@playcademy/sandbox 0.3.11 → 0.3.13

package/dist/cli.js

@@ -351,11 +351,15 @@ var init_overworld = __esm(() => {
 var PLATFORM_TIMEZONE = "America/New_York";
 
 // ../constants/src/timeback.ts
-var TIMEBACK_ORG_SOURCED_ID = "PLAYCADEMY";
-var init_timeback2 = () => {};
+var TIMEBACK_ROUTES, TIMEBACK_ORG_SOURCED_ID = "PLAYCADEMY";
+var init_timeback2 = __esm(() => {
+  TIMEBACK_ROUTES = {
+    END_ACTIVITY: "/integrations/timeback/end-activity"
+  };
+});
 
 // ../constants/src/workers.ts
-var WORKER_NAMING;
+var WORKER_NAMING, SECRETS_PREFIX = "secrets_";
 var init_workers = __esm(() => {
   WORKER_NAMING = {
     STAGING_PREFIX: "staging-",
@@ -1225,7 +1229,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@playcademy/sandbox",
-    version: "0.3.11",
+    version: "0.3.13",
     description: "Local development server for Playcademy game development",
     type: "module",
     exports: {
@@ -1676,7 +1680,7 @@ function createHandle(buildContext) {
       try {
         const ctx = await buildContext(c);
         const result = await controller(ctx);
-        if (options?.status === 204 || result === undefined || result === null) {
+        if (options?.status === 204 || result === undefined) {
           return new Response(null, { status: options?.status ?? 204 });
         }
         return new Response(JSON.stringify(result), {
@@ -13915,6 +13919,20 @@ class GameService {
       orderBy: [desc(games.createdAt)]
     });
   }
+  async getSubjects() {
+    const db2 = this.ctx.db;
+    const integrations = await db2.query.gameTimebackIntegrations.findMany({
+      columns: { gameId: true, subject: true },
+      orderBy: [asc(gameTimebackIntegrations.createdAt)]
+    });
+    const subjectMap = {};
+    for (const integration of integrations) {
+      if (!(integration.gameId in subjectMap)) {
+        subjectMap[integration.gameId] = integration.subject;
+      }
+    }
+    return subjectMap;
+  }
   async getById(gameId) {
     const db2 = this.ctx.db;
     const game = await db2.query.games.findFirst({
@@ -14909,13 +14927,13 @@ class LevelService {
       throw new BadRequestError("Level must be at least 1");
     }
     if (levelConfigCache?.has(level)) {
-      return levelConfigCache.get(level) || null;
+      return levelConfigCache.get(level) ?? null;
     }
     const [config2] = await this.ctx.db.select().from(levelConfigs).where(eq(levelConfigs.level, level)).limit(1);
     if (levelConfigCache && config2) {
       levelConfigCache.set(level, config2);
     }
-    return config2 || null;
+    return config2 ?? null;
   }
   async listConfigs() {
     return this.ctx.db.select().from(levelConfigs).orderBy(levelConfigs.level);
@@ -15802,8 +15820,9 @@ class SecretsService {
     }
   }
 }
-var logger21, SECRETS_PREFIX = "secrets_", INTERNAL_SECRET_KEYS;
+var logger21, INTERNAL_SECRET_KEYS;
 var init_secrets_service = __esm(() => {
+  init_src();
   init_src2();
   init_config2();
   init_errors();
@@ -15812,6 +15831,32 @@ var init_secrets_service = __esm(() => {
   INTERNAL_SECRET_KEYS = ["PLAYCADEMY_API_KEY", "GAME_ID", "PLAYCADEMY_BASE_URL"];
 });
 
+// ../edge-play/src/constants.ts
+var ROUTES;
+var init_constants2 = __esm(() => {
+  init_src();
+  ROUTES = {
+    INDEX: "/api",
+    HEALTH: "/api/health",
+    TIMEBACK: {
+      END_ACTIVITY: `/api${TIMEBACK_ROUTES.END_ACTIVITY}`
+    }
+  };
+});
+
+// ../edge-play/src/entry/setup.ts
+function prefixSecrets(secrets) {
+  const prefixed = {};
+  for (const [key, value] of Object.entries(secrets)) {
+    prefixed[SECRETS_PREFIX + key] = value;
+  }
+  return prefixed;
+}
+var init_setup = __esm(() => {
+  init_src();
+  init_constants2();
+});
+
 // ../api-core/src/services/seed.service.ts
 class SeedService {
   ctx;
@@ -15826,7 +15871,7 @@ class SeedService {
     }
     return cf;
   }
-  async seed(slug2, code, user) {
+  async seed(slug2, code, user, secrets) {
     const cf = this.getCloudflare();
     const game = await this.ctx.services.game.validateDeveloperAccessBySlug(user, slug2);
     const isProd = isProduction2(this.ctx.config);
@@ -15838,10 +15883,11 @@ class SeedService {
       gameId: game.id,
       slug: slug2,
       deploymentId,
-      codeLength: code.length
+      codeLength: code.length,
+      secretCount: secrets ? Object.keys(secrets).length : 0
     });
     try {
-      const workerResponse = await this.deployAndExecuteSeedWorker(cf, seedDeploymentId, game.id, deploymentId, code);
+      const workerResponse = await this.deployAndExecuteSeedWorker(cf, seedDeploymentId, game.id, deploymentId, code, secrets);
       logger22.info("Seed completed", {
         gameId: game.id,
         slug: slug2,
@@ -15913,7 +15959,7 @@ class SeedService {
       });
     }
   }
-  async deployAndExecuteSeedWorker(cf, seedDeploymentId, gameId, deploymentId, workerCode) {
+  async deployAndExecuteSeedWorker(cf, seedDeploymentId, gameId, deploymentId, workerCode, secrets) {
     try {
       const result = await cf.deploy(seedDeploymentId, workerCode, {
         GAME_ID: gameId,
@@ -15923,6 +15969,13 @@ class SeedService {
         keepAssets: false
       });
       logger22.info("Worker deployed", { seedDeploymentId, url: result.url });
+      if (secrets && Object.keys(secrets).length > 0) {
+        await cf.setSecrets(seedDeploymentId, prefixSecrets(secrets));
+        logger22.info("Secrets bound to worker", {
+          seedDeploymentId,
+          count: Object.keys(secrets).length
+        });
+      }
       return await this.executeSeedWorker(result.url, seedDeploymentId);
     } finally {
       await this.cleanupSeedWorker(cf, seedDeploymentId);
@@ -16038,6 +16091,7 @@ class SeedService {
 }
 var logger22;
 var init_seed_service = __esm(() => {
+  init_setup();
   init_src2();
   init_config2();
   init_errors();
@@ -16505,7 +16559,7 @@ function isTimebackSubject(value) {
 function isTimebackGrade(value) {
   return typeof value === "number" && Number.isInteger(value) && GRADE_VALUES.includes(value);
 }
-var __esm2 = (fn, res) => () => (fn && (res = fn(fn = 0)), res), ACHIEVEMENT_IDS2, ACHIEVEMENT_DEFINITIONS2, init_achievements2, init_auth2 = () => {}, TSC_PACKAGE2 = "@typescript/native-preview", USE_NATIVE_TSC2, init_typescript2, init_character2 = () => {}, PLAYCADEMY_BASE_URLS, init_domains2, init_env_vars2 = () => {}, ITEM_SLUGS2, CURRENCIES2, BADGES2, init_overworld2, TIMEBACK_CALIPER_SENSORS, TIMEBACK_ORG_SOURCED_ID2 = "PLAYCADEMY", TIMEBACK_ORG_NAME = "Playcademy Studios", TIMEBACK_ORG_TYPE = "department", TIMEBACK_COURSE_DEFAULTS, TIMEBACK_RESOURCE_DEFAULTS, TIMEBACK_COMPONENT_DEFAULTS, TIMEBACK_COMPONENT_RESOURCE_DEFAULTS, init_timeback3, init_workers2 = () => {}, init_src5, TIMEBACK_API_URLS, TIMEBACK_AUTH_URLS, CALIPER_API_URLS, ONEROSTER_ENDPOINTS, CALIPER_ENDPOINTS, CALIPER_CONSTANTS, TIMEBACK_EVENT_TYPES, TIMEBACK_ACTIONS, TIMEBACK_TYPES, ACTIVITY_METRIC_TYPES, TIME_METRIC_TYPES, TIMEBACK_SUBJECTS, TIMEBACK_GRADE_LEVELS, TIMEBACK_GRADE_LEVEL_LABELS, CALIPER_SUBJECTS, ONEROSTER_STATUS, SCORE_STATUS, ENV_VARS, HTTP_DEFAULTS, AUTH_DEFAULTS, CACHE_DEFAULTS, CONFIG_DEFAULTS, PLAYCADEMY_DEFAULTS, RESOURCE_DEFAULTS, HTTP_STATUS, ERROR_NAMES, init_constants2, isObject = (value) => typeof value === "object" && value !== null, SUBJECT_VALUES, GRADE_VALUES;
+var __esm2 = (fn, res) => () => (fn && (res = fn(fn = 0)), res), ACHIEVEMENT_IDS2, ACHIEVEMENT_DEFINITIONS2, init_achievements2, init_auth2 = () => {}, TSC_PACKAGE2 = "@typescript/native-preview", USE_NATIVE_TSC2, init_typescript2, init_character2 = () => {}, PLAYCADEMY_BASE_URLS, init_domains2, init_env_vars2 = () => {}, ITEM_SLUGS2, CURRENCIES2, BADGES2, init_overworld2, TIMEBACK_CALIPER_SENSORS, TIMEBACK_ORG_SOURCED_ID2 = "PLAYCADEMY", TIMEBACK_ORG_NAME = "Playcademy Studios", TIMEBACK_ORG_TYPE = "department", TIMEBACK_COURSE_DEFAULTS, TIMEBACK_RESOURCE_DEFAULTS, TIMEBACK_COMPONENT_DEFAULTS, TIMEBACK_COMPONENT_RESOURCE_DEFAULTS, init_timeback3, init_workers2 = () => {}, init_src5, TIMEBACK_API_URLS, TIMEBACK_AUTH_URLS, CALIPER_API_URLS, ONEROSTER_ENDPOINTS, CALIPER_ENDPOINTS, CALIPER_CONSTANTS, TIMEBACK_EVENT_TYPES, TIMEBACK_ACTIONS, TIMEBACK_TYPES, ACTIVITY_METRIC_TYPES, TIME_METRIC_TYPES, TIMEBACK_SUBJECTS, TIMEBACK_GRADE_LEVELS, TIMEBACK_GRADE_LEVEL_LABELS, CALIPER_SUBJECTS, ONEROSTER_STATUS, SCORE_STATUS, ENV_VARS, HTTP_DEFAULTS, AUTH_DEFAULTS, CACHE_DEFAULTS, CONFIG_DEFAULTS, PLAYCADEMY_DEFAULTS, RESOURCE_DEFAULTS, HTTP_STATUS, ERROR_NAMES, init_constants3, isObject = (value) => typeof value === "object" && value !== null, SUBJECT_VALUES, GRADE_VALUES;
 var init_types7 = __esm(() => {
   init_achievements2 = __esm2(() => {
     ACHIEVEMENT_IDS2 = {
@@ -16682,7 +16736,7 @@ var init_types7 = __esm(() => {
     init_timeback3();
     init_workers2();
   });
-  init_constants2 = __esm2(() => {
+  init_constants3 = __esm2(() => {
     init_src5();
     TIMEBACK_API_URLS = {
       production: "https://api.alpha-1edtech.ai",
@@ -16857,7 +16911,7 @@ var init_types7 = __esm(() => {
       timebackSdk: "TimebackSDKError"
     };
   });
-  init_constants2();
+  init_constants3();
   SUBJECT_VALUES = TIMEBACK_SUBJECTS;
   GRADE_VALUES = TIMEBACK_GRADE_LEVELS;
 });
@@ -20155,7 +20209,7 @@ var __defProp2, __export2 = (target, all) => {
     course: (courseId) => `${base}${ONEROSTER_ENDPOINTS2.courses}/${courseId}`,
     componentResource: (resourceId) => `${base}${ONEROSTER_ENDPOINTS2.componentResources}/${resourceId}`
   };
-}, CALIPER_CONSTANTS2, TIMEBACK_EVENT_TYPES2, TIMEBACK_ACTIONS2, TIMEBACK_TYPES2, ACTIVITY_METRIC_TYPES2, TIME_METRIC_TYPES2, TIMEBACK_SUBJECTS2, TIMEBACK_GRADE_LEVELS2, TIMEBACK_GRADE_LEVEL_LABELS2, CALIPER_SUBJECTS2, ONEROSTER_STATUS2, SCORE_STATUS2, ENV_VARS2, HTTP_DEFAULTS2, AUTH_DEFAULTS2, CACHE_DEFAULTS2, CONFIG_DEFAULTS2, PLAYCADEMY_DEFAULTS2, RESOURCE_DEFAULTS2, HTTP_STATUS2, ERROR_NAMES2, init_constants3, exports_verify, init_verify, TimebackError, TimebackApiError, TimebackAuthenticationError, StudentNotFoundError, ConfigurationError, ResourceNotFoundError, isObject2 = (value) => typeof value === "object" && value !== null, SUBJECT_VALUES2, GRADE_VALUES2, isBrowser2 = () => {
+}, CALIPER_CONSTANTS2, TIMEBACK_EVENT_TYPES2, TIMEBACK_ACTIONS2, TIMEBACK_TYPES2, ACTIVITY_METRIC_TYPES2, TIME_METRIC_TYPES2, TIMEBACK_SUBJECTS2, TIMEBACK_GRADE_LEVELS2, TIMEBACK_GRADE_LEVEL_LABELS2, CALIPER_SUBJECTS2, ONEROSTER_STATUS2, SCORE_STATUS2, ENV_VARS2, HTTP_DEFAULTS2, AUTH_DEFAULTS2, CACHE_DEFAULTS2, CONFIG_DEFAULTS2, PLAYCADEMY_DEFAULTS2, RESOURCE_DEFAULTS2, HTTP_STATUS2, ERROR_NAMES2, init_constants4, exports_verify, init_verify, TimebackError, TimebackApiError, TimebackAuthenticationError, StudentNotFoundError, ConfigurationError, ResourceNotFoundError, isObject2 = (value) => typeof value === "object" && value !== null, SUBJECT_VALUES2, GRADE_VALUES2, isBrowser2 = () => {
   const g = globalThis;
   return typeof g.window !== "undefined" && typeof g.document !== "undefined";
 }, isProduction3 = () => {
@@ -20694,7 +20748,7 @@ var init_dist3 = __esm(() => {
     init_timeback4();
     init_workers3();
   });
-  init_constants3 = __esm3(() => {
+  init_constants4 = __esm3(() => {
     init_src6();
     TIMEBACK_API_URLS2 = {
       production: "https://api.alpha-1edtech.ai",
@@ -20875,9 +20929,9 @@ var init_dist3 = __esm(() => {
     fetchTimebackConfig: () => fetchTimebackConfig
   });
   init_verify = __esm3(() => {
-    init_constants3();
+    init_constants4();
   });
-  init_constants3();
+  init_constants4();
   TimebackError = class TimebackError extends Error {
     constructor(message) {
       super(message);
@@ -20934,7 +20988,7 @@ var init_dist3 = __esm(() => {
       Object.setPrototypeOf(this, ResourceNotFoundError.prototype);
     }
   };
-  init_constants3();
+  init_constants4();
   SUBJECT_VALUES2 = TIMEBACK_SUBJECTS2;
   GRADE_VALUES2 = TIMEBACK_GRADE_LEVELS2;
   colors3 = {
@@ -20955,8 +21009,8 @@ var init_dist3 = __esm(() => {
   };
   log3 = createLogger2();
   init_verify();
-  init_constants3();
-  init_constants3();
+  init_constants4();
+  init_constants4();
   if (process.env.DEBUG === "true") {
     process.env.TERM = "dumb";
   }
@@ -20968,13 +21022,13 @@ var init_dist3 = __esm(() => {
       this.name = ERROR_NAMES2.timebackAuth;
     }
   };
-  init_constants3();
-  init_constants3();
-  init_constants3();
-  init_constants3();
-  init_constants3();
-  init_constants3();
-  init_constants3();
+  init_constants4();
+  init_constants4();
+  init_constants4();
+  init_constants4();
+  init_constants4();
+  init_constants4();
+  init_constants4();
   exports_external2 = {};
   __export2(exports_external2, {
     void: () => voidType2,
@@ -24532,7 +24586,7 @@ var init_http_exception = () => {};
 
 // ../../node_modules/hono/dist/request/constants.js
 var GET_MATCH_RESULT;
-var init_constants4 = __esm(() => {
+var init_constants5 = __esm(() => {
   GET_MATCH_RESULT = Symbol();
 });
 
@@ -24796,7 +24850,7 @@ var init_url = __esm(() => {
 var tryDecodeURIComponent = (str) => tryDecode(str, decodeURIComponent_), HonoRequest;
 var init_request = __esm(() => {
   init_http_exception();
-  init_constants4();
+  init_constants5();
   init_body();
   init_url();
   HonoRequest = class {
@@ -25126,7 +25180,7 @@ var init_router = __esm(() => {
 
 // ../../node_modules/hono/dist/utils/constants.js
 var COMPOSED_HANDLER = "__COMPOSED_HANDLER";
-var init_constants5 = () => {};
+var init_constants6 = () => {};
 
 // ../../node_modules/hono/dist/hono-base.js
 var notFoundHandler = (c) => {
@@ -25348,7 +25402,7 @@ var init_hono_base = __esm(() => {
   init_compose();
   init_context2();
   init_router();
-  init_constants5();
+  init_constants6();
   init_url();
 });
 
@@ -82705,7 +82759,8 @@ var init_schemas3 = __esm(() => {
   });
   SetSecretsRequestSchema = exports_external.record(exports_external.string().min(1), exports_external.string());
   SeedRequestSchema = exports_external.object({
-    code: exports_external.string().min(1, "Seed code is required")
+    code: exports_external.string().min(1, "Seed code is required"),
+    secrets: exports_external.record(exports_external.string(), exports_external.string()).optional()
   });
   SchemaInfoSchema = exports_external.object({
     sql: exports_external.string(),
@@ -92876,7 +92931,7 @@ var init_domain_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/game.controller.ts
-var logger43, list3, getById2, getBySlug, upsertBySlug, remove3, games2;
+var logger43, list3, getSubjects, getById2, getBySlug, upsertBySlug, remove3, games2;
 var init_game_controller = __esm(() => {
   init_esm();
   init_schemas_index();
@@ -92889,6 +92944,10 @@ var init_game_controller = __esm(() => {
     logger43.debug("Listing games", { userId: ctx.user.id });
     return ctx.services.game.list();
   });
+  getSubjects = requireAuth(async (ctx) => {
+    logger43.debug("Getting game subjects", { userId: ctx.user.id });
+    return ctx.services.game.getSubjects();
+  });
   getById2 = requireAuth(async (ctx) => {
     const gameId = ctx.params.gameId;
     if (!gameId) {
@@ -92941,6 +93000,7 @@ var init_game_controller = __esm(() => {
   });
   games2 = {
     list: list3,
+    getSubjects,
     getById: getById2,
     getBySlug,
     upsertBySlug,
@@ -93324,7 +93384,6 @@ var init_leaderboard_controller = __esm(() => {
   init_esm();
   init_schemas_index();
   init_src2();
-  init_src4();
   init_errors();
   init_utils11();
   logger47 = log.scope("LeaderboardController");
@@ -93413,9 +93472,6 @@ var init_leaderboard_controller = __esm(() => {
     if (!gameId || !userId) {
       throw ApiError.badRequest("Game ID and User ID are required");
     }
-    if (!isValidUUID(userId)) {
-      throw ApiError.unprocessableEntity("userId must be a valid UUID format");
-    }
     logger47.debug("Getting user rank", {
       requesterId: ctx.user.id,
       gameId,
@@ -93428,9 +93484,6 @@ var init_leaderboard_controller = __esm(() => {
     if (!userId) {
       throw ApiError.badRequest("User ID is required");
     }
-    if (!isValidUUID(userId)) {
-      throw ApiError.unprocessableEntity("userId must be a valid UUID format");
-    }
     const url = ctx.url;
     const limit = Math.min(Number(url.searchParams.get("limit") || "50"), 100);
     const gameId = url.searchParams.get("gameId") || undefined;
@@ -93447,9 +93500,6 @@ var init_leaderboard_controller = __esm(() => {
     if (!gameId || !userId) {
       throw ApiError.badRequest("Game ID and User ID are required");
     }
-    if (!isValidUUID(userId)) {
-      throw ApiError.unprocessableEntity("userId must be a valid UUID format");
-    }
     const url = ctx.url;
     const limit = Math.min(Number(url.searchParams.get("limit") || "10"), 100);
     logger47.debug("Getting user scores", {
@@ -93875,8 +93925,13 @@ var init_seed_controller = __esm(() => {
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger55.debug("Seeding database", { userId: ctx.user.id, slug: slug2, codeLength: body2.code.length });
-    return ctx.services.seed.seed(slug2, body2.code, ctx.user);
+    logger55.debug("Seeding database", {
+      userId: ctx.user.id,
+      slug: slug2,
+      codeLength: body2.code.length,
+      secretCount: body2.secrets ? Object.keys(body2.secrets).length : 0
+    });
+    return ctx.services.seed.seed(slug2, body2.code, ctx.user, body2.secrets);
   });
 });
 

package/dist/constants.js

@@ -197,11 +197,15 @@ var init_overworld = __esm(() => {
 var PLATFORM_TIMEZONE = "America/New_York";
 
 // ../constants/src/timeback.ts
-var TIMEBACK_ORG_SOURCED_ID = "PLAYCADEMY";
-var init_timeback = () => {};
+var TIMEBACK_ROUTES, TIMEBACK_ORG_SOURCED_ID = "PLAYCADEMY";
+var init_timeback = __esm(() => {
+  TIMEBACK_ROUTES = {
+    END_ACTIVITY: "/integrations/timeback/end-activity"
+  };
+});
 
 // ../constants/src/workers.ts
-var WORKER_NAMING;
+var WORKER_NAMING, SECRETS_PREFIX = "secrets_";
 var init_workers = __esm(() => {
   WORKER_NAMING = {
     STAGING_PREFIX: "staging-",

package/dist/server.js

@@ -350,11 +350,15 @@ var init_overworld = __esm(() => {
 var PLATFORM_TIMEZONE = "America/New_York";
 
 // ../constants/src/timeback.ts
-var TIMEBACK_ORG_SOURCED_ID = "PLAYCADEMY";
-var init_timeback2 = () => {};
+var TIMEBACK_ROUTES, TIMEBACK_ORG_SOURCED_ID = "PLAYCADEMY";
+var init_timeback2 = __esm(() => {
+  TIMEBACK_ROUTES = {
+    END_ACTIVITY: "/integrations/timeback/end-activity"
+  };
+});
 
 // ../constants/src/workers.ts
-var WORKER_NAMING;
+var WORKER_NAMING, SECRETS_PREFIX = "secrets_";
 var init_workers = __esm(() => {
   WORKER_NAMING = {
     STAGING_PREFIX: "staging-",
@@ -1224,7 +1228,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@playcademy/sandbox",
-    version: "0.3.11",
+    version: "0.3.13",
     description: "Local development server for Playcademy game development",
     type: "module",
     exports: {
@@ -1675,7 +1679,7 @@ function createHandle(buildContext) {
       try {
         const ctx = await buildContext(c);
         const result = await controller(ctx);
-        if (options?.status === 204 || result === undefined || result === null) {
+        if (options?.status === 204 || result === undefined) {
           return new Response(null, { status: options?.status ?? 204 });
         }
         return new Response(JSON.stringify(result), {
@@ -13914,6 +13918,20 @@ class GameService {
       orderBy: [desc(games.createdAt)]
     });
   }
+  async getSubjects() {
+    const db2 = this.ctx.db;
+    const integrations = await db2.query.gameTimebackIntegrations.findMany({
+      columns: { gameId: true, subject: true },
+      orderBy: [asc(gameTimebackIntegrations.createdAt)]
+    });
+    const subjectMap = {};
+    for (const integration of integrations) {
+      if (!(integration.gameId in subjectMap)) {
+        subjectMap[integration.gameId] = integration.subject;
+      }
+    }
+    return subjectMap;
+  }
   async getById(gameId) {
     const db2 = this.ctx.db;
     const game = await db2.query.games.findFirst({
@@ -14908,13 +14926,13 @@ class LevelService {
       throw new BadRequestError("Level must be at least 1");
     }
     if (levelConfigCache?.has(level)) {
-      return levelConfigCache.get(level) || null;
+      return levelConfigCache.get(level) ?? null;
     }
     const [config2] = await this.ctx.db.select().from(levelConfigs).where(eq(levelConfigs.level, level)).limit(1);
     if (levelConfigCache && config2) {
       levelConfigCache.set(level, config2);
     }
-    return config2 || null;
+    return config2 ?? null;
   }
   async listConfigs() {
     return this.ctx.db.select().from(levelConfigs).orderBy(levelConfigs.level);
@@ -15801,8 +15819,9 @@ class SecretsService {
     }
   }
 }
-var logger21, SECRETS_PREFIX = "secrets_", INTERNAL_SECRET_KEYS;
+var logger21, INTERNAL_SECRET_KEYS;
 var init_secrets_service = __esm(() => {
+  init_src();
   init_src2();
   init_config2();
   init_errors();
@@ -15811,6 +15830,32 @@ var init_secrets_service = __esm(() => {
   INTERNAL_SECRET_KEYS = ["PLAYCADEMY_API_KEY", "GAME_ID", "PLAYCADEMY_BASE_URL"];
 });
 
+// ../edge-play/src/constants.ts
+var ROUTES;
+var init_constants2 = __esm(() => {
+  init_src();
+  ROUTES = {
+    INDEX: "/api",
+    HEALTH: "/api/health",
+    TIMEBACK: {
+      END_ACTIVITY: `/api${TIMEBACK_ROUTES.END_ACTIVITY}`
+    }
+  };
+});
+
+// ../edge-play/src/entry/setup.ts
+function prefixSecrets(secrets) {
+  const prefixed = {};
+  for (const [key, value] of Object.entries(secrets)) {
+    prefixed[SECRETS_PREFIX + key] = value;
+  }
+  return prefixed;
+}
+var init_setup = __esm(() => {
+  init_src();
+  init_constants2();
+});
+
 // ../api-core/src/services/seed.service.ts
 class SeedService {
   ctx;
@@ -15825,7 +15870,7 @@ class SeedService {
     }
     return cf;
   }
-  async seed(slug2, code, user) {
+  async seed(slug2, code, user, secrets) {
     const cf = this.getCloudflare();
     const game = await this.ctx.services.game.validateDeveloperAccessBySlug(user, slug2);
     const isProd = isProduction2(this.ctx.config);
@@ -15837,10 +15882,11 @@ class SeedService {
       gameId: game.id,
       slug: slug2,
       deploymentId,
-      codeLength: code.length
+      codeLength: code.length,
+      secretCount: secrets ? Object.keys(secrets).length : 0
     });
     try {
-      const workerResponse = await this.deployAndExecuteSeedWorker(cf, seedDeploymentId, game.id, deploymentId, code);
+      const workerResponse = await this.deployAndExecuteSeedWorker(cf, seedDeploymentId, game.id, deploymentId, code, secrets);
       logger22.info("Seed completed", {
         gameId: game.id,
         slug: slug2,
@@ -15912,7 +15958,7 @@ class SeedService {
       });
     }
   }
-  async deployAndExecuteSeedWorker(cf, seedDeploymentId, gameId, deploymentId, workerCode) {
+  async deployAndExecuteSeedWorker(cf, seedDeploymentId, gameId, deploymentId, workerCode, secrets) {
     try {
       const result = await cf.deploy(seedDeploymentId, workerCode, {
         GAME_ID: gameId,
@@ -15922,6 +15968,13 @@ class SeedService {
         keepAssets: false
       });
       logger22.info("Worker deployed", { seedDeploymentId, url: result.url });
+      if (secrets && Object.keys(secrets).length > 0) {
+        await cf.setSecrets(seedDeploymentId, prefixSecrets(secrets));
+        logger22.info("Secrets bound to worker", {
+          seedDeploymentId,
+          count: Object.keys(secrets).length
+        });
+      }
       return await this.executeSeedWorker(result.url, seedDeploymentId);
     } finally {
       await this.cleanupSeedWorker(cf, seedDeploymentId);
@@ -16037,6 +16090,7 @@ class SeedService {
 }
 var logger22;
 var init_seed_service = __esm(() => {
+  init_setup();
   init_src2();
   init_config2();
   init_errors();
@@ -16504,7 +16558,7 @@ function isTimebackSubject(value) {
 function isTimebackGrade(value) {
   return typeof value === "number" && Number.isInteger(value) && GRADE_VALUES.includes(value);
 }
-var __esm2 = (fn, res) => () => (fn && (res = fn(fn = 0)), res), ACHIEVEMENT_IDS2, ACHIEVEMENT_DEFINITIONS2, init_achievements2, init_auth2 = () => {}, TSC_PACKAGE2 = "@typescript/native-preview", USE_NATIVE_TSC2, init_typescript2, init_character2 = () => {}, PLAYCADEMY_BASE_URLS, init_domains2, init_env_vars2 = () => {}, ITEM_SLUGS2, CURRENCIES2, BADGES2, init_overworld2, TIMEBACK_CALIPER_SENSORS, TIMEBACK_ORG_SOURCED_ID2 = "PLAYCADEMY", TIMEBACK_ORG_NAME = "Playcademy Studios", TIMEBACK_ORG_TYPE = "department", TIMEBACK_COURSE_DEFAULTS, TIMEBACK_RESOURCE_DEFAULTS, TIMEBACK_COMPONENT_DEFAULTS, TIMEBACK_COMPONENT_RESOURCE_DEFAULTS, init_timeback3, init_workers2 = () => {}, init_src5, TIMEBACK_API_URLS, TIMEBACK_AUTH_URLS, CALIPER_API_URLS, ONEROSTER_ENDPOINTS, CALIPER_ENDPOINTS, CALIPER_CONSTANTS, TIMEBACK_EVENT_TYPES, TIMEBACK_ACTIONS, TIMEBACK_TYPES, ACTIVITY_METRIC_TYPES, TIME_METRIC_TYPES, TIMEBACK_SUBJECTS, TIMEBACK_GRADE_LEVELS, TIMEBACK_GRADE_LEVEL_LABELS, CALIPER_SUBJECTS, ONEROSTER_STATUS, SCORE_STATUS, ENV_VARS, HTTP_DEFAULTS, AUTH_DEFAULTS, CACHE_DEFAULTS, CONFIG_DEFAULTS, PLAYCADEMY_DEFAULTS, RESOURCE_DEFAULTS, HTTP_STATUS, ERROR_NAMES, init_constants2, isObject = (value) => typeof value === "object" && value !== null, SUBJECT_VALUES, GRADE_VALUES;
+var __esm2 = (fn, res) => () => (fn && (res = fn(fn = 0)), res), ACHIEVEMENT_IDS2, ACHIEVEMENT_DEFINITIONS2, init_achievements2, init_auth2 = () => {}, TSC_PACKAGE2 = "@typescript/native-preview", USE_NATIVE_TSC2, init_typescript2, init_character2 = () => {}, PLAYCADEMY_BASE_URLS, init_domains2, init_env_vars2 = () => {}, ITEM_SLUGS2, CURRENCIES2, BADGES2, init_overworld2, TIMEBACK_CALIPER_SENSORS, TIMEBACK_ORG_SOURCED_ID2 = "PLAYCADEMY", TIMEBACK_ORG_NAME = "Playcademy Studios", TIMEBACK_ORG_TYPE = "department", TIMEBACK_COURSE_DEFAULTS, TIMEBACK_RESOURCE_DEFAULTS, TIMEBACK_COMPONENT_DEFAULTS, TIMEBACK_COMPONENT_RESOURCE_DEFAULTS, init_timeback3, init_workers2 = () => {}, init_src5, TIMEBACK_API_URLS, TIMEBACK_AUTH_URLS, CALIPER_API_URLS, ONEROSTER_ENDPOINTS, CALIPER_ENDPOINTS, CALIPER_CONSTANTS, TIMEBACK_EVENT_TYPES, TIMEBACK_ACTIONS, TIMEBACK_TYPES, ACTIVITY_METRIC_TYPES, TIME_METRIC_TYPES, TIMEBACK_SUBJECTS, TIMEBACK_GRADE_LEVELS, TIMEBACK_GRADE_LEVEL_LABELS, CALIPER_SUBJECTS, ONEROSTER_STATUS, SCORE_STATUS, ENV_VARS, HTTP_DEFAULTS, AUTH_DEFAULTS, CACHE_DEFAULTS, CONFIG_DEFAULTS, PLAYCADEMY_DEFAULTS, RESOURCE_DEFAULTS, HTTP_STATUS, ERROR_NAMES, init_constants3, isObject = (value) => typeof value === "object" && value !== null, SUBJECT_VALUES, GRADE_VALUES;
 var init_types7 = __esm(() => {
   init_achievements2 = __esm2(() => {
     ACHIEVEMENT_IDS2 = {
@@ -16681,7 +16735,7 @@ var init_types7 = __esm(() => {
     init_timeback3();
     init_workers2();
   });
-  init_constants2 = __esm2(() => {
+  init_constants3 = __esm2(() => {
     init_src5();
     TIMEBACK_API_URLS = {
       production: "https://api.alpha-1edtech.ai",
@@ -16856,7 +16910,7 @@ var init_types7 = __esm(() => {
       timebackSdk: "TimebackSDKError"
     };
   });
-  init_constants2();
+  init_constants3();
   SUBJECT_VALUES = TIMEBACK_SUBJECTS;
   GRADE_VALUES = TIMEBACK_GRADE_LEVELS;
 });
@@ -20154,7 +20208,7 @@ var __defProp2, __export2 = (target, all) => {
     course: (courseId) => `${base}${ONEROSTER_ENDPOINTS2.courses}/${courseId}`,
     componentResource: (resourceId) => `${base}${ONEROSTER_ENDPOINTS2.componentResources}/${resourceId}`
   };
-}, CALIPER_CONSTANTS2, TIMEBACK_EVENT_TYPES2, TIMEBACK_ACTIONS2, TIMEBACK_TYPES2, ACTIVITY_METRIC_TYPES2, TIME_METRIC_TYPES2, TIMEBACK_SUBJECTS2, TIMEBACK_GRADE_LEVELS2, TIMEBACK_GRADE_LEVEL_LABELS2, CALIPER_SUBJECTS2, ONEROSTER_STATUS2, SCORE_STATUS2, ENV_VARS2, HTTP_DEFAULTS2, AUTH_DEFAULTS2, CACHE_DEFAULTS2, CONFIG_DEFAULTS2, PLAYCADEMY_DEFAULTS2, RESOURCE_DEFAULTS2, HTTP_STATUS2, ERROR_NAMES2, init_constants3, exports_verify, init_verify, TimebackError, TimebackApiError, TimebackAuthenticationError, StudentNotFoundError, ConfigurationError, ResourceNotFoundError, isObject2 = (value) => typeof value === "object" && value !== null, SUBJECT_VALUES2, GRADE_VALUES2, isBrowser2 = () => {
+}, CALIPER_CONSTANTS2, TIMEBACK_EVENT_TYPES2, TIMEBACK_ACTIONS2, TIMEBACK_TYPES2, ACTIVITY_METRIC_TYPES2, TIME_METRIC_TYPES2, TIMEBACK_SUBJECTS2, TIMEBACK_GRADE_LEVELS2, TIMEBACK_GRADE_LEVEL_LABELS2, CALIPER_SUBJECTS2, ONEROSTER_STATUS2, SCORE_STATUS2, ENV_VARS2, HTTP_DEFAULTS2, AUTH_DEFAULTS2, CACHE_DEFAULTS2, CONFIG_DEFAULTS2, PLAYCADEMY_DEFAULTS2, RESOURCE_DEFAULTS2, HTTP_STATUS2, ERROR_NAMES2, init_constants4, exports_verify, init_verify, TimebackError, TimebackApiError, TimebackAuthenticationError, StudentNotFoundError, ConfigurationError, ResourceNotFoundError, isObject2 = (value) => typeof value === "object" && value !== null, SUBJECT_VALUES2, GRADE_VALUES2, isBrowser2 = () => {
   const g = globalThis;
   return typeof g.window !== "undefined" && typeof g.document !== "undefined";
 }, isProduction3 = () => {
@@ -20693,7 +20747,7 @@ var init_dist3 = __esm(() => {
     init_timeback4();
     init_workers3();
   });
-  init_constants3 = __esm3(() => {
+  init_constants4 = __esm3(() => {
     init_src6();
     TIMEBACK_API_URLS2 = {
       production: "https://api.alpha-1edtech.ai",
@@ -20874,9 +20928,9 @@ var init_dist3 = __esm(() => {
     fetchTimebackConfig: () => fetchTimebackConfig
   });
   init_verify = __esm3(() => {
-    init_constants3();
+    init_constants4();
   });
-  init_constants3();
+  init_constants4();
   TimebackError = class TimebackError extends Error {
     constructor(message) {
       super(message);
@@ -20933,7 +20987,7 @@ var init_dist3 = __esm(() => {
       Object.setPrototypeOf(this, ResourceNotFoundError.prototype);
     }
   };
-  init_constants3();
+  init_constants4();
   SUBJECT_VALUES2 = TIMEBACK_SUBJECTS2;
   GRADE_VALUES2 = TIMEBACK_GRADE_LEVELS2;
   colors3 = {
@@ -20954,8 +21008,8 @@ var init_dist3 = __esm(() => {
   };
   log3 = createLogger2();
   init_verify();
-  init_constants3();
-  init_constants3();
+  init_constants4();
+  init_constants4();
   if (process.env.DEBUG === "true") {
     process.env.TERM = "dumb";
   }
@@ -20967,13 +21021,13 @@ var init_dist3 = __esm(() => {
       this.name = ERROR_NAMES2.timebackAuth;
     }
   };
-  init_constants3();
-  init_constants3();
-  init_constants3();
-  init_constants3();
-  init_constants3();
-  init_constants3();
-  init_constants3();
+  init_constants4();
+  init_constants4();
+  init_constants4();
+  init_constants4();
+  init_constants4();
+  init_constants4();
+  init_constants4();
   exports_external2 = {};
   __export2(exports_external2, {
     void: () => voidType2,
@@ -24531,7 +24585,7 @@ var init_http_exception = () => {};
 
 // ../../node_modules/hono/dist/request/constants.js
 var GET_MATCH_RESULT;
-var init_constants4 = __esm(() => {
+var init_constants5 = __esm(() => {
   GET_MATCH_RESULT = Symbol();
 });
 
@@ -24795,7 +24849,7 @@ var init_url = __esm(() => {
 var tryDecodeURIComponent = (str) => tryDecode(str, decodeURIComponent_), HonoRequest;
 var init_request = __esm(() => {
   init_http_exception();
-  init_constants4();
+  init_constants5();
   init_body();
   init_url();
   HonoRequest = class {
@@ -25125,7 +25179,7 @@ var init_router = __esm(() => {
 
 // ../../node_modules/hono/dist/utils/constants.js
 var COMPOSED_HANDLER = "__COMPOSED_HANDLER";
-var init_constants5 = () => {};
+var init_constants6 = () => {};
 
 // ../../node_modules/hono/dist/hono-base.js
 var notFoundHandler = (c) => {
@@ -25347,7 +25401,7 @@ var init_hono_base = __esm(() => {
   init_compose();
   init_context2();
   init_router();
-  init_constants5();
+  init_constants6();
   init_url();
 });
 
@@ -82704,7 +82758,8 @@ var init_schemas3 = __esm(() => {
   });
   SetSecretsRequestSchema = exports_external.record(exports_external.string().min(1), exports_external.string());
   SeedRequestSchema = exports_external.object({
-    code: exports_external.string().min(1, "Seed code is required")
+    code: exports_external.string().min(1, "Seed code is required"),
+    secrets: exports_external.record(exports_external.string(), exports_external.string()).optional()
   });
   SchemaInfoSchema = exports_external.object({
     sql: exports_external.string(),
@@ -92875,7 +92930,7 @@ var init_domain_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/game.controller.ts
-var logger43, list3, getById2, getBySlug, upsertBySlug, remove3, games2;
+var logger43, list3, getSubjects, getById2, getBySlug, upsertBySlug, remove3, games2;
 var init_game_controller = __esm(() => {
   init_esm();
   init_schemas_index();
@@ -92888,6 +92943,10 @@ var init_game_controller = __esm(() => {
     logger43.debug("Listing games", { userId: ctx.user.id });
     return ctx.services.game.list();
   });
+  getSubjects = requireAuth(async (ctx) => {
+    logger43.debug("Getting game subjects", { userId: ctx.user.id });
+    return ctx.services.game.getSubjects();
+  });
   getById2 = requireAuth(async (ctx) => {
     const gameId = ctx.params.gameId;
     if (!gameId) {
@@ -92940,6 +92999,7 @@ var init_game_controller = __esm(() => {
   });
   games2 = {
     list: list3,
+    getSubjects,
     getById: getById2,
     getBySlug,
     upsertBySlug,
@@ -93323,7 +93383,6 @@ var init_leaderboard_controller = __esm(() => {
   init_esm();
   init_schemas_index();
   init_src2();
-  init_src4();
   init_errors();
   init_utils11();
   logger47 = log.scope("LeaderboardController");
@@ -93412,9 +93471,6 @@ var init_leaderboard_controller = __esm(() => {
     if (!gameId || !userId) {
       throw ApiError.badRequest("Game ID and User ID are required");
     }
-    if (!isValidUUID(userId)) {
-      throw ApiError.unprocessableEntity("userId must be a valid UUID format");
-    }
     logger47.debug("Getting user rank", {
       requesterId: ctx.user.id,
       gameId,
@@ -93427,9 +93483,6 @@ var init_leaderboard_controller = __esm(() => {
     if (!userId) {
       throw ApiError.badRequest("User ID is required");
     }
-    if (!isValidUUID(userId)) {
-      throw ApiError.unprocessableEntity("userId must be a valid UUID format");
-    }
     const url = ctx.url;
     const limit = Math.min(Number(url.searchParams.get("limit") || "50"), 100);
     const gameId = url.searchParams.get("gameId") || undefined;
@@ -93446,9 +93499,6 @@ var init_leaderboard_controller = __esm(() => {
     if (!gameId || !userId) {
       throw ApiError.badRequest("Game ID and User ID are required");
     }
-    if (!isValidUUID(userId)) {
-      throw ApiError.unprocessableEntity("userId must be a valid UUID format");
-    }
     const url = ctx.url;
     const limit = Math.min(Number(url.searchParams.get("limit") || "10"), 100);
     logger47.debug("Getting user scores", {
@@ -93874,8 +93924,13 @@ var init_seed_controller = __esm(() => {
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger55.debug("Seeding database", { userId: ctx.user.id, slug: slug2, codeLength: body2.code.length });
-    return ctx.services.seed.seed(slug2, body2.code, ctx.user);
+    logger55.debug("Seeding database", {
+      userId: ctx.user.id,
+      slug: slug2,
+      codeLength: body2.code.length,
+      secretCount: body2.secrets ? Object.keys(body2.secrets).length : 0
+    });
+    return ctx.services.seed.seed(slug2, body2.code, ctx.user, body2.secrets);
   });
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@playcademy/sandbox",
-    "version": "0.3.11",
+    "version": "0.3.13",
     "description": "Local development server for Playcademy game development",
     "type": "module",
     "exports": {