEFAULTS.level,
       metadata: {
-        goals: {
-          dailyXp: 50,
-          dailyLessons: 3
-        },
-        metrics: {
-          totalXp: 1000,
-          totalLessons: 50
-        }
+        goals: TIMEBACK_COURSE_DEFAULTS.goals,
+        metrics: TIMEBACK_COURSE_DEFAULTS.metrics
       }
     },
-    component: {
-      sortOrder: 1,
-      prerequisiteCriteria: "ALL"
-    },
-    resource: {
-      vendorId: "playcademy",
-      roles: ["primary"],
-      importance: "primary",
-      metadata: {
-        type: "interactive",
-        toolProvider: "Playcademy",
-        instructionalMethod: "exploratory",
-        language: "en-US"
-      }
-    },
-    componentResource: {
-      sortOrder: 1,
-      lessonType: "quiz"
-    }
+    component: TIMEBACK_COMPONENT_DEFAULTS,
+    resource: TIMEBACK_RESOURCE_DEFAULTS,
+    componentResource: TIMEBACK_COMPONENT_RESOURCE_DEFAULTS
   };
   HTTP_STATUS = {
     CLIENT_ERROR_MIN: 400,
@@ -155656,7 +155835,8 @@ class TimebackClient {
         courseId: enrollment.course.id,
         status: "active",
         grades,
-        subjects
+        subjects,
+        school: enrollment.school
       };
     });
     this.cacheManager.setEnrollments(studentId, enrollments);
@@ -155729,7 +155909,51 @@ var init_overworld2 = __esm4(() => {
     FIRST_GAME: ITEM_SLUGS3.FIRST_GAME_BADGE
   };
 });
-var init_timeback2 = () => {};
+var TIMEBACK_ORG_SOURCED_ID2 = "PLAYCADEMY";
+var TIMEBACK_ORG_NAME2 = "Playcademy Studios";
+var TIMEBACK_ORG_TYPE2 = "department";
+var TIMEBACK_COURSE_DEFAULTS2;
+var TIMEBACK_RESOURCE_DEFAULTS2;
+var TIMEBACK_COMPONENT_DEFAULTS2;
+var TIMEBACK_COMPONENT_RESOURCE_DEFAULTS2;
+var init_timeback2 = __esm4(() => {
+  TIMEBACK_COURSE_DEFAULTS2 = {
+    gradingScheme: "STANDARD",
+    level: {
+      elementary: "Elementary",
+      middle: "Middle",
+      high: "High",
+      ap: "AP"
+    },
+    goals: {
+      dailyXp: 50,
+      dailyLessons: 3
+    },
+    metrics: {
+      totalXp: 1000,
+      totalLessons: 50
+    }
+  };
+  TIMEBACK_RESOURCE_DEFAULTS2 = {
+    vendorId: "playcademy",
+    roles: ["primary"],
+    importance: "primary",
+    metadata: {
+      type: "interactive",
+      toolProvider: "Playcademy",
+      instructionalMethod: "exploratory",
+      language: "en-US"
+    }
+  };
+  TIMEBACK_COMPONENT_DEFAULTS2 = {
+    sortOrder: 1,
+    prerequisiteCriteria: "ALL"
+  };
+  TIMEBACK_COMPONENT_RESOURCE_DEFAULTS2 = {
+    sortOrder: 1,
+    lessonType: "quiz"
+  };
+});
 var init_workers2 = () => {};
 var init_src3 = __esm4(() => {
   init_auth2();
@@ -155761,7 +155985,6 @@ var HTTP_DEFAULTS2;
 var AUTH_DEFAULTS2;
 var CACHE_DEFAULTS2;
 var CONFIG_DEFAULTS2;
-var DEFAULT_PLAYCADEMY_ORGANIZATION_ID2;
 var PLAYCADEMY_DEFAULTS2;
 var RESOURCE_DEFAULTS2;
 var HTTP_STATUS2;
@@ -155908,54 +156131,26 @@ var init_constants2 = __esm4(() => {
   CONFIG_DEFAULTS2 = {
     fileNames: ["timeback.config.js", "timeback.config.json"]
   };
-  DEFAULT_PLAYCADEMY_ORGANIZATION_ID2 = process.env.TIMEBACK_ORG_SOURCE_ID || "PLAYCADEMY";
   PLAYCADEMY_DEFAULTS2 = {
-    organization: DEFAULT_PLAYCADEMY_ORGANIZATION_ID2,
+    organization: TIMEBACK_ORG_SOURCED_ID2,
     launchBaseUrls: PLAYCADEMY_BASE_URLS2
   };
   RESOURCE_DEFAULTS2 = {
     organization: {
-      name: "Playcademy Studios",
-      type: "department"
+      name: TIMEBACK_ORG_NAME2,
+      type: TIMEBACK_ORG_TYPE2
     },
     course: {
-      gradingScheme: "STANDARD",
-      level: {
-        elementary: "Elementary",
-        middle: "Middle",
-        high: "High",
-        ap: "AP"
-      },
+      gradingScheme: TIMEBACK_COURSE_DEFAULTS2.gradingScheme,
+      level: TIMEBACK_COURSE_DEFAULTS2.level,
       metadata: {
-        goals: {
-          dailyXp: 50,
-          dailyLessons: 3
-        },
-        metrics: {
-          totalXp: 1000,
-          totalLessons: 50
-        }
+        goals: TIMEBACK_COURSE_DEFAULTS2.goals,
+        metrics: TIMEBACK_COURSE_DEFAULTS2.metrics
       }
     },
-    component: {
-      sortOrder: 1,
-      prerequisiteCriteria: "ALL"
-    },
-    resource: {
-      vendorId: "playcademy",
-      roles: ["primary"],
-      importance: "primary",
-      metadata: {
-        type: "interactive",
-        toolProvider: "Playcademy",
-        instructionalMethod: "exploratory",
-        language: "en-US"
-      }
-    },
-    componentResource: {
-      sortOrder: 1,
-      lessonType: "quiz"
-    }
+    component: TIMEBACK_COMPONENT_DEFAULTS2,
+    resource: TIMEBACK_RESOURCE_DEFAULTS2,
+    componentResource: TIMEBACK_COMPONENT_RESOURCE_DEFAULTS2
   };
   HTTP_STATUS2 = {
     CLIENT_ERROR_MIN: 400,
@@ -156306,68 +156501,89 @@ function buildResourceMetadata({
   }
   return metadata2;
 }
-// ../api-core/src/utils/timeback-enrollments.ts
+// ../api-core/src/utils/timeback-profile.ts
 init_src();
-async function fetchEnrollmentsForUser(timebackId) {
-  const db = getDatabase();
-  const isLocal = process.env.PUBLIC_IS_LOCAL === "true";
-  if (isLocal) {
-    const allIntegrations = await db.query.gameTimebackIntegrations.findMany();
-    return allIntegrations.map((integration) => ({
-      gameId: integration.gameId,
-      grade: integration.grade,
-      subject: integration.subject,
-      courseId: integration.courseId
-    }));
+async function fetchStudentFromOneRoster(timebackId) {
+  log2.debug("[OneRoster] Fetching student profile", { timebackId });
+  try {
+    const client = await getTimebackClient();
+    const user = await client.oneroster.users.get(timebackId);
+    const primaryRoleEntry = user.roles.find((r2) => r2.roleType === "primary");
+    const role = primaryRoleEntry?.role ?? user.roles[0]?.role ?? "student";
+    const orgMap = new Map;
+    if (user.primaryOrg) {
+      orgMap.set(user.primaryOrg.sourcedId, {
+        id: user.primaryOrg.sourcedId,
+        name: user.primaryOrg.name ?? null,
+        type: user.primaryOrg.type || "school",
+        isPrimary: true
+      });
+    }
+    for (const r2 of user.roles) {
+      if (r2.org && !orgMap.has(r2.org.sourcedId)) {
+        orgMap.set(r2.org.sourcedId, {
+          id: r2.org.sourcedId,
+          name: null,
+          type: "school",
+          isPrimary: false
+        });
+      }
+    }
+    const organizations = Array.from(orgMap.values());
+    return { role, organizations };
+  } catch (error2) {
+    log2.warn("[OneRoster] Failed to fetch student, using defaults", { error: error2, timebackId });
+    return { role: "student", organizations: [] };
   }
-  log2.debug("[timeback-enrollments] Fetching student enrollments from TimeBack", { timebackId });
+}
+async function fetchEnrollmentsFromEduBridge(timebackId) {
+  const db = getDatabase();
+  log2.debug("[EduBridge] Fetching student enrollments", { timebackId });
   try {
     const client = await getTimebackClient();
-    const classes = await client.getEnrollments(timebackId);
-    const courseIds = classes.map((cls) => cls.courseId).filter((id) => Boolean(id));
-    if (courseIds.length === 0) {
+    const enrollments = await client.getEnrollments(timebackId);
+    const courseIds = enrollments.map((e) => e.courseId).filter((id) => Boolean(id));
+    if (courseIds.length === 0)
       return [];
-    }
+    const courseToSchool = new Map(enrollments.filter((e) => e.school?.id).map((e) => [e.courseId, e.school.id]));
     const integrations = await db.query.gameTimebackIntegrations.findMany({
       where: inArray(gameTimebackIntegrations.courseId, courseIds)
     });
-    return integrations.map((integration) => ({
-      gameId: integration.gameId,
-      grade: integration.grade,
-      subject: integration.subject,
-      courseId: integration.courseId
+    return integrations.map((i3) => ({
+      gameId: i3.gameId,
+      grade: i3.grade,
+      subject: i3.subject,
+      courseId: i3.courseId,
+      orgId: courseToSchool.get(i3.courseId)
     }));
   } catch (error2) {
-    log2.warn("[timeback-enrollments] Failed to fetch TimeBack enrollments:", {
-      error: error2,
-      timebackId
-    });
+    log2.warn("[EduBridge] Failed to fetch enrollments", { error: error2, timebackId });
     return [];
   }
 }
-async function fetchUserRole(timebackId) {
-  log2.debug("[timeback] Fetching user role from TimeBack", { timebackId });
-  try {
-    const client = await getTimebackClient();
-    const user = await client.oneroster.users.get(timebackId);
-    const primaryRole = user.roles.find((r2) => r2.roleType === "primary");
-    const role = primaryRole?.role ?? user.roles[0]?.role ?? "student";
-    log2.debug("[timeback] Resolved user role", { timebackId, role });
-    return role;
-  } catch (error2) {
-    log2.warn("[timeback] Failed to fetch user role, defaulting to student:", {
-      error: error2,
-      timebackId
-    });
-    return "student";
-  }
+function filterEnrollmentsByGame(enrollments, gameId) {
+  return enrollments.filter((e) => e.gameId === gameId).map(({ gameId: _4, ...rest }) => rest);
+}
+function filterOrganizationsByEnrollments(organizations, enrollments) {
+  const enrollmentOrgIds = new Set(enrollments.map((e) => e.orgId).filter(Boolean));
+  if (enrollmentOrgIds.size === 0)
+    return [];
+  return organizations.filter((o4) => enrollmentOrgIds.has(o4.id));
 }
-async function fetchUserTimebackData(timebackId) {
-  const [role, enrollments] = await Promise.all([
-    fetchUserRole(timebackId),
-    fetchEnrollmentsForUser(timebackId)
+async function fetchUserTimebackData(timebackId, gameId) {
+  const [{ role, organizations: allOrganizations }, allEnrollments] = await Promise.all([
+    fetchStudentFromOneRoster(timebackId),
+    fetchEnrollmentsFromEduBridge(timebackId)
   ]);
-  return { role, enrollments };
+  const enrollments = gameId ? filterEnrollmentsByGame(allEnrollments, gameId) : allEnrollments;
+  const organizations = gameId ? filterOrganizationsByEnrollments(allOrganizations, enrollments) : allOrganizations;
+  log2.debug("[Timeback] Fetched student data", {
+    timebackId,
+    role,
+    enrollments: enrollments.map((e) => `${e.subject}:${e.grade}`),
+    organizations: organizations.map((o4) => `${o4.name ?? o4.id} (${o4.type})`)
+  });
+  return { id: timebackId, role, enrollments, organizations };
 }
 // ../data/src/domains/achievement/types.ts
 var AchievementCompletionType;
@@ -158285,7 +158501,7 @@ async function publishPersonalBestNotification(userId, gameId, rank, newScore, p
 }
 // ../cloudflare/src/playcademy/provider.ts
 import { readdir as readdir2, readFile as readFile2, stat } from "node:fs/promises";
-import { join as join4, relative } from "node:path";
+import { join as join5, relative } from "node:path";
 init_src();
 
 // ../cloudflare/src/core/client.ts
@@ -158812,7 +159028,7 @@ init_src();
 // ../cloudflare/src/utils/assets.ts
 import { createHash } from "node:crypto";
 import { readdir, readFile } from "node:fs/promises";
-import { join as join3 } from "node:path";
+import { join as join4 } from "node:path";
 function hashFile(content) {
   return createHash("md5").update(content).digest("hex");
 }
@@ -158832,7 +159048,7 @@ async function scanAssetDirectory(distPath) {
   async function scanFiles(dir, baseDir = dir) {
     const entries = await readdir(dir, { withFileTypes: true });
     for (const entry of entries) {
-      const fullPath = join3(dir, entry.name);
+      const fullPath = join4(dir, entry.name);
       if (entry.isDirectory()) {
         await scanFiles(fullPath, baseDir);
       } else {
@@ -159204,7 +159420,7 @@ class CloudflareProvider {
     async function scanDirectory(dir) {
       const entries = await readdir2(dir, { withFileTypes: true });
       for (const entry of entries) {
-        const fullPath = join4(dir, entry.name);
+        const fullPath = join5(dir, entry.name);
         if (entry.isDirectory()) {
           if (await scanDirectory(fullPath))
             return true;
@@ -159226,7 +159442,7 @@ class CloudflareProvider {
   async resolveAssetBasePath(dirPath) {
     const entries = await readdir2(dirPath, { withFileTypes: true });
     if (entries.length === 1 && entries[0]?.isDirectory()) {
-      const unwrappedPath = join4(dirPath, entries[0].name);
+      const unwrappedPath = join5(dirPath, entries[0].name);
       log2.debug("[CloudflareProvider] Unwrapping wrapper directory", {
         wrapper: entries[0].name
       });
@@ -159237,7 +159453,7 @@ class CloudflareProvider {
   async uploadFilesToR2(dir, baseDir, bucketName) {
     const entries = await readdir2(dir, { withFileTypes: true });
     for (const entry of entries) {
-      const fullPath = join4(dir, entry.name);
+      const fullPath = join5(dir, entry.name);
       if (entry.isDirectory()) {
         await this.uploadFilesToR2(fullPath, baseDir, bucketName);
       } else {
@@ -159725,46 +159941,25 @@ async function seedCurrencies(db) {
   }
 }
 
-// src/lib/logging/adapter.ts
-var customLogger;
-function setLogger(logger3) {
-  customLogger = logger3;
-}
-function getLogger() {
-  if (customLogger) {
-    return customLogger;
-  }
-  return {
-    info: (msg) => console.log(msg),
-    warn: (msg) => console.warn(msg),
-    error: (msg) => console.error(msg)
-  };
-}
-var logger3 = {
-  info: (msg) => {
-    if (customLogger || !config.embedded) {
-      getLogger().info(msg);
-    }
-  },
-  warn: (msg) => getLogger().warn(msg),
-  error: (msg) => getLogger().error(msg)
-};
 // src/database/seed/timeback.ts
-function resolveStudentId(studentId) {
-  if (!studentId)
-    return null;
-  if (studentId === "mock")
-    return `mock-student-${crypto.randomUUID().slice(0, 8)}`;
-  return studentId;
+function generateMockStudentId(userId) {
+  return `mock-student-${userId.slice(-8)}`;
 }
-function getAdminTimebackId() {
-  return resolveStudentId(config.timeback.studentId);
+function generateTimebackId(userId, isPrimaryUser = false) {
+  const timebackId = config.timeback.timebackId;
+  if (!timebackId) {
+    return null;
+  }
+  if (timebackId === "mock") {
+    return generateMockStudentId(userId);
+  }
+  return isPrimaryUser ? timebackId : generateMockStudentId(userId);
 }
 async function seedTimebackIntegrations(db, gameId, courses) {
   const now2 = new Date;
   let seededCount = 0;
   for (const course of courses) {
-    const courseId = `mock-${course.subject.toLowerCase()}-g${course.grade}`;
+    const courseId = course.courseId || `mock-${course.subject.toLowerCase()}-g${course.grade}`;
     try {
       const existing = await db.query.gameTimebackIntegrations.findFirst({
         where: (table14, { and: and3, eq: eq3 }) => and3(eq3(table14.gameId, gameId), eq3(table14.grade, course.grade), eq3(table14.subject, course.subject))
@@ -159782,12 +159977,10 @@ async function seedTimebackIntegrations(db, gameId, courses) {
       });
       seededCount++;
     } catch (error2) {
-      console.error(`❌ Error seeding TimeBack integration for ${course.subject}:${course.grade}:`, error2);
+      console.error(`❌ Error seeding Timeback integration for ${course.subject}:${course.grade}:`, error2);
     }
   }
-  if (seededCount > 0) {
-    logger3.info(`\uD83D\uDCDA Seeded ${seededCount} TimeBack integration(s)`);
-  }
+  return seededCount;
 }
 
 // src/database/seed/games.ts
@@ -159823,7 +160016,6 @@ async function seedCurrentProjectGame(db, project) {
       where: (games3, { eq: eq3 }) => eq3(games3.slug, project.slug)
     });
     if (existingGame) {
-      logger3.info(`\uD83C\uDFAE Game "${project.displayName}" (${project.slug}) already exists`);
       if (project.timebackCourses && project.timebackCourses.length > 0) {
         await seedTimebackIntegrations(db, existingGame.id, project.timebackCourses);
       }
@@ -159916,11 +160108,12 @@ async function seedSpriteTemplates(db) {
 // src/database/seed/index.ts
 async function seedDemoData(db) {
   try {
-    const adminTimebackId = getAdminTimebackId();
-    for (const [role, user] of Object.entries(DEMO_USERS)) {
+    const primaryUserId = DEMO_USERS.player.id;
+    for (const user of Object.values(DEMO_USERS)) {
+      const isPrimaryUser = user.id === primaryUserId;
       const userValues = {
         ...user,
-        timebackId: role === "admin" ? adminTimebackId : null
+        timebackId: generateTimebackId(user.id, isPrimaryUser)
       };
       await db.insert(users).values(userValues).onConflictDoNothing();
     }
@@ -159941,7 +160134,7 @@ async function seedDemoData(db) {
     console.error("❌ Error seeding demo data:", error2);
     throw error2;
   }
-  return DEMO_USERS.admin;
+  return DEMO_USERS.player;
 }
 
 // src/server/database.ts
@@ -159981,6 +160174,13 @@ async function setupServerDatabase(processedOptions, project) {
 // src/server/options.ts
 init_src();
 var import_json_colorizer = __toESM(require_dist2(), 1);
+
+// src/lib/logging/adapter.ts
+var customLogger;
+function setLogger(logger3) {
+  customLogger = logger3;
+}
+// src/server/options.ts
 function processServerOptions(port, options) {
   const {
     verbose = false,
@@ -160031,6 +160231,10 @@ async function startRealtimeServer(realtimeOptions, betterAuthSecret) {
   if (!realtimeOptions.enabled) {
     return null;
   }
+  if (!realtimeOptions.port) {
+    return null;
+  }
+  await waitForPort(realtimeOptions.port);
   if (typeof Bun === "undefined") {
     try {
       return Promise.resolve().then(() => (init_sandbox(), exports_sandbox)).then(({ createSandboxRealtimeServer: createSandboxRealtimeServer2 }) => createSandboxRealtimeServer2({
@@ -165324,12 +165528,32 @@ async function getUserMe(ctx) {
       log2.error(`[API /users/me] User not found in DB for valid token ID: ${user.id}`);
       throw ApiError.notFound("User not found");
     }
+    const timeback3 = userData.timebackId ? await fetchUserTimebackData(userData.timebackId, ctx.gameId) : undefined;
+    if (ctx.gameId) {
+      return {
+        id: userData.id,
+        name: userData.name,
+        role: userData.role,
+        username: userData.username,
+        email: userData.email,
+        timeback: timeback3
+      };
+    }
     const timebackAccount = await db.query.accounts.findFirst({
       where: and(eq(accounts.userId, user.id), eq(accounts.providerId, "timeback"))
     });
-    const timeback3 = userData.timebackId ? await fetchUserTimebackData(userData.timebackId) : undefined;
     return {
-      ...userData,
+      id: userData.id,
+      name: userData.name,
+      username: userData.username,
+      email: userData.email,
+      emailVerified: userData.emailVerified,
+      image: userData.image,
+      role: userData.role,
+      developerStatus: userData.developerStatus,
+      characterCreated: userData.characterCreated,
+      createdAt: userData.createdAt,
+      updatedAt: userData.updatedAt,
       hasTimebackAccount: !!timebackAccount,
       timeback: timeback3
     };
@@ -165341,16 +165565,107 @@ async function getUserMe(ctx) {
   }
 }
 
+// src/mocks/timeback.ts
+init_src();
+function shouldMockTimeback() {
+  return config.timeback.timebackId === "mock";
+}
+function getMockStudentProfile() {
+  const { organization: org, role } = config.timeback;
+  return {
+    role: role ?? "student",
+    organizations: [
+      {
+        id: org?.id ?? "PLAYCADEMY",
+        name: org?.name ?? "Playcademy Studios",
+        type: org?.type ?? "department",
+        isPrimary: true
+      }
+    ]
+  };
+}
+async function getMockEnrollments(db) {
+  const allIntegrations = await db.query.gameTimebackIntegrations.findMany();
+  return allIntegrations.map((i4) => ({
+    gameId: i4.gameId,
+    grade: i4.grade,
+    subject: i4.subject,
+    courseId: i4.courseId
+  }));
+}
+async function getMockTimebackData(db, timebackId, gameId) {
+  const { role, organizations } = getMockStudentProfile();
+  const allEnrollments = await getMockEnrollments(db);
+  const enrollments = gameId ? allEnrollments.filter((e2) => e2.gameId === gameId).map(({ gameId: _5, ...rest }) => rest) : allEnrollments;
+  log2.debug("[Timeback] Sandbox is using mock data", {
+    timebackId,
+    role,
+    enrollments: enrollments.map((e2) => `${e2.subject}:${e2.grade}`),
+    organizations: organizations.map((o5) => `${o5.name ?? o5.id}`)
+  });
+  return { id: timebackId, role, enrollments, organizations };
+}
+async function buildMockUserResponse(db, user, gameId) {
+  const timeback3 = user.timebackId ? await getMockTimebackData(db, user.timebackId, gameId) : undefined;
+  if (gameId) {
+    return {
+      id: user.id,
+      name: user.name,
+      role: user.role,
+      username: user.username,
+      email: user.email,
+      timeback: timeback3
+    };
+  }
+  const timebackAccount = await db.query.accounts.findFirst({
+    where: and(eq(accounts.userId, user.id), eq(accounts.providerId, "timeback"))
+  });
+  return {
+    id: user.id,
+    name: user.name,
+    username: user.username,
+    email: user.email,
+    emailVerified: user.emailVerified,
+    image: user.image,
+    role: user.role,
+    developerStatus: user.developerStatus,
+    characterCreated: user.characterCreated,
+    createdAt: user.createdAt,
+    updatedAt: user.updatedAt,
+    hasTimebackAccount: !!timebackAccount,
+    timeback: timeback3
+  };
+}
+
 // src/routes/platform/users.ts
 var usersRouter = new Hono2;
 usersRouter.get("/me", async (c3) => {
-  const ctx = {
-    user: c3.get("user"),
-    params: {},
-    url: new URL(c3.req.url),
-    request: c3.req.raw
-  };
+  const user = c3.get("user");
+  const gameId = c3.get("gameId");
+  if (!user) {
+    const error2 = ApiError.unauthorized("Valid session or bearer token required");
+    return c3.json(createErrorResponse(error2), error2.statusCode);
+  }
   try {
+    if (shouldMockTimeback()) {
+      const db = c3.get("db");
+      const userData2 = await db.query.users.findFirst({
+        where: eq(users.id, user.id)
+      });
+      if (!userData2) {
+        const error2 = ApiError.notFound("User not found");
+        return c3.json(createErrorResponse(error2), error2.statusCode);
+      }
+      const response = await buildMockUserResponse(db, userData2, gameId);
+      return c3.json(response);
+    }
+    const ctx = {
+      user,
+      params: {},
+      url: new URL(c3.req.url),
+      request: c3.req.raw,
+      gameId
+    };
     const userData = await getUserMe(ctx);
     return c3.json(userData);
   } catch (error2) {
@@ -170690,7 +171005,7 @@ async function getTodayTimeBackXp(ctx) {
       throw error2;
     if (error2 instanceof InvalidTimezoneError)
       throw ApiError.badRequest(error2.message);
-    log2.error("[timeback] getTodayTimeBackXp failed", { error: error2 });
+    log2.error("[Timeback] getTodayTimeBackXp failed", { error: error2 });
     throw ApiError.internal("Failed to get today's TimeBack XP", error2);
   }
 }
@@ -170706,7 +171021,7 @@ async function getTotalTimeBackXp(ctx) {
       totalXp: Number(result[0]?.totalXp) || 0
     };
   } catch (error2) {
-    log2.error("[timeback] getTotalTimeBackXp failed", { error: error2 });
+    log2.error("[Timeback] getTotalTimeBackXp failed", { error: error2 });
     throw ApiError.internal("Failed to get total TimeBack XP", error2);
   }
 }
@@ -170756,7 +171071,7 @@ async function updateTodayTimeBackXp(ctx) {
   } catch (error2) {
     if (error2 instanceof ApiError)
       throw error2;
-    log2.error("[timeback] updateTodayTimeBackXp failed", { error: error2 });
+    log2.error("[Timeback] updateTodayTimeBackXp failed", { error: error2 });
     throw ApiError.internal("Failed to update today's TimeBack XP", error2);
   }
 }
@@ -170791,7 +171106,7 @@ async function getTimeBackXpHistory(ctx) {
       }))
     };
   } catch (error2) {
-    log2.error("[timeback] getTimeBackXpHistory failed", { error: error2 });
+    log2.error("[Timeback] getTimeBackXpHistory failed", { error: error2 });
     throw ApiError.internal("Failed to get TimeBack XP history", error2);
   }
 }
@@ -170807,7 +171122,7 @@ async function getStudentEnrollments(ctx) {
     throw ApiError.badRequest("Missing timebackId parameter");
   }
   log2.debug("[API] Getting student enrollments", { userId: user.id, timebackId });
-  const enrollments = await fetchEnrollmentsForUser(timebackId);
+  const enrollments = await fetchEnrollmentsFromEduBridge(timebackId);
   log2.info("[API] Retrieved student enrollments", {
     userId: user.id,
     timebackId,
@@ -171008,13 +171323,23 @@ timebackRouter.post("/end-activity", async (c3) => {
 });
 timebackRouter.get("/enrollments/:timebackId", async (c3) => {
   const timebackId = c3.req.param("timebackId");
-  const ctx = {
-    user: c3.get("user"),
-    params: { timebackId },
-    url: new URL(c3.req.url),
-    request: c3.req.raw
-  };
+  const user = c3.get("user");
+  if (!user) {
+    const error2 = ApiError.unauthorized("Must be logged in to get enrollments");
+    return c3.json(createErrorResponse(error2), error2.statusCode);
+  }
   try {
+    if (shouldMockTimeback()) {
+      const db = c3.get("db");
+      const enrollments2 = await getMockEnrollments(db);
+      return c3.json({ enrollments: enrollments2 });
+    }
+    const ctx = {
+      user,
+      params: { timebackId },
+      url: new URL(c3.req.url),
+      request: c3.req.raw
+    };
     const result = await getStudentEnrollments(ctx);
     return c3.json(result);
   } catch (error2) {
@@ -171330,6 +171655,7 @@ function registerRoutes(app) {
 // src/server/index.ts
 var version3 = package_default.version;
 async function startServer(port, project, options = {}) {
+  await waitForPort(port);
   const processedOptions = processServerOptions(port, options);
   const db = await setupServerDatabase(processedOptions, project);
   const app = createApp(db, {
@@ -171342,11 +171668,20 @@ async function startServer(port, project, options = {}) {
   return {
     main: mainServer,
     realtime: realtimeServer,
+    timebackMode: getTimebackDisplayMode(),
+    setRole: (role) => {
+      config.timeback.role = role;
+    },
     stop: () => {
-      if (mainServer.close)
-        mainServer.close();
-      if (realtimeServer?.stop)
-        realtimeServer.stop();
+      return new Promise((resolve2) => {
+        if (realtimeServer?.stop)
+          realtimeServer.stop();
+        if (mainServer.close) {
+          mainServer.close(() => resolve2());
+        } else {
+          resolve2();
+        }
+      });
     }
   };
 }
@@ -171367,105 +171702,6 @@ var {
   Help
 } = import__4.default;
 
-// ../utils/src/port.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync, writeFileSync } from "node:fs";
-import { createServer } from "node:net";
-import { homedir } from "node:os";
-import { join as join5 } from "node:path";
-async function isPortAvailableOnHost(port, host) {
-  return new Promise((resolve2) => {
-    const server2 = createServer();
-    let resolved = false;
-    const cleanup = (result) => {
-      if (resolved)
-        return;
-      resolved = true;
-      try {
-        server2.close();
-      } catch {}
-      resolve2(result);
-    };
-    const timeout = setTimeout(() => cleanup(true), 100);
-    server2.once("error", (err2) => {
-      clearTimeout(timeout);
-      if (err2.code === "EAFNOSUPPORT" || err2.code === "EADDRNOTAVAIL") {
-        cleanup(true);
-      } else {
-        cleanup(false);
-      }
-    });
-    server2.once("listening", () => {
-      clearTimeout(timeout);
-      cleanup(true);
-    });
-    server2.listen(port, host).unref();
-  });
-}
-async function findAvailablePort(startPort = 4321) {
-  if (await isPortAvailableOnHost(startPort, "0.0.0.0")) {
-    return startPort;
-  } else {
-    return findAvailablePort(startPort + 1);
-  }
-}
-function getRegistryPath() {
-  const home = homedir();
-  const dir = join5(home, ".playcademy");
-  if (!existsSync2(dir)) {
-    mkdirSync2(dir, { recursive: true });
-  }
-  return join5(dir, ".proc");
-}
-function readRegistry() {
-  const registryPath = getRegistryPath();
-  if (!existsSync2(registryPath)) {
-    return {};
-  }
-  try {
-    const content = readFileSync(registryPath, "utf-8");
-    return JSON.parse(content);
-  } catch {
-    return {};
-  }
-}
-function writeRegistry(registry2) {
-  const registryPath = getRegistryPath();
-  writeFileSync(registryPath, JSON.stringify(registry2, null, 2), "utf-8");
-}
-function getServerKey(type, port) {
-  return `${type}-${port}`;
-}
-function writeServerInfo(type, info2) {
-  const registry2 = readRegistry();
-  const key = getServerKey(type, info2.port);
-  registry2[key] = info2;
-  writeRegistry(registry2);
-}
-function cleanupServerInfo(type, projectRoot, pid) {
-  const registry2 = readRegistry();
-  const keysToRemove = [];
-  for (const [key, info2] of Object.entries(registry2)) {
-    if (key.startsWith(`${type}-`)) {
-      let matches = true;
-      if (projectRoot && info2.projectRoot !== projectRoot) {
-        matches = false;
-      }
-      if (pid !== undefined && info2.pid !== pid) {
-        matches = false;
-      }
-      if (matches) {
-        keysToRemove.push(key);
-      }
-    }
-  }
-  for (const key of keysToRemove) {
-    delete registry2[key];
-  }
-  if (keysToRemove.length > 0) {
-    writeRegistry(registry2);
-  }
-}
-
 // src/cli/display.ts
 var import_picocolors = __toESM(require_picocolors(), 1);
 function printBanner(options) {
@@ -171687,7 +171923,7 @@ function parseTimebackOptions(options) {
       onerosterApiUrl: options.timebackOnerosterUrl || "http://localhost:9000",
       caliperApiUrl: options.timebackCaliperUrl || "http://localhost:9001",
       courseId: options.timebackCourseId,
-      studentId: options.timebackStudentId
+      timebackId: options.timebackStudentId
     };
   }
   if (options.timebackOnerosterUrl) {
@@ -171696,7 +171932,7 @@ function parseTimebackOptions(options) {
       onerosterApiUrl: options.timebackOnerosterUrl,
       caliperApiUrl: options.timebackCaliperUrl,
       courseId: options.timebackCourseId,
-      studentId: options.timebackStudentId
+      timebackId: options.timebackStudentId
     };
   }
   return;
@@ -171706,12 +171942,15 @@ function parseTimebackOptions(options) {
 var program2 = new Command;
 program2.name("playcademy-sandbox").description("Local development server for Playcademy game development").version(version3).option("-p, --port <number>", "Port to run the server on", "4321").option("-v, --verbose", "Enable verbose logging", false).option("--project-name <name>", "Name of the current project").option("--project-slug <slug>", "Slug of the current project").option("--realtime", "Enable the realtime server", false).option("--realtime-port <number>", "Port for the realtime server (defaults to main port + 1)").option("--no-seed", "Do not seed the database with demo data").option("--recreate-db", "Recreate the on-disk database on start", false).option("--memory", "Use in-memory database (no persistence)", false).option("--db-path <path>", "Custom path for the database file (relative to cwd or absolute)").option("--config-path <path>", "Path to playcademy.config.json (defaults to cwd)").option("--timeback-local", "Use local TimeBack instance").option("--timeback-oneroster-url <url>", "TimeBack OneRoster API URL").option("--timeback-caliper-url <url>", "TimeBack Caliper API URL").option("--timeback-course-id <id>", "TimeBack course ID for seeding").option("--timeback-student-id <id>", "TimeBack student ID for demo user").action(async (options) => {
   try {
-    const requestedPort = parseInt(options.port);
-    const availablePort = await findAvailablePort(requestedPort);
-    const realtimePort = options.realtimePort ? parseInt(options.realtimePort) : availablePort + 1;
+    const port = parseInt(options.port);
+    const realtimePort = options.realtimePort ? parseInt(options.realtimePort) : port + 1;
+    await requirePortAvailable(port);
+    if (options.realtime) {
+      await requirePortAvailable(realtimePort);
+    }
     const project = await parseProjectInfo(options);
     const timebackOptions = parseTimebackOptions(options);
-    const servers = await startServer(availablePort, project, {
+    const servers = await startServer(port, project, {
       seed: options.seed,
       verbose: options.verbose,
       memoryOnly: options.memory,
@@ -171725,14 +171964,14 @@ program2.name("playcademy-sandbox").description("Local development server for Pl
     });
     writeServerInfo("sandbox", {
       pid: process.pid,
-      port: availablePort,
-      url: `http://localhost:${availablePort}/api`,
+      port,
+      url: `http://localhost:${port}/api`,
       startedAt: Date.now(),
       projectRoot: process.cwd()
     });
     printBanner({
       version: version3,
-      port: availablePort,
+      port,
       realtimePort,
       hasRealtime: !!servers.realtime
     });