@playcademy/sandbox 0.3.16-beta.4 → 0.3.16-beta.6

package/dist/cli.js

@@ -1310,7 +1310,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@playcademy/sandbox",
-    version: "0.3.16-beta.4",
+    version: "0.3.16-beta.6",
     description: "Local development server for Playcademy game development",
     type: "module",
     exports: {
@@ -26650,9 +26650,37 @@ var init_developer_service = __esm(() => {
 // ../api-core/src/services/game.service.ts
 class GameService {
   deps;
+  static MANIFEST_FETCH_TIMEOUT_MS = 5000;
+  static MAX_FETCH_ERROR_MESSAGE_LENGTH = 512;
   constructor(deps) {
     this.deps = deps;
   }
+  static getManifestHost(manifestUrl) {
+    try {
+      return new URL(manifestUrl).host;
+    } catch {
+      return manifestUrl;
+    }
+  }
+  static getFetchErrorMessage(error) {
+    let raw;
+    if (error instanceof Error) {
+      raw = error.message;
+    } else if (typeof error === "string") {
+      raw = error;
+    }
+    if (!raw) {
+      return;
+    }
+    const normalized = raw.replace(/\s+/g, " ").trim();
+    if (!normalized) {
+      return;
+    }
+    return normalized.slice(0, GameService.MAX_FETCH_ERROR_MESSAGE_LENGTH);
+  }
+  static isRetryableStatus(status) {
+    return status === 429 || status >= 500;
+  }
   async list(caller) {
     const db2 = this.deps.db;
     const isAdmin = caller?.role === "admin";
@@ -26714,6 +26742,109 @@ class GameService {
     this.enforceVisibility(game, caller, slug);
     return game;
   }
+  async getManifest(gameId, caller) {
+    const game = await this.getById(gameId, caller);
+    if (game.gameType !== "hosted" || !game.deploymentUrl) {
+      throw new BadRequestError("Game does not have a deployment manifest");
+    }
+    const deploymentUrl = game.deploymentUrl;
+    const manifestUrl = `${deploymentUrl.replace(/\/$/, "")}/playcademy.manifest.json`;
+    const manifestHost = GameService.getManifestHost(manifestUrl);
+    const startedAt = Date.now();
+    const controller = new AbortController;
+    const timeout = setTimeout(() => controller.abort(), GameService.MANIFEST_FETCH_TIMEOUT_MS);
+    function buildDetails(fetchOutcome, manifestErrorKind, extra = {}) {
+      return {
+        manifestUrl,
+        manifestHost,
+        deploymentUrl,
+        fetchOutcome,
+        retryCount: 0,
+        durationMs: Date.now() - startedAt,
+        manifestErrorKind,
+        ...extra
+      };
+    }
+    let response;
+    try {
+      response = await fetch(manifestUrl, {
+        method: "GET",
+        headers: {
+          Accept: "application/json"
+        },
+        signal: controller.signal
+      });
+    } catch (error) {
+      clearTimeout(timeout);
+      const fetchErrorMessage = GameService.getFetchErrorMessage(error);
+      const details = buildDetails("network_error", "temporary", fetchErrorMessage ? { fetchErrorMessage } : {});
+      logger5.error("Failed to fetch game manifest", {
+        gameId,
+        manifestUrl,
+        error,
+        details
+      });
+      if (error instanceof Error && error.name === "AbortError") {
+        throw new TimeoutError("Timed out loading game manifest", details);
+      }
+      throw new ServiceUnavailableError("Failed to load game manifest", details);
+    } finally {
+      clearTimeout(timeout);
+    }
+    if (!response.ok) {
+      const resolvedManifestUrl = response.url || manifestUrl;
+      const resolvedManifestHost = GameService.getManifestHost(resolvedManifestUrl);
+      const manifestErrorKind = GameService.isRetryableStatus(response.status) ? "temporary" : "permanent";
+      const details = buildDetails("bad_status", manifestErrorKind, {
+        manifestUrl: resolvedManifestUrl,
+        manifestHost: resolvedManifestHost,
+        status: response.status,
+        contentType: response.headers.get("content-type") ?? undefined,
+        cfRay: response.headers.get("cf-ray") ?? undefined,
+        redirected: response.redirected,
+        ...response.redirected ? {
+          originalManifestUrl: manifestUrl,
+          originalManifestHost: manifestHost
+        } : {}
+      });
+      const message = `Failed to fetch manifest: ${response.status} ${response.statusText}`;
+      logger5.error("Game manifest returned non-ok response", {
+        gameId,
+        manifestUrl,
+        status: response.status,
+        details
+      });
+      if (manifestErrorKind === "temporary") {
+        throw new ServiceUnavailableError(message, details);
+      }
+      throw new BadRequestError(message, details);
+    }
+    try {
+      return await response.json();
+    } catch (error) {
+      const resolvedManifestUrl = response.url || manifestUrl;
+      const resolvedManifestHost = GameService.getManifestHost(resolvedManifestUrl);
+      const details = buildDetails("invalid_body", "permanent", {
+        manifestUrl: resolvedManifestUrl,
+        manifestHost: resolvedManifestHost,
+        status: response.status,
+        contentType: response.headers.get("content-type") ?? undefined,
+        cfRay: response.headers.get("cf-ray") ?? undefined,
+        redirected: response.redirected,
+        ...response.redirected ? {
+          originalManifestUrl: manifestUrl,
+          originalManifestHost: manifestHost
+        } : {}
+      });
+      logger5.error("Failed to parse game manifest", {
+        gameId,
+        manifestUrl,
+        error,
+        details
+      });
+      throw new BadRequestError("Failed to parse game manifest", details);
+    }
+  }
   enforceVisibility(game, caller, lookupIdentifier) {
     if (game.visibility !== "internal") {
       return;
@@ -35041,7 +35172,7 @@ function createOneRosterNamespace(client) {
             limit: options?.limit,
             offset: options?.offset,
             fields: options?.fields,
-            filter: `student.sourcedId='${studentSourcedId}'`
+            filter: `student.sourcedId='${escapeFilterValue2(studentSourcedId)}'`
           });
         } catch (error) {
           logTimebackError("list assessment results for student", error, {
@@ -94178,7 +94309,7 @@ var init_domain_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/game.controller.ts
-var logger46, list3, listManageable, getSubjects, getById2, getBySlug, upsertBySlug, remove3, games2;
+var logger46, list3, listManageable, getSubjects, getById2, getBySlug, getManifest, upsertBySlug, remove3, games2;
 var init_game_controller = __esm(() => {
   init_esm();
   init_schemas_index();
@@ -94218,6 +94349,21 @@ var init_game_controller = __esm(() => {
     logger46.debug("Getting game by slug", { userId: ctx.user.id, slug: slug2, launchId: ctx.launchId });
     return ctx.services.game.getBySlug(slug2, ctx.user);
   });
+  getManifest = requireAuth(async (ctx) => {
+    const gameId = ctx.params.gameId;
+    if (!gameId) {
+      throw ApiError.badRequest("Missing game ID");
+    }
+    if (!isValidUUID(gameId)) {
+      throw ApiError.unprocessableEntity("gameId must be a valid UUID format");
+    }
+    logger46.debug("Getting game manifest by ID", {
+      userId: ctx.user.id,
+      gameId,
+      launchId: ctx.launchId
+    });
+    return ctx.services.game.getManifest(gameId, ctx.user);
+  });
   upsertBySlug = requireAuth(async (ctx) => {
     const slug2 = ctx.params.slug;
     if (!slug2) {
@@ -94254,6 +94400,7 @@ var init_game_controller = __esm(() => {
     listManageable,
     getSubjects,
     getById: getById2,
+    getManifest,
     getBySlug,
     upsertBySlug,
     remove: remove3
@@ -96081,7 +96228,8 @@ var init_crud = __esm(() => {
   init_api();
   gameCrudRouter = new Hono2;
   gameCrudRouter.get("/", handle2(games2.list));
-  gameCrudRouter.get("/:gameId{[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}}", handle2(games2.getById));
+  gameCrudRouter.get("/:gameId{[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}}/manifest", handle2(games2.getManifest));
+  gameCrudRouter.get("/:gameId{[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}}", handle2(games2.getById));
   gameCrudRouter.get("/:slug", handle2(games2.getBySlug));
   gameCrudRouter.put("/:slug", handle2(games2.upsertBySlug));
   gameCrudRouter.delete("/:gameId", handle2(games2.remove, { status: 204 }));

package/dist/server.js

@@ -1309,7 +1309,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@playcademy/sandbox",
-    version: "0.3.16-beta.4",
+    version: "0.3.16-beta.6",
     description: "Local development server for Playcademy game development",
     type: "module",
     exports: {
@@ -26649,9 +26649,37 @@ var init_developer_service = __esm(() => {
 // ../api-core/src/services/game.service.ts
 class GameService {
   deps;
+  static MANIFEST_FETCH_TIMEOUT_MS = 5000;
+  static MAX_FETCH_ERROR_MESSAGE_LENGTH = 512;
   constructor(deps) {
     this.deps = deps;
   }
+  static getManifestHost(manifestUrl) {
+    try {
+      return new URL(manifestUrl).host;
+    } catch {
+      return manifestUrl;
+    }
+  }
+  static getFetchErrorMessage(error) {
+    let raw;
+    if (error instanceof Error) {
+      raw = error.message;
+    } else if (typeof error === "string") {
+      raw = error;
+    }
+    if (!raw) {
+      return;
+    }
+    const normalized = raw.replace(/\s+/g, " ").trim();
+    if (!normalized) {
+      return;
+    }
+    return normalized.slice(0, GameService.MAX_FETCH_ERROR_MESSAGE_LENGTH);
+  }
+  static isRetryableStatus(status) {
+    return status === 429 || status >= 500;
+  }
   async list(caller) {
     const db2 = this.deps.db;
     const isAdmin = caller?.role === "admin";
@@ -26713,6 +26741,109 @@ class GameService {
     this.enforceVisibility(game, caller, slug);
     return game;
   }
+  async getManifest(gameId, caller) {
+    const game = await this.getById(gameId, caller);
+    if (game.gameType !== "hosted" || !game.deploymentUrl) {
+      throw new BadRequestError("Game does not have a deployment manifest");
+    }
+    const deploymentUrl = game.deploymentUrl;
+    const manifestUrl = `${deploymentUrl.replace(/\/$/, "")}/playcademy.manifest.json`;
+    const manifestHost = GameService.getManifestHost(manifestUrl);
+    const startedAt = Date.now();
+    const controller = new AbortController;
+    const timeout = setTimeout(() => controller.abort(), GameService.MANIFEST_FETCH_TIMEOUT_MS);
+    function buildDetails(fetchOutcome, manifestErrorKind, extra = {}) {
+      return {
+        manifestUrl,
+        manifestHost,
+        deploymentUrl,
+        fetchOutcome,
+        retryCount: 0,
+        durationMs: Date.now() - startedAt,
+        manifestErrorKind,
+        ...extra
+      };
+    }
+    let response;
+    try {
+      response = await fetch(manifestUrl, {
+        method: "GET",
+        headers: {
+          Accept: "application/json"
+        },
+        signal: controller.signal
+      });
+    } catch (error) {
+      clearTimeout(timeout);
+      const fetchErrorMessage = GameService.getFetchErrorMessage(error);
+      const details = buildDetails("network_error", "temporary", fetchErrorMessage ? { fetchErrorMessage } : {});
+      logger5.error("Failed to fetch game manifest", {
+        gameId,
+        manifestUrl,
+        error,
+        details
+      });
+      if (error instanceof Error && error.name === "AbortError") {
+        throw new TimeoutError("Timed out loading game manifest", details);
+      }
+      throw new ServiceUnavailableError("Failed to load game manifest", details);
+    } finally {
+      clearTimeout(timeout);
+    }
+    if (!response.ok) {
+      const resolvedManifestUrl = response.url || manifestUrl;
+      const resolvedManifestHost = GameService.getManifestHost(resolvedManifestUrl);
+      const manifestErrorKind = GameService.isRetryableStatus(response.status) ? "temporary" : "permanent";
+      const details = buildDetails("bad_status", manifestErrorKind, {
+        manifestUrl: resolvedManifestUrl,
+        manifestHost: resolvedManifestHost,
+        status: response.status,
+        contentType: response.headers.get("content-type") ?? undefined,
+        cfRay: response.headers.get("cf-ray") ?? undefined,
+        redirected: response.redirected,
+        ...response.redirected ? {
+          originalManifestUrl: manifestUrl,
+          originalManifestHost: manifestHost
+        } : {}
+      });
+      const message = `Failed to fetch manifest: ${response.status} ${response.statusText}`;
+      logger5.error("Game manifest returned non-ok response", {
+        gameId,
+        manifestUrl,
+        status: response.status,
+        details
+      });
+      if (manifestErrorKind === "temporary") {
+        throw new ServiceUnavailableError(message, details);
+      }
+      throw new BadRequestError(message, details);
+    }
+    try {
+      return await response.json();
+    } catch (error) {
+      const resolvedManifestUrl = response.url || manifestUrl;
+      const resolvedManifestHost = GameService.getManifestHost(resolvedManifestUrl);
+      const details = buildDetails("invalid_body", "permanent", {
+        manifestUrl: resolvedManifestUrl,
+        manifestHost: resolvedManifestHost,
+        status: response.status,
+        contentType: response.headers.get("content-type") ?? undefined,
+        cfRay: response.headers.get("cf-ray") ?? undefined,
+        redirected: response.redirected,
+        ...response.redirected ? {
+          originalManifestUrl: manifestUrl,
+          originalManifestHost: manifestHost
+        } : {}
+      });
+      logger5.error("Failed to parse game manifest", {
+        gameId,
+        manifestUrl,
+        error,
+        details
+      });
+      throw new BadRequestError("Failed to parse game manifest", details);
+    }
+  }
   enforceVisibility(game, caller, lookupIdentifier) {
     if (game.visibility !== "internal") {
       return;
@@ -35040,7 +35171,7 @@ function createOneRosterNamespace(client) {
             limit: options?.limit,
             offset: options?.offset,
             fields: options?.fields,
-            filter: `student.sourcedId='${studentSourcedId}'`
+            filter: `student.sourcedId='${escapeFilterValue2(studentSourcedId)}'`
           });
         } catch (error) {
           logTimebackError("list assessment results for student", error, {
@@ -94177,7 +94308,7 @@ var init_domain_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/game.controller.ts
-var logger46, list3, listManageable, getSubjects, getById2, getBySlug, upsertBySlug, remove3, games2;
+var logger46, list3, listManageable, getSubjects, getById2, getBySlug, getManifest, upsertBySlug, remove3, games2;
 var init_game_controller = __esm(() => {
   init_esm();
   init_schemas_index();
@@ -94217,6 +94348,21 @@ var init_game_controller = __esm(() => {
     logger46.debug("Getting game by slug", { userId: ctx.user.id, slug: slug2, launchId: ctx.launchId });
     return ctx.services.game.getBySlug(slug2, ctx.user);
   });
+  getManifest = requireAuth(async (ctx) => {
+    const gameId = ctx.params.gameId;
+    if (!gameId) {
+      throw ApiError.badRequest("Missing game ID");
+    }
+    if (!isValidUUID(gameId)) {
+      throw ApiError.unprocessableEntity("gameId must be a valid UUID format");
+    }
+    logger46.debug("Getting game manifest by ID", {
+      userId: ctx.user.id,
+      gameId,
+      launchId: ctx.launchId
+    });
+    return ctx.services.game.getManifest(gameId, ctx.user);
+  });
   upsertBySlug = requireAuth(async (ctx) => {
     const slug2 = ctx.params.slug;
     if (!slug2) {
@@ -94253,6 +94399,7 @@ var init_game_controller = __esm(() => {
     listManageable,
     getSubjects,
     getById: getById2,
+    getManifest,
     getBySlug,
     upsertBySlug,
     remove: remove3
@@ -96080,7 +96227,8 @@ var init_crud = __esm(() => {
   init_api();
   gameCrudRouter = new Hono2;
   gameCrudRouter.get("/", handle2(games2.list));
-  gameCrudRouter.get("/:gameId{[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}}", handle2(games2.getById));
+  gameCrudRouter.get("/:gameId{[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}}/manifest", handle2(games2.getManifest));
+  gameCrudRouter.get("/:gameId{[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}}", handle2(games2.getById));
   gameCrudRouter.get("/:slug", handle2(games2.getBySlug));
   gameCrudRouter.put("/:slug", handle2(games2.upsertBySlug));
   gameCrudRouter.delete("/:gameId", handle2(games2.remove, { status: 204 }));

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@playcademy/sandbox",
-    "version": "0.3.16-beta.4",
+    "version": "0.3.16-beta.6",
     "description": "Local development server for Playcademy game development",
     "type": "module",
     "exports": {