@playcademy/sandbox 0.3.8 → 0.3.9

package/dist/cli.js

@@ -1224,7 +1224,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@playcademy/sandbox",
-    version: "0.3.8",
+    version: "0.3.9",
     description: "Local development server for Playcademy game development",
     type: "module",
     exports: {
@@ -14980,6 +14980,62 @@ var init_level_service = __esm(() => {
   logger15 = log.scope("LevelService");
 });
 
+// ../api-core/src/services/logs.service.ts
+class LogsService {
+  ctx;
+  constructor(ctx) {
+    this.ctx = ctx;
+  }
+  async generateToken(user, slug2, environment) {
+    const db2 = this.ctx.db;
+    if (user.role === "admin") {
+      const game = await db2.query.games.findFirst({
+        where: eq(games.slug, slug2),
+        columns: { id: true }
+      });
+      if (!game) {
+        throw new NotFoundError("Game", slug2);
+      }
+      logger16.info("Admin accessing game logs", { adminId: user.id, slug: slug2, environment });
+    } else {
+      const isApprovedDev = user.developerStatus === "approved";
+      if (!isApprovedDev) {
+        logger16.warn("Unapproved developer attempted log access", { userId: user.id, slug: slug2 });
+        throw new AccessDeniedError("Must be an approved developer");
+      }
+      const game = await db2.query.games.findFirst({
+        where: and(eq(games.slug, slug2), eq(games.developerId, user.id)),
+        columns: { id: true }
+      });
+      if (!game) {
+        logger16.warn("Developer attempted access to unowned game logs", {
+          userId: user.id,
+          slug: slug2
+        });
+        throw new NotFoundError("Game", slug2);
+      }
+    }
+    const isProduction3 = environment === "production";
+    const workerId = getDeploymentId(slug2, isProduction3);
+    const token = await this.ctx.providers.auth.mintLogStreamToken(user.id, workerId);
+    logger16.debug("Generated log stream token", {
+      userId: user.id,
+      slug: slug2,
+      workerId
+    });
+    return { token, workerId };
+  }
+}
+var logger16;
+var init_logs_service = __esm(() => {
+  init_drizzle_orm();
+  init_tables_index();
+  init_src2();
+  init_errors();
+  init_deployment_util();
+  logger16 = log.scope("LogsService");
+});
+
 // ../../node_modules/aws-jwt-verify/dist/esm/error.js
 var JwtBaseError, FailedAssertionError, JwtParseError, ParameterValidationError, JwtInvalidSignatureError, JwtInvalidSignatureAlgorithmError, JwtInvalidClaimError, JwtInvalidIssuerError, JwtInvalidAudienceError, JwtInvalidScopeError, JwtExpiredError, JwtNotBeforeError, CognitoJwtInvalidGroupError, CognitoJwtInvalidTokenUseError, CognitoJwtInvalidClientIdError, JwksValidationError, JwkValidationError, JwtWithoutValidKidError, KidNotFoundInJwksError, WaitPeriodNotYetEndedJwkError, JwksNotAvailableInCacheError, JwkInvalidUseError, JwkInvalidKtyError, FetchError, NonRetryableFetchError;
 var init_error = __esm(() => {
@@ -15989,7 +16045,7 @@ class LtiService {
   }
   getConfig() {
     if (!this.ctx.config.lti) {
-      logger16.error("LTI configuration not available");
+      logger17.error("LTI configuration not available");
       throw new ValidationError("LTI is not configured");
     }
     return this.ctx.config.lti;
@@ -16020,14 +16076,14 @@ class LtiService {
     try {
       const verifier = this.getVerifier();
       const claims = await verifier.verify(idToken);
-      logger16.info("Verified token", {
+      logger17.info("Verified token", {
         sub: claims.sub,
         email: claims.email,
         roles: claims["https://purl.imsglobal.org/spec/lti/claim/roles"]
       });
       return claims;
     } catch (error) {
-      logger16.error("Token verification failed", {
+      logger17.error("Token verification failed", {
         error: error instanceof Error ? error.message : String(error)
       });
       throw new ValidationError("Invalid LTI token");
@@ -16037,14 +16093,14 @@ class LtiService {
     const claims = await this.verifyToken(idToken);
     const validationError = validateLtiClaims(claims);
     if (validationError) {
-      logger16.warn("LTI claims validation failed", {
+      logger17.warn("LTI claims validation failed", {
         error: validationError,
         sub: claims.sub
       });
       throw new ValidationError(validationError);
     }
     const user = await this.provisionUser(claims);
-    logger16.info("Processed launch roles", {
+    logger17.info("Processed launch roles", {
       userId: user.id,
       isLearner: LtiRoleChecks.isLearner(claims),
       isInstructor: LtiRoleChecks.isInstructor(claims),
@@ -16054,7 +16110,7 @@ class LtiService {
     const sessionToken = await this.createSession(user.id);
     const targetUri = claims["https://purl.imsglobal.org/spec/lti/claim/target_link_uri"];
     const redirectPath = extractRedirectPath(targetUri, currentHost);
-    logger16.info("Launch processed", { userId: user.id, redirectPath });
+    logger17.info("Launch processed", { userId: user.id, redirectPath });
     const userInfo = {
       sub: user.id,
       email: user.email,
@@ -16100,10 +16156,10 @@ class LtiService {
       updatedAt: new Date
     }).returning({ id: sessions.id });
     if (!session2) {
-      logger16.error("Session insert returned no rows", { userId });
+      logger17.error("Session insert returned no rows", { userId });
       throw new InternalError("Failed to create session");
     }
-    logger16.info("Created session", {
+    logger17.info("Created session", {
       userId,
       providerId: AUTH_PROVIDER_IDS.TIMEBACK_LTI
     });
@@ -16125,7 +16181,7 @@ class LtiService {
         where: eq(users.id, existingAccount.userId)
       });
       if (user) {
-        logger16.info("Found user by account", {
+        logger17.info("Found user by account", {
           userId: user.id,
           ltiTimebackId
         });
@@ -16154,13 +16210,13 @@ class LtiService {
             updatedAt: new Date
           }).returning({ id: accounts.id });
           if (!account) {
-            logger16.error("LTI account link insert returned no rows", {
+            logger17.error("LTI account link insert returned no rows", {
               userId: existingUser.id,
               ltiTimebackId
             });
             throw new InternalError("Failed to link LTI account");
           }
-          logger16.info("Linked existing user", {
+          logger17.info("Linked existing user", {
             userId: existingUser.id,
             ltiTimebackId
           });
@@ -16181,7 +16237,7 @@ class LtiService {
         updatedAt: new Date
       }).returning();
       if (!insertedUser) {
-        logger16.error("LTI user insert returned no rows", { email, ltiTimebackId });
+        logger17.error("LTI user insert returned no rows", { email, ltiTimebackId });
         throw new InternalError("Failed to create user");
       }
       await tx.insert(accounts).values({
@@ -16196,7 +16252,7 @@ class LtiService {
         createdAt: new Date,
         updatedAt: new Date
       });
-      logger16.info("Provisioned user", {
+      logger17.info("Provisioned user", {
         userId: insertedUser.id,
         ltiTimebackId
       });
@@ -16205,7 +16261,7 @@ class LtiService {
     return createdUser;
   }
 }
-var logger16;
+var logger17;
 var init_lti_service = __esm(() => {
   init_esm2();
   init_drizzle_orm();
@@ -16214,7 +16270,7 @@ var init_lti_service = __esm(() => {
   init_src2();
   init_errors();
   init_lti_util();
-  logger16 = log.scope("LtiService");
+  logger17 = log.scope("LtiService");
 });
 
 // ../api-core/src/services/map.service.ts
@@ -16231,7 +16287,7 @@ class MapService {
     if (!mapDetails) {
       throw new NotFoundError("Map", identifier);
     }
-    logger17.debug("Retrieved map", { identifier });
+    logger18.debug("Retrieved map", { identifier });
     return mapDetails;
   }
   async getElements(mapId) {
@@ -16247,7 +16303,7 @@ class MapService {
         }
       }
     });
-    logger17.debug("Retrieved elements", { mapId, count: elements.length });
+    logger18.debug("Retrieved elements", { mapId, count: elements.length });
     return elements;
   }
   async getObjects(mapId, userId) {
@@ -16268,7 +16324,7 @@ class MapService {
         }
       }
     });
-    logger17.debug("Retrieved objects", { mapId, userId, count: objects.length });
+    logger18.debug("Retrieved objects", { mapId, userId, count: objects.length });
     return objects.map((object) => this.formatMapObjectWithItem(object));
   }
   async createObject(mapId, data, user) {
@@ -16295,7 +16351,7 @@ class MapService {
       throw new NotFoundError("Item", data.itemId);
     }
     if (!item.isPlaceable) {
-      logger17.warn("Attempted to place non-placeable item", {
+      logger18.warn("Attempted to place non-placeable item", {
         userId: user.id,
         itemId: data.itemId,
         mapId
@@ -16309,7 +16365,7 @@ class MapService {
     };
     const [createdObject] = await db2.insert(mapObjects).values(objectData).returning();
     if (!createdObject) {
-      logger17.error("Map object insert returned no rows", {
+      logger18.error("Map object insert returned no rows", {
         userId: user.id,
         mapId,
         itemId: data.itemId
@@ -16333,12 +16389,12 @@ class MapService {
       }
     });
     if (!objectWithItem) {
-      logger17.error("Map object query after insert returned no rows", {
+      logger18.error("Map object query after insert returned no rows", {
         objectId: createdObject.id
       });
       throw new InternalError("Failed to retrieve created object");
     }
-    logger17.info("Created object", {
+    logger18.info("Created object", {
       userId: user.id,
       mapId,
       objectId: createdObject.id,
@@ -16362,7 +16418,7 @@ class MapService {
     if (result.length === 0) {
       throw new NotFoundError("MapObject", objectId);
     }
-    logger17.info("Deleted object", {
+    logger18.info("Deleted object", {
       userId: user.id,
       mapId,
       objectId
@@ -16391,13 +16447,13 @@ class MapService {
     };
   }
 }
-var logger17;
+var logger18;
 var init_map_service = __esm(() => {
   init_drizzle_orm();
   init_tables_index();
   init_src2();
   init_errors();
-  logger17 = log.scope("MapService");
+  logger18 = log.scope("MapService");
 });
 
 // ../realtime/src/server/domain/events.ts
@@ -16418,13 +16474,13 @@ async function publishToUser(baseUrl, secret, userId, type, payload) {
     });
     if (!res.ok) {
       const text3 = await res.text().catch(() => "");
-      logger18.warn("Failed to publish to user", {
+      logger19.warn("Failed to publish to user", {
         status: res.status,
         body: text3
       });
     }
   } catch (error) {
-    logger18.error("Publish to user error", { error });
+    logger19.error("Publish to user error", { error });
   }
 }
 
@@ -16444,7 +16500,7 @@ class NotificationService {
     if (type)
       conditions2.push(eq(notifications.type, type));
     const results = await this.ctx.db.select().from(notifications).where(and(...conditions2)).orderBy(desc(notifications.createdAt)).limit(limit).offset(offset);
-    logger18.debug("Listed notifications", { userId: user.id, count: results.length });
+    logger19.debug("Listed notifications", { userId: user.id, count: results.length });
     return results;
   }
   async updateStatus(notificationId, status, method) {
@@ -16462,7 +16518,7 @@ class NotificationService {
     if (!updated) {
       throw new NotFoundError("Notification", notificationId);
     }
-    logger18.debug("Updated status", { notificationId, status });
+    logger19.debug("Updated status", { notificationId, status });
     return updated;
   }
   async getStats(user, options) {
@@ -16486,7 +16542,7 @@ class NotificationService {
     const clicked = statsMap.clicked || 0;
     const dismissed = statsMap.dismissed || 0;
     const expired = statsMap.expired || 0;
-    logger18.debug("Retrieved stats", { userId: user.id, total });
+    logger19.debug("Retrieved stats", { userId: user.id, total });
     return {
       total,
       delivered,
@@ -16532,7 +16588,7 @@ class NotificationService {
           metadata: metadata2
         });
       }
-      logger18.debug("Created notification", {
+      logger19.debug("Created notification", {
         userId,
         type,
         id: notificationId,
@@ -16540,14 +16596,14 @@ class NotificationService {
       });
       return notificationId;
     } catch (error) {
-      logger18.error("Failed to create notification", { userId, type, error });
+      logger19.error("Failed to create notification", { userId, type, error });
       return null;
     }
   }
   async publish(userId, notificationId, type, title, message, options) {
     const realtimeConfig = this.ctx.config.realtime;
     if (!realtimeConfig) {
-      logger18.warn("No realtime config for publish");
+      logger19.warn("No realtime config for publish");
       return;
     }
     const { relayUrl, publishSecret } = realtimeConfig;
@@ -16589,13 +16645,13 @@ class NotificationService {
       metadata: data.metadata || {}
     }).returning();
     if (!notification) {
-      logger18.error("Notification insert returned no rows", {
+      logger19.error("Notification insert returned no rows", {
         userId: data.userId,
         type: data.type
       });
       throw new InternalError("Failed to create notification");
     }
-    logger18.info("Inserted notification", {
+    logger19.info("Inserted notification", {
       notificationId: notification.id,
       userId: notification.userId,
       type: notification.type
@@ -16605,7 +16661,7 @@ class NotificationService {
   async deliverPending(userId) {
     const realtimeConfig = this.ctx.config.realtime;
     if (!realtimeConfig) {
-      logger18.warn("No realtime config for delivery");
+      logger19.warn("No realtime config for delivery");
       return;
     }
     const { relayUrl, publishSecret } = realtimeConfig;
@@ -16632,13 +16688,13 @@ class NotificationService {
           metadata: notification.metadata,
           clickUrl: notification.clickUrl
         });
-        logger18.info("Delivered notification", {
+        logger19.info("Delivered notification", {
           notificationId: notification.id,
           userId,
           type: notification.type
         });
       } catch (error) {
-        logger18.warn("Failed to deliver", {
+        logger19.warn("Failed to deliver", {
           notificationId: notification.id,
           error
         });
@@ -16646,7 +16702,7 @@ class NotificationService {
     }
   }
 }
-var logger18;
+var logger19;
 var init_notification_service = __esm(() => {
   init_drizzle_orm();
   init_src();
@@ -16655,7 +16711,7 @@ var init_notification_service = __esm(() => {
   init_events();
   init_notification();
   init_errors();
-  logger18 = log.scope("NotificationService");
+  logger19 = log.scope("NotificationService");
 });
 
 // ../api-core/src/services/realtime.service.ts
@@ -16690,20 +16746,20 @@ class RealtimeService {
     }
     const displayName = user.username || (user.name ? user.name.split(" ")[0] : undefined) || undefined;
     const token = await this.ctx.providers.auth.mintRealtimeToken(user.id, resolvedGameId, displayName, user.role);
-    logger19.info("Generated token", {
+    logger20.info("Generated token", {
       userId: user.id,
       gameId: resolvedGameId || "global"
     });
     return { token };
   }
 }
-var logger19;
+var logger20;
 var init_realtime_service = __esm(() => {
   init_drizzle_orm();
   init_tables_index();
   init_src2();
   init_errors();
-  logger19 = log.scope("RealtimeService");
+  logger20 = log.scope("RealtimeService");
 });
 
 // ../api-core/src/services/secrets.service.ts
@@ -16716,7 +16772,7 @@ class SecretsService {
     const game = await this.ctx.services.game.validateDeveloperAccessBySlug(user, slug2);
     const secrets = await this.ctx.providers.secrets.readSecrets(game.id);
     const keys = secrets ? Object.keys(secrets).filter((k) => !INTERNAL_SECRET_KEYS.includes(k)) : [];
-    logger20.debug("Listed secret keys", { gameId: game.id, slug: slug2, keyCount: keys.length });
+    logger21.debug("Listed secret keys", { gameId: game.id, slug: slug2, keyCount: keys.length });
     return keys;
   }
   async getValues(slug2, user) {
@@ -16731,7 +16787,7 @@ class SecretsService {
         filtered[key] = value;
       }
     }
-    logger20.debug("Retrieved secret values", { gameId: game.id, slug: slug2 });
+    logger21.debug("Retrieved secret values", { gameId: game.id, slug: slug2 });
     return filtered;
   }
   async setSecrets(slug2, newSecrets, user) {
@@ -16745,7 +16801,7 @@ class SecretsService {
         throw new ValidationError(`Secret value for "${key}" must be a string`);
       }
       if (INTERNAL_SECRET_KEYS.includes(key)) {
-        logger20.warn("Attempted to set reserved secret", {
+        logger21.warn("Attempted to set reserved secret", {
           userId: user.id,
           gameId: game.id,
           key
@@ -16756,7 +16812,7 @@ class SecretsService {
     const existingSecrets = await this.ctx.providers.secrets.readSecrets(game.id) || {};
     const updatedSecrets = { ...existingSecrets, ...newSecrets };
     await this.ctx.providers.secrets.writeSecrets(game.id, updatedSecrets);
-    logger20.info("Set secrets", {
+    logger21.info("Set secrets", {
       gameId: game.id,
       slug: slug2,
       addedKeys: secretKeys
@@ -16765,7 +16821,7 @@ class SecretsService {
   }
   async deleteSecret(slug2, key, user) {
     if (INTERNAL_SECRET_KEYS.includes(key)) {
-      logger20.warn("Attempted to delete reserved secret", {
+      logger21.warn("Attempted to delete reserved secret", {
         userId: user.id,
         slug: slug2,
         key
@@ -16783,14 +16839,14 @@ class SecretsService {
     } else {
       await this.ctx.providers.secrets.deleteSecrets(game.id);
     }
-    logger20.info("Deleted secret", { gameId: game.id, slug: slug2, key });
+    logger21.info("Deleted secret", { gameId: game.id, slug: slug2, key });
   }
 }
-var logger20, INTERNAL_SECRET_KEYS;
+var logger21, INTERNAL_SECRET_KEYS;
 var init_secrets_service = __esm(() => {
   init_src2();
   init_errors();
-  logger20 = log.scope("SecretsService");
+  logger21 = log.scope("SecretsService");
   INTERNAL_SECRET_KEYS = ["PLAYCADEMY_API_KEY"];
 });
 
@@ -16803,7 +16859,7 @@ class SeedService {
   getCloudflare() {
     const cf = this.ctx.cloudflare;
     if (!cf) {
-      logger21.error("Cloudflare provider not available for seeding");
+      logger22.error("Cloudflare provider not available for seeding");
       throw new ValidationError("Cloudflare provider not configured");
     }
     return cf;
@@ -16815,7 +16871,7 @@ class SeedService {
     const deploymentId = getDeploymentId(slug2, isProd);
     const uniqueSuffix = Date.now().toString(36);
     const seedDeploymentId = `seed-${deploymentId}-${uniqueSuffix}`;
-    logger21.debug("Seeding database", {
+    logger22.debug("Seeding database", {
       userId: user.id,
       gameId: game.id,
       slug: slug2,
@@ -16824,7 +16880,7 @@ class SeedService {
     });
     try {
       const workerResponse = await this.deployAndExecuteSeedWorker(cf, seedDeploymentId, game.id, deploymentId, code);
-      logger21.info("Seed completed", {
+      logger22.info("Seed completed", {
         gameId: game.id,
         slug: slug2,
         deploymentId,
@@ -16840,7 +16896,7 @@ class SeedService {
       };
     } catch (error) {
       const errorMessage = error instanceof Error ? error.message : String(error);
-      logger21.error("Seed failed", {
+      logger22.error("Seed failed", {
         slug: slug2,
         error: errorMessage
       });
@@ -16850,7 +16906,7 @@ class SeedService {
         error: errorMessage,
         developer: { id: user.id, email: user.email }
       }).catch((err2) => {
-        logger21.warn("Failed to send failure alert", { error: err2 });
+        logger22.warn("Failed to send failure alert", { error: err2 });
       });
       if (error instanceof Error) {
         if (error.message.includes("timed out") || error.message.includes("AbortError")) {
@@ -16904,7 +16960,7 @@ class SeedService {
         bindings: { d1: [deploymentId], r2: [], kv: [] },
         keepAssets: false
       });
-      logger21.info("Worker deployed", { seedDeploymentId, url: result.url });
+      logger22.info("Worker deployed", { seedDeploymentId, url: result.url });
       return await this.executeSeedWorker(result.url, seedDeploymentId);
     } finally {
       await this.cleanupSeedWorker(cf, seedDeploymentId);
@@ -16920,7 +16976,7 @@ class SeedService {
     await new Promise((resolve) => setTimeout(resolve, INITIAL_DELAY));
     for (let attempt = 0;attempt < MAX_RETRIES; attempt++) {
       if (attempt > 0) {
-        logger21.debug("Retrying seed execution", {
+        logger22.debug("Retrying seed execution", {
           attempt: attempt + 1,
           maxRetries: MAX_RETRIES,
           nextRetryIn: `${RETRY_INTERVAL / 1000}s`
@@ -16940,14 +16996,14 @@ class SeedService {
           const isRetryable = response.status === 404 || response.status >= 500;
           if (isRetryable && attempt < MAX_RETRIES - 1) {
             lastError = new Error(`Worker returned ${response.status}`);
-            logger21.debug("Worker not ready, will retry", {
+            logger22.debug("Worker not ready, will retry", {
               status: response.status,
               attempt: attempt + 1,
               errorBody: errorBody?.substring(0, 500)
             });
             continue;
           }
-          logger21.error("Worker returned error", {
+          logger22.error("Worker returned error", {
             status: response.status,
             statusText: response.statusText,
             errorBody
@@ -16957,7 +17013,7 @@ class SeedService {
         const data = await response.json();
         if (!data.success) {
           const error = data.error || "Seed execution failed";
-          logger21.error("Seed execution failed", {
+          logger22.error("Seed execution failed", {
             error,
             stack: data.stack,
             details: data.details,
@@ -16978,7 +17034,7 @@ class SeedService {
           };
           throw new InternalError(detailedMessage, errorDetails);
         }
-        logger21.info("Seed executed successfully", {
+        logger22.info("Seed executed successfully", {
           seedDeploymentId,
           duration: data.duration,
           logCount: data.logs?.length ?? 0
@@ -16988,7 +17044,7 @@ class SeedService {
         clearTimeout(timeout);
         if (error instanceof Error && error.name === "AbortError") {
           lastError = new Error("Seed execution timed out");
-          logger21.debug("Seed execution timed out, will retry", {
+          logger22.debug("Seed execution timed out, will retry", {
             attempt: attempt + 1
           });
           if (attempt < MAX_RETRIES - 1)
@@ -16999,7 +17055,7 @@ class SeedService {
         }
         lastError = error instanceof Error ? error : new Error(String(error));
         if (attempt < MAX_RETRIES - 1) {
-          logger21.debug("Network error, will retry", {
+          logger22.debug("Network error, will retry", {
             error: lastError.message,
             attempt: attempt + 1
           });
@@ -17012,19 +17068,19 @@ class SeedService {
   async cleanupSeedWorker(cf, seedDeploymentId) {
     try {
       await cf.delete(seedDeploymentId);
-      logger21.info("Worker deleted", { seedDeploymentId });
+      logger22.info("Worker deleted", { seedDeploymentId });
     } catch (error) {
-      logger21.warn("Failed to cleanup worker", { seedDeploymentId, error });
+      logger22.warn("Failed to cleanup worker", { seedDeploymentId, error });
     }
   }
 }
-var logger21;
+var logger22;
 var init_seed_service = __esm(() => {
   init_src2();
   init_config2();
   init_errors();
   init_deployment_util();
-  logger21 = log.scope("SeedService");
+  logger22 = log.scope("SeedService");
 });
 
 // ../api-core/src/services/session.service.ts
@@ -17059,10 +17115,10 @@ class SessionService {
     };
     const [newSession] = await db2.insert(gameSessions).values(sessionToInsert).returning({ sessionId: gameSessions.id });
     if (!newSession?.sessionId) {
-      logger22.error("Game session insert returned no rows", { userId, gameId });
+      logger23.error("Game session insert returned no rows", { userId, gameId });
       throw new InternalError("Failed to create game session");
     }
-    logger22.info("Started new session", {
+    logger23.info("Started new session", {
       sessionId: newSession.sessionId,
       gameId,
       userId
@@ -17083,23 +17139,23 @@ class SessionService {
       return { success: true, message: "Session already ended" };
     }
     await db2.update(gameSessions).set({ endedAt: new Date }).where(eq(gameSessions.id, sessionId));
-    logger22.info("Ended session", { sessionId, gameId, userId });
+    logger23.info("Ended session", { sessionId, gameId, userId });
     return { success: true };
   }
   async mintToken(gameIdOrSlug, userId) {
     const gameId = await this.resolveGameId(gameIdOrSlug);
     const result = await this.ctx.providers.auth.mintGameToken(gameId, userId);
-    logger22.debug("Minted game token", { gameId, userId });
+    logger23.debug("Minted game token", { gameId, userId });
     return result;
   }
 }
-var logger22;
+var logger23;
 var init_session_service = __esm(() => {
   init_drizzle_orm();
   init_tables_index();
   init_src2();
   init_errors();
-  logger22 = log.scope("SessionService");
+  logger23 = log.scope("SessionService");
 });
 
 // ../api-core/src/services/shop-listing.service.ts
@@ -17111,7 +17167,7 @@ class ShopListingService {
   async list() {
     const db2 = this.ctx.db;
     const allListings = await db2.query.shopListings.findMany();
-    logger23.debug("Listed shop listings", { count: allListings.length });
+    logger24.debug("Listed shop listings", { count: allListings.length });
     return allListings;
   }
   async getById(listingId) {
@@ -17122,7 +17178,7 @@ class ShopListingService {
     if (!listing) {
       throw new NotFoundError("ShopListing", listingId);
     }
-    logger23.debug("Retrieved listing", { listingId });
+    logger24.debug("Retrieved listing", { listingId });
     return listing;
   }
   async create(data) {
@@ -17133,13 +17189,13 @@ class ShopListingService {
         price: data.price
       }).returning();
       if (!newListing) {
-        logger23.error("Shop listing insert returned no rows", {
+        logger24.error("Shop listing insert returned no rows", {
           itemId: data.itemId,
           currencyId: data.currencyId
         });
         throw new InternalError("Failed to create shop listing");
       }
-      logger23.info("Created listing", {
+      logger24.info("Created listing", {
         listingId: newListing.id,
         itemId: newListing.itemId,
         currencyId: newListing.currencyId,
@@ -17182,7 +17238,7 @@ class ShopListingService {
       if (!updatedListing) {
         throw new NotFoundError("ShopListing", listingId);
       }
-      logger23.info("Updated listing", {
+      logger24.info("Updated listing", {
         listingId: updatedListing.id,
         updatedFields: Object.keys(updateData)
       });
@@ -17212,7 +17268,7 @@ class ShopListingService {
     if (result.length === 0) {
       throw new NotFoundError("ShopListing", listingId);
     }
-    logger23.info("Deleted listing", { listingId });
+    logger24.info("Deleted listing", { listingId });
   }
   async listByGame(gameId, user) {
     await this.ctx.services.game.validateOwnership(user, gameId);
@@ -17230,7 +17286,7 @@ class ShopListingService {
         item: true
       }
     });
-    logger23.debug("Listed game listings", {
+    logger24.debug("Listed game listings", {
       gameId,
       count: listings.length
     });
@@ -17260,14 +17316,14 @@ class ShopListingService {
         currencyId: currency.id
       }).returning();
       if (!newListing) {
-        logger23.error("Game item listing insert returned no rows", {
+        logger24.error("Game item listing insert returned no rows", {
           gameId,
           itemId,
           currencyId: currency.id
         });
         throw new InternalError("Failed to create shop listing");
       }
-      logger23.info("Created game item listing", {
+      logger24.info("Created game item listing", {
         listingId: newListing.id,
         gameId,
         itemId,
@@ -17308,7 +17364,7 @@ class ShopListingService {
       if (!updatedListing) {
         throw new NotFoundError("ShopListing", `for item ${itemId}`);
       }
-      logger23.info("Updated game item listing", {
+      logger24.info("Updated game item listing", {
         listingId: updatedListing.id,
         gameId,
         itemId,
@@ -17333,7 +17389,7 @@ class ShopListingService {
     if (result.length === 0) {
       throw new NotFoundError("ShopListing", `for item ${itemId}`);
     }
-    logger23.info("Deleted game item listing", {
+    logger24.info("Deleted game item listing", {
       listingId: result[0].id,
       gameId,
       itemId
@@ -17350,13 +17406,13 @@ class ShopListingService {
     }
   }
 }
-var logger23;
+var logger24;
 var init_shop_listing_service = __esm(() => {
   init_drizzle_orm();
   init_tables_index();
   init_src2();
   init_errors();
-  logger23 = log.scope("ShopListingService");
+  logger24 = log.scope("ShopListingService");
 });
 
 // ../api-core/src/services/shop.service.ts
@@ -17402,7 +17458,7 @@ class ShopService {
     const shopItems = [];
     for (const listing of listingsWithRelations) {
       if (!listing.item || !listing.currency) {
-        logger24.warn("Listing missing item or currency, skipping", {
+        logger25.warn("Listing missing item or currency, skipping", {
           listingId: listing.id
         });
         continue;
@@ -17419,7 +17475,7 @@ class ShopService {
         sellBackPercentage: listing.sellBackPercentage
       });
     }
-    logger24.debug("Retrieved shop view", {
+    logger25.debug("Retrieved shop view", {
       userId: user.id,
       itemCount: shopItems.length,
       currencyCount: shopCurrencies.length
@@ -17430,12 +17486,12 @@ class ShopService {
     };
   }
 }
-var logger24;
+var logger25;
 var init_shop_service = __esm(() => {
   init_drizzle_orm();
   init_tables_index();
   init_src2();
-  logger24 = log.scope("ShopService");
+  logger25 = log.scope("ShopService");
 });
 
 // ../api-core/src/services/sprite.service.ts
@@ -17452,17 +17508,17 @@ class SpriteService {
     if (!template) {
       throw new NotFoundError("SpriteTemplate", slug2);
     }
-    logger25.debug("Retrieved sprite", { slug: slug2 });
+    logger26.debug("Retrieved sprite", { slug: slug2 });
     return template;
   }
 }
-var logger25;
+var logger26;
 var init_sprite_service = __esm(() => {
   init_drizzle_orm();
   init_tables_index();
   init_src2();
   init_errors();
-  logger25 = log.scope("SpriteService");
+  logger26 = log.scope("SpriteService");
 });
 
 // ../timeback/dist/types.js
@@ -17905,7 +17961,7 @@ class TimebackService {
   }
   requireClient() {
     if (!this.ctx.timeback) {
-      logger26.error("Timeback client not available in context");
+      logger27.error("Timeback client not available in context");
       throw new ValidationError("Timeback integration not available in this environment");
     }
     return this.ctx.timeback;
@@ -17958,7 +18014,7 @@ class TimebackService {
       set: { xp: sql`excluded.xp`, updatedAt: new Date }
     }).returning({ xp: timebackDailyXp.xp, date: timebackDailyXp.date });
     if (!result) {
-      logger26.error("Daily XP upsert returned no rows", { userId, date: targetDate });
+      logger27.error("Daily XP upsert returned no rows", { userId, date: targetDate });
       throw new InternalError("Failed to update daily XP record");
     }
     return { xp: result.xp, date: result.date.toISOString() };
@@ -17989,7 +18045,7 @@ class TimebackService {
       columns: { id: true, timebackId: true }
     });
     if (dbUser?.timebackId) {
-      logger26.info("Student already onboarded", { userId: user.id });
+      logger27.info("Student already onboarded", { userId: user.id });
       return { status: "already_populated" };
     }
     let timebackId;
@@ -17998,7 +18054,7 @@ class TimebackService {
       const existingUser = await client.oneroster.users.findByEmail(user.email);
       timebackId = existingUser.sourcedId;
       name3 = `${existingUser.givenName} ${existingUser.familyName}`;
-      logger26.info("Found existing student in OneRoster", {
+      logger27.info("Found existing student in OneRoster", {
         userId: user.id,
         timebackId
       });
@@ -18027,7 +18083,7 @@ class TimebackService {
       }
       timebackId = response.sourcedIdPairs.allocatedSourcedId;
       name3 = `${providedNames.firstName} ${providedNames.lastName}`;
-      logger26.info("Created student in OneRoster", { userId: user.id, timebackId });
+      logger27.info("Created student in OneRoster", { userId: user.id, timebackId });
     }
     const assessments = await this.fetchAssessments(timebackId);
     await db2.transaction(async (tx) => {
@@ -18061,7 +18117,7 @@ class TimebackService {
       }
       const [updated] = await tx.update(users).set({ timebackId, name: name3 }).where(eq(users.id, user.id)).returning({ id: users.id });
       if (!updated) {
-        logger26.error("User Timeback ID update returned no rows", {
+        logger27.error("User Timeback ID update returned no rows", {
           userId: user.id,
           timebackId
         });
@@ -18084,13 +18140,13 @@ class TimebackService {
           break;
         offset += limit;
       }
-      logger26.debug("Fetched assessments", {
+      logger27.debug("Fetched assessments", {
         studentSourcedId,
         totalCount: allAssessments.length
       });
       return allAssessments;
     } catch (error) {
-      logger26.warn("Failed to fetch assessments", { studentSourcedId, error });
+      logger27.warn("Failed to fetch assessments", { studentSourcedId, error });
       return [];
     }
   }
@@ -18197,7 +18253,7 @@ class TimebackService {
         masterableUnits: derivedMasterableUnits
       } = courseConfig;
       if (!isTimebackSubject(subjectInput)) {
-        logger26.warn("Invalid Timeback subject in course config", {
+        logger27.warn("Invalid Timeback subject in course config", {
           subject: subjectInput,
           courseCode,
           title
@@ -18205,7 +18261,7 @@ class TimebackService {
         throw new ValidationError(`Invalid subject "${subjectInput}"`);
       }
       if (!isTimebackGrade(grade)) {
-        logger26.warn("Invalid Timeback grade in course config", {
+        logger27.warn("Invalid Timeback grade in course config", {
           grade,
           courseCode,
           title
@@ -18217,7 +18273,7 @@ class TimebackService {
       const totalXp = derivedTotalXp ?? courseMetadata?.metrics?.totalXp;
       const masterableUnits = derivedMasterableUnits ?? (isPlaycademyResourceMetadata(courseMetadata?.playcademy) ? courseMetadata?.playcademy?.mastery?.masterableUnits : undefined);
       if (typeof totalXp !== "number") {
-        logger26.warn("Course missing totalXp in Timeback config", {
+        logger27.warn("Course missing totalXp in Timeback config", {
           courseCode,
           title
         });
@@ -18388,7 +18444,7 @@ class TimebackService {
       courseName: activityData.courseName,
       studentEmail: activityData.studentEmail
     });
-    logger26.info("Recorded activity completion", {
+    logger27.info("Recorded activity completion", {
       gameId,
       courseId: integration.courseId,
       studentId,
@@ -18405,7 +18461,7 @@ class TimebackService {
     };
   }
 }
-var logger26;
+var logger27;
 var init_timeback_service = __esm(() => {
   init_drizzle_orm();
   init_src();
@@ -18415,7 +18471,7 @@ var init_timeback_service = __esm(() => {
   init_src4();
   init_errors();
   init_timeback_util();
-  logger26 = log.scope("TimebackService");
+  logger27 = log.scope("TimebackService");
 });
 
 // ../api-core/src/services/upload.service.ts
@@ -18428,15 +18484,15 @@ class UploadService {
     const { fileName, gameId } = request2;
     const bucketName = this.ctx.config.uploadBucket;
     if (!bucketName) {
-      logger27.error("Upload bucket not configured in environment");
+      logger28.error("Upload bucket not configured in environment");
       throw new ValidationError("Upload bucket not configured");
     }
     await this.ctx.services.game.validateDeveloperAccess(user, gameId);
     const version2 = ulid();
     const tempS3Key = `uploads-temp/${gameId}/${version2}/${fileName}`;
-    logger27.debug("Initiating upload", { userId: user.id, gameId, fileName, version: version2 });
+    logger28.debug("Initiating upload", { userId: user.id, gameId, fileName, version: version2 });
     const presignedUrl = await this.ctx.providers.storage.generatePresignedPutUrl(bucketName, tempS3Key, "application/zip");
-    logger27.info("Presigned URL generated", {
+    logger28.info("Presigned URL generated", {
       userId: user.id,
       gameId,
       version: version2
@@ -18449,12 +18505,12 @@ class UploadService {
     };
   }
 }
-var logger27;
+var logger28;
 var init_upload_service = __esm(() => {
   init_node();
   init_src2();
   init_errors();
-  logger27 = log.scope("UploadService");
+  logger28 = log.scope("UploadService");
 });
 
 // ../api-core/src/services/user.service.ts
@@ -18469,12 +18525,12 @@ class UserService {
       where: eq(users.id, user.id)
     });
     if (!userData) {
-      logger28.error("User not found", { userId: user.id });
+      logger29.error("User not found", { userId: user.id });
       throw new NotFoundError("User", user.id);
     }
     const timeback2 = userData.timebackId ? await this.fetchTimebackData(userData.timebackId, gameId) : undefined;
     if (gameId) {
-      logger28.debug("Fetched user profile (game context)", { userId: user.id, gameId });
+      logger29.debug("Fetched user profile (game context)", { userId: user.id, gameId });
       return {
         id: userData.id,
         name: userData.name,
@@ -18487,7 +18543,7 @@ class UserService {
     const timebackAccount = await db2.query.accounts.findFirst({
       where: and(eq(accounts.userId, user.id), eq(accounts.providerId, "timeback"))
     });
-    logger28.debug("Fetched user profile (platform context)", { userId: user.id });
+    logger29.debug("Fetched user profile (platform context)", { userId: user.id });
     return {
       id: userData.id,
       name: userData.name,
@@ -18511,7 +18567,7 @@ class UserService {
     ]);
     const enrollments = gameId ? this.filterEnrollmentsByGame(allEnrollments, gameId) : allEnrollments;
     const organizations = gameId ? this.filterOrganizationsByEnrollments(allOrganizations, enrollments) : allOrganizations;
-    logger28.debug("Fetched Timeback data", {
+    logger29.debug("Fetched Timeback data", {
       timebackId,
       role,
       enrollmentCount: enrollments.length,
@@ -18520,9 +18576,9 @@ class UserService {
     return { id: timebackId, role, enrollments, organizations };
   }
   async fetchStudentProfile(timebackId) {
-    logger28.debug("Fetching student profile", { timebackId });
+    logger29.debug("Fetching student profile", { timebackId });
     if (!this.ctx.timeback) {
-      logger28.warn("Timeback client not available");
+      logger29.warn("Timeback client not available");
       return { role: "student", organizations: [] };
     }
     try {
@@ -18550,14 +18606,14 @@ class UserService {
       }
       return { role, organizations: Array.from(orgMap.values()) };
     } catch (error) {
-      logger28.warn("Failed to fetch student profile", { error, timebackId });
+      logger29.warn("Failed to fetch student profile", { error, timebackId });
       return { role: "student", organizations: [] };
     }
   }
   async fetchEnrollments(timebackId) {
-    logger28.debug("Fetching enrollments", { timebackId });
+    logger29.debug("Fetching enrollments", { timebackId });
     if (!this.ctx.timeback) {
-      logger28.warn("Timeback client not available");
+      logger29.warn("Timeback client not available");
       return [];
     }
     try {
@@ -18577,7 +18633,7 @@ class UserService {
         orgId: courseToSchool.get(i2.courseId)
       }));
     } catch (error) {
-      logger28.warn("Failed to fetch enrollments", { error, timebackId });
+      logger29.warn("Failed to fetch enrollments", { error, timebackId });
       return [];
     }
   }
@@ -18591,13 +18647,13 @@ class UserService {
     return organizations.filter((o) => enrollmentOrgIds.has(o.id));
   }
 }
-var logger28;
+var logger29;
 var init_user_service = __esm(() => {
   init_drizzle_orm();
   init_tables_index();
   init_src2();
   init_errors();
-  logger28 = log.scope("UserService");
+  logger29 = log.scope("UserService");
 });
 
 // ../api-core/src/services/verify.service.ts
@@ -18607,16 +18663,16 @@ class VerifyService {
     this.ctx = ctx;
   }
   async verifyGameToken(token) {
-    logger29.debug("Verifying game token");
+    logger30.debug("Verifying game token");
     const payload = await this.ctx.providers.auth.validateGameToken(token);
     if (!payload) {
-      logger29.warn("Invalid or expired game token presented");
+      logger30.warn("Invalid or expired game token presented");
       throw new ValidationError("Invalid or expired token");
     }
     const gameId = payload.sub;
     const userId = payload.uid;
     if (typeof gameId !== "string" || typeof userId !== "string") {
-      logger29.warn("Game token missing required claims", {
+      logger30.warn("Game token missing required claims", {
         hasGameId: typeof gameId === "string",
         hasUserId: typeof userId === "string"
       });
@@ -18627,7 +18683,7 @@ class VerifyService {
       where: eq(users.id, userId)
     });
     if (!userData) {
-      logger29.error("User not found for valid token", {
+      logger30.error("User not found for valid token", {
         userId
       });
       throw new NotFoundError("User", userId);
@@ -18641,7 +18697,7 @@ class VerifyService {
       family_name: undefined,
       timeback_id: userData.timebackId || undefined
     };
-    logger29.info("Token verified", { gameId, userId });
+    logger30.info("Token verified", { gameId, userId });
     return {
       claims: payload,
       gameId,
@@ -18649,13 +18705,13 @@ class VerifyService {
     };
   }
 }
-var logger29;
+var logger30;
 var init_verify_service = __esm(() => {
   init_drizzle_orm();
   init_tables_index();
   init_src2();
   init_errors();
-  logger29 = log.scope("VerifyService");
+  logger30 = log.scope("VerifyService");
 });
 
 // ../api-core/src/services/index.ts
@@ -18675,6 +18731,7 @@ function createServices(ctx) {
     item: new ItemService(ctx),
     leaderboard: new LeaderboardService(ctx),
     level: new LevelService(ctx),
+    logs: new LogsService(ctx),
     lti: new LtiService(ctx),
     map: new MapService(ctx),
     notification: new NotificationService(ctx),
@@ -18706,6 +18763,7 @@ var init_services = __esm(() => {
   init_item_service();
   init_leaderboard_service();
   init_level_service();
+  init_logs_service();
   init_lti_service();
   init_map_service();
   init_notification_service();
@@ -18802,6 +18860,38 @@ function createSandboxAuthProvider() {
       const header = btoa(JSON.stringify({ alg: "none", typ: "sandbox" }));
       const payloadStr = btoa(JSON.stringify(payload));
       return `${header}.${payloadStr}.sandbox`;
+    },
+    async mintLogStreamToken(userId, workerId) {
+      const jti = crypto.randomUUID();
+      const payload = {
+        sub: userId,
+        game: workerId,
+        jti,
+        exp: Date.now() + 60 * 1000
+      };
+      const header = btoa(JSON.stringify({ alg: "none", typ: "sandbox" }));
+      const payloadStr = btoa(JSON.stringify(payload));
+      return `${header}.${payloadStr}.sandbox`;
+    },
+    async validateLogStreamToken(token) {
+      try {
+        const parts2 = token.split(".");
+        if (parts2.length !== 3)
+          return null;
+        if (parts2[2] === "sandbox") {
+          const payload = JSON.parse(atob(parts2[1]));
+          if (payload.jti && payload.sub && payload.game) {
+            if (payload.exp && payload.exp < Date.now()) {
+              log.debug("[SandboxAuthProvider] Log stream token expired");
+              return null;
+            }
+            return { jti: payload.jti, sub: payload.sub, game: payload.game };
+          }
+        }
+        return null;
+      } catch {
+        return null;
+      }
     }
   };
 }
@@ -20784,7 +20874,7 @@ var humanize = (times) => {
     }
   }
   return `${status}`;
-}, logger30 = (fn = console.log) => {
+}, logger31 = (fn = console.log) => {
   return async function logger2(c, next) {
     const { method, url } = c.req;
     const path = url.slice(url.indexOf("/", 8));
@@ -20961,7 +21051,7 @@ function createApp(db2, options) {
   const app = new Hono2;
   app.use("*", cors({ origin: "*", credentials: true }));
   if (options.verbose && !options.quiet) {
-    app.use("*", logger30());
+    app.use("*", logger31());
   }
   app.use("/api/*", async (c, next) => {
     c.set("db", db2);
@@ -27434,12 +27524,12 @@ var init_session2 = __esm(() => {
   init_utils();
   init_dist4();
   PglitePreparedQuery = class PglitePreparedQuery extends PgPreparedQuery {
-    constructor(client, queryString, params, logger31, fields, name3, _isResponseInArrayMode, customResultMapper) {
+    constructor(client, queryString, params, logger32, fields, name3, _isResponseInArrayMode, customResultMapper) {
       super({ sql: queryString, params });
       this.client = client;
       this.queryString = queryString;
       this.params = params;
-      this.logger = logger31;
+      this.logger = logger32;
       this.fields = fields;
       this._isResponseInArrayMode = _isResponseInArrayMode;
       this.customResultMapper = customResultMapper;
@@ -27543,11 +27633,11 @@ var init_session2 = __esm(() => {
 // ../../node_modules/drizzle-orm/pglite/driver.js
 function construct(client, config2 = {}) {
   const dialect2 = new PgDialect({ casing: config2.casing });
-  let logger31;
+  let logger32;
   if (config2.logger === true) {
-    logger31 = new DefaultLogger;
+    logger32 = new DefaultLogger;
   } else if (config2.logger !== false) {
-    logger31 = config2.logger;
+    logger32 = config2.logger;
   }
   let schema2;
   if (config2.schema) {
@@ -27558,7 +27648,7 @@ function construct(client, config2 = {}) {
       tableNamesMap: tablesConfig.tableNamesMap
     };
   }
-  const driver = new PgliteDriver(client, dialect2, { logger: logger31 });
+  const driver = new PgliteDriver(client, dialect2, { logger: logger32 });
   const session2 = driver.createSession(schema2);
   const db2 = new PgliteDatabase(dialect2, session2, schema2);
   db2.$client = client;
@@ -76139,8 +76229,8 @@ var init_currencies = __esm(() => {
 });
 
 // src/lib/logging/adapter.ts
-function setLogger(logger31) {
-  customLogger = logger31;
+function setLogger(logger32) {
+  customLogger = logger32;
 }
 function getLogger() {
   if (customLogger) {
@@ -76152,10 +76242,10 @@ function getLogger() {
     error: (msg) => console.error(msg)
   };
 }
-var customLogger, logger31;
+var customLogger, logger32;
 var init_adapter = __esm(() => {
   init_config();
-  logger31 = {
+  logger32 = {
     info: (msg) => {
       if (customLogger || !config.embedded) {
         getLogger().info(msg);
@@ -76242,7 +76332,7 @@ async function seedCoreGames(db2) {
     try {
       await db2.insert(games).values(gameData).onConflictDoNothing();
     } catch (error2) {
-      logger31.error(`Error seeding core game '${gameData.slug}': ${error2}`);
+      logger32.error(`Error seeding core game '${gameData.slug}': ${error2}`);
     }
   }
 }
@@ -76283,7 +76373,7 @@ async function seedCurrentProjectGame(db2, project) {
     }
     return newGame;
   } catch (error2) {
-    logger31.error(`❌ Error seeding project game: ${error2}`);
+    logger32.error(`❌ Error seeding project game: ${error2}`);
     throw error2;
   }
 }
@@ -77722,21 +77812,21 @@ var init_utils11 = __esm(() => {
 });
 
 // ../api-core/src/controllers/achievement.controller.ts
-var logger32, listCurrent, listHistory, postProgress, achievements3;
+var logger33, listCurrent, listHistory, postProgress, achievements3;
 var init_achievement_controller = __esm(() => {
   init_esm();
   init_schemas_index();
   init_src2();
   init_errors();
   init_utils11();
-  logger32 = log.scope("AchievementController");
+  logger33 = log.scope("AchievementController");
   listCurrent = requireAuth(async (ctx) => {
-    logger32.debug("Listing current achievements", { userId: ctx.user.id, gameId: ctx.gameId });
+    logger33.debug("Listing current achievements", { userId: ctx.user.id, gameId: ctx.gameId });
     return ctx.services.achievement.listCurrent(ctx.user, ctx.gameId);
   });
   listHistory = requireAuth(async (ctx) => {
     const limit = Math.max(1, Math.min(100, Number(ctx.url.searchParams.get("limit")) || 20));
-    logger32.debug("Listing achievement history", { userId: ctx.user.id, limit });
+    logger33.debug("Listing achievement history", { userId: ctx.user.id, limit });
     return ctx.services.achievement.listHistory(ctx.user, limit);
   });
   postProgress = requireAuth(async (ctx) => {
@@ -77747,12 +77837,12 @@ var init_achievement_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger32.warn("Submit achievement progress validation failed", { details });
+        logger33.warn("Submit achievement progress validation failed", { details });
         throw ApiError.unprocessableEntity("Invalid request body", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger32.debug("Submitting progress", {
+    logger33.debug("Submitting progress", {
       userId: ctx.user.id,
       achievementId: body2.achievementId
     });
@@ -77766,14 +77856,14 @@ var init_achievement_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/admin.controller.ts
-var logger33, getAllowedOrigins;
+var logger34, getAllowedOrigins;
 var init_admin_controller = __esm(() => {
   init_src2();
   init_utils11();
-  logger33 = log.scope("AdminController");
+  logger34 = log.scope("AdminController");
   getAllowedOrigins = requireAdmin(async (ctx) => {
     const shouldRefresh = ctx.url.searchParams.get("refresh") === "true";
-    logger33.debug("Getting allowed origins", { userId: ctx.user.id, refresh: shouldRefresh });
+    logger34.debug("Getting allowed origins", { userId: ctx.user.id, refresh: shouldRefresh });
     if (shouldRefresh) {
       await ctx.providers.cache.refreshGameOrigins();
     }
@@ -77788,14 +77878,14 @@ var init_admin_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/bucket.controller.ts
-var logger34, listFiles, getFile, putFile, deleteFile, initiateUpload;
+var logger35, listFiles, getFile, putFile, deleteFile, initiateUpload;
 var init_bucket_controller = __esm(() => {
   init_esm();
   init_schemas_index();
   init_src2();
   init_errors();
   init_utils11();
-  logger34 = log.scope("BucketController");
+  logger35 = log.scope("BucketController");
   listFiles = requireDeveloper(async (ctx) => {
     const slug2 = ctx.params.slug;
     if (!slug2) {
@@ -77803,7 +77893,7 @@ var init_bucket_controller = __esm(() => {
     }
     const url = ctx.url;
     const prefix2 = url.searchParams.get("prefix") || undefined;
-    logger34.debug("Listing files", { userId: ctx.user.id, slug: slug2, prefix: prefix2 });
+    logger35.debug("Listing files", { userId: ctx.user.id, slug: slug2, prefix: prefix2 });
     const files = await ctx.services.bucket.listFiles(slug2, ctx.user, prefix2);
     return { files };
   });
@@ -77813,7 +77903,7 @@ var init_bucket_controller = __esm(() => {
     if (!slug2 || !key) {
       throw ApiError.badRequest("Missing game slug or file key");
     }
-    logger34.debug("Getting file", { userId: ctx.user.id, slug: slug2, key });
+    logger35.debug("Getting file", { userId: ctx.user.id, slug: slug2, key });
     const object = await ctx.services.bucket.getFile(slug2, key, ctx.user);
     return new Response(Buffer.from(object.body), {
       status: 200,
@@ -77832,7 +77922,7 @@ var init_bucket_controller = __esm(() => {
     const arrayBuffer = await ctx.request.arrayBuffer();
     const body2 = new Uint8Array(arrayBuffer);
     const contentType = ctx.request.headers.get("content-type") || undefined;
-    logger34.debug("Uploading file", {
+    logger35.debug("Uploading file", {
       userId: ctx.user.id,
       slug: slug2,
       key,
@@ -77848,7 +77938,7 @@ var init_bucket_controller = __esm(() => {
     if (!slug2 || !key) {
       throw ApiError.badRequest("Missing game slug or file key");
     }
-    logger34.debug("Deleting file", { userId: ctx.user.id, slug: slug2, key });
+    logger35.debug("Deleting file", { userId: ctx.user.id, slug: slug2, key });
     await ctx.services.bucket.deleteFile(slug2, key, ctx.user);
     return { success: true, key };
   });
@@ -77860,12 +77950,12 @@ var init_bucket_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger34.warn("Initiate upload validation failed", { details });
+        logger35.warn("Initiate upload validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger34.debug("Initiating multipart upload", {
+    logger35.debug("Initiating multipart upload", {
       userId: ctx.user.id,
       gameId: body2.gameId,
       fileName: body2.fileName
@@ -77882,19 +77972,19 @@ async function listComponents(ctx) {
   if (!isNaN(parsed) && isFinite(parsed)) {
     level = Math.floor(Math.max(0, parsed));
   }
-  logger35.debug("Listing components", { level });
+  logger36.debug("Listing components", { level });
   return ctx.services.character.listAvailableComponents(level);
 }
-var logger35, get, getByUserId, create, update2, equipAccessory, removeAccessory, character2;
+var logger36, get, getByUserId, create, update2, equipAccessory, removeAccessory, character2;
 var init_character_controller = __esm(() => {
   init_esm();
   init_schemas_index();
   init_src2();
   init_errors();
   init_utils11();
-  logger35 = log.scope("CharacterController");
+  logger36 = log.scope("CharacterController");
   get = requireAuth(async (ctx) => {
-    logger35.debug("Getting character", { userId: ctx.user.id });
+    logger36.debug("Getting character", { userId: ctx.user.id });
     return ctx.services.character.getByUser(ctx.user);
   });
   getByUserId = requireAuth(async (ctx) => {
@@ -77902,7 +77992,7 @@ var init_character_controller = __esm(() => {
     if (!userId) {
       throw ApiError.badRequest("User ID is required in the URL path");
     }
-    logger35.debug("Getting character by user ID", { requestedUserId: userId });
+    logger36.debug("Getting character by user ID", { requestedUserId: userId });
     return ctx.services.character.getByUserId(userId);
   });
   create = requireAuth(async (ctx) => {
@@ -77913,12 +78003,12 @@ var init_character_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger35.warn("Create character validation failed", { details });
+        logger36.warn("Create character validation failed", { details });
         throw ApiError.unprocessableEntity("Invalid request body", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger35.debug("Creating character", {
+    logger36.debug("Creating character", {
       userId: ctx.user.id,
       bodyComponentId: body2.bodyComponentId,
       hairstyleComponentId: body2.hairstyleComponentId
@@ -77933,12 +78023,12 @@ var init_character_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger35.warn("Update character validation failed", { details });
+        logger36.warn("Update character validation failed", { details });
         throw ApiError.unprocessableEntity("Invalid request body", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger35.debug("Updating character", {
+    logger36.debug("Updating character", {
       userId: ctx.user.id,
       bodyComponentId: body2.bodyComponentId,
       hairstyleComponentId: body2.hairstyleComponentId,
@@ -77954,12 +78044,12 @@ var init_character_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger35.warn("Equip accessory validation failed", { details });
+        logger36.warn("Equip accessory validation failed", { details });
         throw ApiError.unprocessableEntity("Invalid request body", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger35.debug("Equipping accessory", {
+    logger36.debug("Equipping accessory", {
       userId: ctx.user.id,
       slot: body2.slot,
       accessoryComponentId: body2.accessoryComponentId
@@ -77971,7 +78061,7 @@ var init_character_controller = __esm(() => {
     if (!slot) {
       throw ApiError.badRequest("Slot is required in the URL path");
     }
-    logger35.debug("Removing accessory", { userId: ctx.user.id, slot });
+    logger36.debug("Removing accessory", { userId: ctx.user.id, slot });
     await ctx.services.character.removeAccessory(slot, ctx.user);
     return { success: true };
   });
@@ -77987,7 +78077,7 @@ var init_character_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/currency.controller.ts
-var logger36, list, getById, create2, update3, remove, currencyController;
+var logger37, list, getById, create2, update3, remove, currencyController;
 var init_currency_controller = __esm(() => {
   init_esm();
   init_schemas_index();
@@ -77995,9 +78085,9 @@ var init_currency_controller = __esm(() => {
   init_src4();
   init_errors();
   init_utils11();
-  logger36 = log.scope("CurrencyController");
+  logger37 = log.scope("CurrencyController");
   list = requireAuth(async (ctx) => {
-    logger36.debug("Listing currencies", { userId: ctx.user.id });
+    logger37.debug("Listing currencies", { userId: ctx.user.id });
     return ctx.services.currency.list();
   });
   getById = requireAuth(async (ctx) => {
@@ -78008,7 +78098,7 @@ var init_currency_controller = __esm(() => {
     if (!isValidUUID(currencyId)) {
       throw ApiError.unprocessableEntity("currencyId must be a valid UUID format");
     }
-    logger36.debug("Getting currency", { userId: ctx.user.id, currencyId });
+    logger37.debug("Getting currency", { userId: ctx.user.id, currencyId });
     return ctx.services.currency.getById(currencyId);
   });
   create2 = requireAdmin(async (ctx) => {
@@ -78019,12 +78109,12 @@ var init_currency_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger36.warn("Create currency validation failed", { details });
+        logger37.warn("Create currency validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger36.debug("Creating currency", {
+    logger37.debug("Creating currency", {
       userId: ctx.user.id,
       symbol: body2.symbol,
       itemId: body2.itemId,
@@ -78047,12 +78137,12 @@ var init_currency_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger36.warn("Update currency validation failed", { details });
+        logger37.warn("Update currency validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger36.debug("Updating currency", {
+    logger37.debug("Updating currency", {
       userId: ctx.user.id,
       currencyId,
       symbol: body2.symbol,
@@ -78069,7 +78159,7 @@ var init_currency_controller = __esm(() => {
     if (!isValidUUID(currencyId)) {
       throw ApiError.unprocessableEntity("currencyId must be a valid UUID format");
     }
-    logger36.debug("Deleting currency", { userId: ctx.user.id, currencyId });
+    logger37.debug("Deleting currency", { userId: ctx.user.id, currencyId });
     await ctx.services.currency.delete(currencyId);
   });
   currencyController = {
@@ -78082,14 +78172,14 @@ var init_currency_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/database.controller.ts
-var logger37, reset;
+var logger38, reset;
 var init_database_controller = __esm(() => {
   init_esm();
   init_schemas_index();
   init_src2();
   init_errors();
   init_utils11();
-  logger37 = log.scope("DatabaseController");
+  logger38 = log.scope("DatabaseController");
   reset = requireDeveloper(async (ctx) => {
     const slug2 = ctx.params.slug;
     if (!slug2) {
@@ -78102,11 +78192,11 @@ var init_database_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger37.warn("Database reset validation failed", { details });
+        logger38.warn("Database reset validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
     }
-    logger37.debug("Resetting database", {
+    logger38.debug("Resetting database", {
       userId: ctx.user.id,
       slug: slug2,
       hasSchema: !!body2.schema
@@ -87202,28 +87292,28 @@ var init_zip = __esm(() => {
 });
 
 // ../api-core/src/controllers/deploy.controller.ts
-var logger38;
+var logger39;
 var init_deploy_controller = __esm(() => {
   init_schemas_index();
   init_src2();
   init_zip();
   init_errors();
   init_utils11();
-  logger38 = log.scope("DeployController");
+  logger39 = log.scope("DeployController");
 });
 
 // ../api-core/src/controllers/developer.controller.ts
-var logger39, apply, getStatus, developer;
+var logger40, apply, getStatus, developer;
 var init_developer_controller = __esm(() => {
   init_src2();
   init_utils11();
-  logger39 = log.scope("DeveloperController");
+  logger40 = log.scope("DeveloperController");
   apply = requireAuth(async (ctx) => {
-    logger39.debug("Applying for developer status", { userId: ctx.user.id });
+    logger40.debug("Applying for developer status", { userId: ctx.user.id });
     await ctx.services.developer.apply(ctx.user);
   });
   getStatus = requireAuth(async (ctx) => {
-    logger39.debug("Getting developer status", { userId: ctx.user.id });
+    logger40.debug("Getting developer status", { userId: ctx.user.id });
     const status = await ctx.services.developer.getStatus(ctx.user.id);
     return { status };
   });
@@ -87234,7 +87324,7 @@ var init_developer_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/domain.controller.ts
-var logger40, add, list2, getStatus2, remove2, domains2;
+var logger41, add, list2, getStatus2, remove2, domains2;
 var init_domain_controller = __esm(() => {
   init_esm();
   init_schemas_index();
@@ -87242,7 +87332,7 @@ var init_domain_controller = __esm(() => {
   init_config2();
   init_errors();
   init_utils11();
-  logger40 = log.scope("DomainController");
+  logger41 = log.scope("DomainController");
   add = requireDeveloper(async (ctx) => {
     const slug2 = ctx.params.slug;
     if (!slug2) {
@@ -87255,12 +87345,12 @@ var init_domain_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger40.warn("Add domain validation failed", { details });
+        logger41.warn("Add domain validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger40.debug("Adding domain", { userId: ctx.user.id, slug: slug2, hostname: body2.hostname });
+    logger41.debug("Adding domain", { userId: ctx.user.id, slug: slug2, hostname: body2.hostname });
     return ctx.services.domain.add(slug2, body2.hostname, body2.environment, ctx.user);
   });
   list2 = requireDeveloper(async (ctx) => {
@@ -87269,7 +87359,7 @@ var init_domain_controller = __esm(() => {
       throw ApiError.badRequest("Missing game slug");
     }
     const environment = getPlatformEnvironment(ctx.config);
-    logger40.debug("Listing domains", { userId: ctx.user.id, slug: slug2, environment });
+    logger41.debug("Listing domains", { userId: ctx.user.id, slug: slug2, environment });
     const domains2 = await ctx.services.domain.list(slug2, environment, ctx.user);
     return { domains: domains2 };
   });
@@ -87284,7 +87374,7 @@ var init_domain_controller = __esm(() => {
     }
     const refresh = ctx.url.searchParams.get("refresh") === "true";
     const environment = getPlatformEnvironment(ctx.config);
-    logger40.debug("Getting domain status", { userId: ctx.user.id, slug: slug2, hostname, refresh });
+    logger41.debug("Getting domain status", { userId: ctx.user.id, slug: slug2, hostname, refresh });
     return ctx.services.domain.getStatus(slug2, hostname, environment, ctx.user, refresh);
   });
   remove2 = requireDeveloper(async (ctx) => {
@@ -87297,7 +87387,7 @@ var init_domain_controller = __esm(() => {
       throw ApiError.badRequest("Missing hostname");
     }
     const environment = ctx.config.stage === "production" ? "production" : "staging";
-    logger40.debug("Removing domain", { userId: ctx.user.id, slug: slug2, hostname, environment });
+    logger41.debug("Removing domain", { userId: ctx.user.id, slug: slug2, hostname, environment });
     await ctx.services.domain.delete(slug2, hostname, environment, ctx.user);
   });
   domains2 = {
@@ -87309,7 +87399,7 @@ var init_domain_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/game.controller.ts
-var logger41, list3, getById2, getBySlug, upsertBySlug, remove3, games2;
+var logger42, list3, getById2, getBySlug, upsertBySlug, remove3, games2;
 var init_game_controller = __esm(() => {
   init_esm();
   init_schemas_index();
@@ -87317,9 +87407,9 @@ var init_game_controller = __esm(() => {
   init_src4();
   init_errors();
   init_utils11();
-  logger41 = log.scope("GameController");
+  logger42 = log.scope("GameController");
   list3 = requireAuth(async (ctx) => {
-    logger41.debug("Listing games", { userId: ctx.user.id });
+    logger42.debug("Listing games", { userId: ctx.user.id });
     return ctx.services.game.list();
   });
   getById2 = requireAuth(async (ctx) => {
@@ -87330,7 +87420,7 @@ var init_game_controller = __esm(() => {
     if (!isValidUUID(gameId)) {
       throw ApiError.unprocessableEntity("gameId must be a valid UUID format");
     }
-    logger41.debug("Getting game by ID", { userId: ctx.user.id, gameId });
+    logger42.debug("Getting game by ID", { userId: ctx.user.id, gameId });
     return ctx.services.game.getById(gameId);
   });
   getBySlug = requireAuth(async (ctx) => {
@@ -87338,7 +87428,7 @@ var init_game_controller = __esm(() => {
     if (!slug2) {
       throw ApiError.badRequest("Missing game slug");
     }
-    logger41.debug("Getting game by slug", { userId: ctx.user.id, slug: slug2 });
+    logger42.debug("Getting game by slug", { userId: ctx.user.id, slug: slug2 });
     return ctx.services.game.getBySlug(slug2);
   });
   upsertBySlug = requireAuth(async (ctx) => {
@@ -87353,12 +87443,12 @@ var init_game_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger41.warn("Upsert game validation failed", { details });
+        logger42.warn("Upsert game validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger41.debug("Upserting game", { userId: ctx.user.id, slug: slug2, displayName: body2.displayName });
+    logger42.debug("Upserting game", { userId: ctx.user.id, slug: slug2, displayName: body2.displayName });
     return ctx.services.game.upsertBySlug(slug2, body2, ctx.user);
   });
   remove3 = requireAuth(async (ctx) => {
@@ -87369,7 +87459,7 @@ var init_game_controller = __esm(() => {
     if (!isValidUUID(gameId)) {
       throw ApiError.unprocessableEntity("gameId must be a valid UUID format");
     }
-    logger41.debug("Deleting game", { userId: ctx.user.id, gameId });
+    logger42.debug("Deleting game", { userId: ctx.user.id, gameId });
     await ctx.services.game.delete(gameId, ctx.user);
   });
   games2 = {
@@ -87382,16 +87472,16 @@ var init_game_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/inventory.controller.ts
-var logger42, list4, addItem, removeItem, inventory;
+var logger43, list4, addItem, removeItem, inventory;
 var init_inventory_controller = __esm(() => {
   init_esm();
   init_schemas_index();
   init_src2();
   init_errors();
   init_utils11();
-  logger42 = log.scope("InventoryController");
+  logger43 = log.scope("InventoryController");
   list4 = requireAuth(async (ctx) => {
-    logger42.debug("Listing inventory", { userId: ctx.user.id });
+    logger43.debug("Listing inventory", { userId: ctx.user.id });
     return ctx.services.inventory.list(ctx.user);
   });
   addItem = requireAuth(async (ctx) => {
@@ -87402,12 +87492,12 @@ var init_inventory_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger42.warn("Add inventory item validation failed", { details });
+        logger43.warn("Add inventory item validation failed", { details });
         throw ApiError.unprocessableEntity("Invalid request body", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger42.debug("Adding item", {
+    logger43.debug("Adding item", {
       userId: ctx.user.id,
       itemId: body2.itemId,
       qty: body2.qty
@@ -87422,12 +87512,12 @@ var init_inventory_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger42.warn("Remove inventory item validation failed", { details });
+        logger43.warn("Remove inventory item validation failed", { details });
         throw ApiError.unprocessableEntity("Invalid request body", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger42.debug("Removing item", {
+    logger43.debug("Removing item", {
       userId: ctx.user.id,
       itemId: body2.itemId,
       qty: body2.qty
@@ -87442,7 +87532,7 @@ var init_inventory_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/item.controller.ts
-var logger43, list5, getById3, resolve2, create3, update4, remove4, listByGame, createForGame, updateForGame, deleteForGame, items2;
+var logger44, list5, getById3, resolve2, create3, update4, remove4, listByGame, createForGame, updateForGame, deleteForGame, items2;
 var init_item_controller = __esm(() => {
   init_esm();
   init_schemas_index();
@@ -87450,10 +87540,10 @@ var init_item_controller = __esm(() => {
   init_src4();
   init_errors();
   init_utils11();
-  logger43 = log.scope("ItemController");
+  logger44 = log.scope("ItemController");
   list5 = requireAuth(async (ctx) => {
     const gameId = ctx.url.searchParams.get("gameId") || undefined;
-    logger43.debug("Listing items", { userId: ctx.user.id, gameId });
+    logger44.debug("Listing items", { userId: ctx.user.id, gameId });
     return ctx.services.item.list(gameId);
   });
   getById3 = requireAuth(async (ctx) => {
@@ -87464,7 +87554,7 @@ var init_item_controller = __esm(() => {
     if (!isValidUUID(itemId)) {
       throw ApiError.unprocessableEntity("itemId must be a valid UUID format");
     }
-    logger43.debug("Getting item", { userId: ctx.user.id, itemId });
+    logger44.debug("Getting item", { userId: ctx.user.id, itemId });
     return ctx.services.item.getById(itemId);
   });
   resolve2 = requireAuth(async (ctx) => {
@@ -87476,7 +87566,7 @@ var init_item_controller = __esm(() => {
     if (gameId && !isValidUUID(gameId)) {
       throw ApiError.unprocessableEntity("gameId must be a valid UUID format");
     }
-    logger43.debug("Resolving item", { userId: ctx.user.id, slug: slug2, gameId });
+    logger44.debug("Resolving item", { userId: ctx.user.id, slug: slug2, gameId });
     return ctx.services.item.resolveBySlug(slug2, gameId);
   });
   create3 = requireRole(["admin"], async (ctx) => {
@@ -87487,12 +87577,12 @@ var init_item_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger43.warn("Create item validation failed", { details });
+        logger44.warn("Create item validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger43.debug("Creating item", {
+    logger44.debug("Creating item", {
       userId: ctx.user.id,
       slug: body2.slug,
       displayName: body2.displayName
@@ -87514,7 +87604,7 @@ var init_item_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger43.warn("Update item validation failed", { details });
+        logger44.warn("Update item validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
@@ -87522,7 +87612,7 @@ var init_item_controller = __esm(() => {
     if (Object.keys(body2).length === 0) {
       throw ApiError.badRequest("No update data provided");
     }
-    logger43.debug("Updating item", {
+    logger44.debug("Updating item", {
       userId: ctx.user.id,
       itemId,
       slug: body2.slug,
@@ -87539,7 +87629,7 @@ var init_item_controller = __esm(() => {
     if (!isValidUUID(itemId)) {
       throw ApiError.unprocessableEntity("itemId must be a valid UUID format");
     }
-    logger43.debug("Deleting item", { userId: ctx.user.id, itemId });
+    logger44.debug("Deleting item", { userId: ctx.user.id, itemId });
     await ctx.services.item.delete(itemId);
   });
   listByGame = requireAuth(async (ctx) => {
@@ -87550,7 +87640,7 @@ var init_item_controller = __esm(() => {
     if (!isValidUUID(gameId)) {
       throw ApiError.unprocessableEntity("gameId must be a valid UUID format");
     }
-    logger43.debug("Listing game items", { userId: ctx.user.id, gameId });
+    logger44.debug("Listing game items", { userId: ctx.user.id, gameId });
     return ctx.services.item.listByGame(gameId);
   });
   createForGame = requireAuth(async (ctx) => {
@@ -87568,12 +87658,12 @@ var init_item_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger43.warn("Create game item validation failed", { details });
+        logger44.warn("Create game item validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger43.debug("Creating game item", {
+    logger44.debug("Creating game item", {
       userId: ctx.user.id,
       gameId,
       slug: body2.slug,
@@ -87600,7 +87690,7 @@ var init_item_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger43.warn("Update game item validation failed", { details });
+        logger44.warn("Update game item validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
@@ -87608,7 +87698,7 @@ var init_item_controller = __esm(() => {
     if (Object.keys(body2).length === 0) {
       throw ApiError.badRequest("No update data provided");
     }
-    logger43.debug("Updating game item", {
+    logger44.debug("Updating game item", {
       userId: ctx.user.id,
       gameId,
       itemId,
@@ -87630,7 +87720,7 @@ var init_item_controller = __esm(() => {
     if (!isValidUUID(itemId)) {
       throw ApiError.unprocessableEntity("itemId must be a valid UUID format");
     }
-    logger43.debug("Deleting game item", { userId: ctx.user.id, gameId, itemId });
+    logger44.debug("Deleting game item", { userId: ctx.user.id, gameId, itemId });
     await ctx.services.item.deleteForGame(gameId, itemId, ctx.user);
   });
   items2 = {
@@ -87648,7 +87738,7 @@ var init_item_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/leaderboard.controller.ts
-var logger44, submitScore, getGlobalLeaderboard, getLeaderboard, getUserRank, getUserAllScores, getUserScores, leaderboard;
+var logger45, submitScore, getGlobalLeaderboard, getLeaderboard, getUserRank, getUserAllScores, getUserScores, leaderboard;
 var init_leaderboard_controller = __esm(() => {
   init_esm();
   init_schemas_index();
@@ -87656,7 +87746,7 @@ var init_leaderboard_controller = __esm(() => {
   init_src4();
   init_errors();
   init_utils11();
-  logger44 = log.scope("LeaderboardController");
+  logger45 = log.scope("LeaderboardController");
   submitScore = requireAuth(async (ctx) => {
     const gameId = ctx.params.gameId;
     if (!gameId) {
@@ -87669,12 +87759,12 @@ var init_leaderboard_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger44.warn("Submit score validation failed", { details });
+        logger45.warn("Submit score validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger44.debug("Submitting score", {
+    logger45.debug("Submitting score", {
       userId: ctx.user.id,
       gameId,
       score: body2.score
@@ -87697,12 +87787,12 @@ var init_leaderboard_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger44.warn("Get global leaderboard query validation failed", { details });
+        logger45.warn("Get global leaderboard query validation failed", { details });
         throw ApiError.badRequest("Invalid query parameters", details);
       }
       throw ApiError.badRequest("Invalid query parameters");
     }
-    logger44.debug("Getting global leaderboard", {
+    logger45.debug("Getting global leaderboard", {
       userId: ctx.user.id,
       gameId,
       ...query
@@ -87725,12 +87815,12 @@ var init_leaderboard_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger44.warn("Get leaderboard query validation failed", { details });
+        logger45.warn("Get leaderboard query validation failed", { details });
         throw ApiError.badRequest("Invalid query parameters", details);
       }
       throw ApiError.badRequest("Invalid query parameters");
     }
-    logger44.debug("Getting leaderboard", {
+    logger45.debug("Getting leaderboard", {
       userId: ctx.user.id,
       gameId,
       ...query
@@ -87745,7 +87835,7 @@ var init_leaderboard_controller = __esm(() => {
     if (!isValidUUID(userId)) {
       throw ApiError.unprocessableEntity("userId must be a valid UUID format");
     }
-    logger44.debug("Getting user rank", {
+    logger45.debug("Getting user rank", {
       requesterId: ctx.user.id,
       gameId,
       targetUserId: userId
@@ -87763,7 +87853,7 @@ var init_leaderboard_controller = __esm(() => {
     const url = ctx.url;
     const limit = Math.min(Number(url.searchParams.get("limit") || "50"), 100);
     const gameId = url.searchParams.get("gameId") || undefined;
-    logger44.debug("Getting user all scores", {
+    logger45.debug("Getting user all scores", {
       requesterId: ctx.user.id,
       targetUserId: userId,
       gameId,
@@ -87781,7 +87871,7 @@ var init_leaderboard_controller = __esm(() => {
     }
     const url = ctx.url;
     const limit = Math.min(Number(url.searchParams.get("limit") || "10"), 100);
-    logger44.debug("Getting user scores", {
+    logger45.debug("Getting user scores", {
       requesterId: ctx.user.id,
       gameId,
       targetUserId: userId,
@@ -87801,7 +87891,7 @@ var init_leaderboard_controller = __esm(() => {
 
 // ../api-core/src/controllers/level.controller.ts
 async function listConfigs(ctx) {
-  logger45.debug("Listing level configs");
+  logger46.debug("Listing level configs");
   return ctx.services.level.listConfigs();
 }
 async function getConfig(ctx) {
@@ -87813,21 +87903,21 @@ async function getConfig(ctx) {
   if (isNaN(level) || level < 1) {
     throw ApiError.badRequest("Level must be a positive integer");
   }
-  logger45.debug("Getting level config", { level });
+  logger46.debug("Getting level config", { level });
   return ctx.services.level.getConfig(level);
 }
-var logger45, getByUser, getProgress, levels;
+var logger46, getByUser, getProgress, levels;
 var init_level_controller = __esm(() => {
   init_src2();
   init_errors();
   init_utils11();
-  logger45 = log.scope("LevelController");
+  logger46 = log.scope("LevelController");
   getByUser = requireAuth(async (ctx) => {
-    logger45.debug("Getting user level", { userId: ctx.user.id });
+    logger46.debug("Getting user level", { userId: ctx.user.id });
     return ctx.services.level.getByUser(ctx.user);
   });
   getProgress = requireAuth(async (ctx) => {
-    logger45.debug("Getting level progress", { userId: ctx.user.id });
+    logger46.debug("Getting level progress", { userId: ctx.user.id });
     return ctx.services.level.getProgress(ctx.user);
   });
   levels = {
@@ -87838,6 +87928,42 @@ var init_level_controller = __esm(() => {
   };
 });
 
+// ../api-core/src/controllers/logs.controller.ts
+var logger47, generateToken, logs;
+var init_logs_controller = __esm(() => {
+  init_src2();
+  init_errors();
+  init_utils11();
+  logger47 = log.scope("LogsController");
+  generateToken = requireDeveloper(async (ctx) => {
+    const slug2 = ctx.params.slug;
+    if (!slug2) {
+      throw ApiError.badRequest("Missing game slug");
+    }
+    let body2;
+    try {
+      const json4 = await ctx.request.json();
+      if (json4.environment !== "staging" && json4.environment !== "production") {
+        throw ApiError.badRequest('Invalid environment. Must be "staging" or "production".');
+      }
+      body2 = json4;
+    } catch (error2) {
+      if (error2 instanceof ApiError)
+        throw error2;
+      throw ApiError.badRequest("Invalid JSON body");
+    }
+    logger47.debug("Generating log stream token", {
+      userId: ctx.user.id,
+      slug: slug2,
+      environment: body2.environment
+    });
+    return ctx.services.logs.generateToken(ctx.user, slug2, body2.environment);
+  });
+  logs = {
+    generateToken
+  };
+});
+
 // ../api-core/src/controllers/lti.controller.ts
 async function launch(ctx) {
   const formData = await ctx.request.formData();
@@ -87846,17 +87972,17 @@ async function launch(ctx) {
     throw ApiError.badRequest("Missing or invalid id_token");
   }
   const currentHost = ctx.url.hostname;
-  logger46.debug("Processing launch", { host: currentHost });
+  logger48.debug("Processing launch", { host: currentHost });
   return ctx.services.lti.processLaunch(idToken, currentHost);
 }
-var logger46, getStatus3, lti;
+var logger48, getStatus3, lti;
 var init_lti_controller = __esm(() => {
   init_src2();
   init_errors();
   init_utils11();
-  logger46 = log.scope("LtiController");
+  logger48 = log.scope("LtiController");
   getStatus3 = requireAuth(async (ctx) => {
-    logger46.debug("Getting status", { userId: ctx.user.id });
+    logger48.debug("Getting status", { userId: ctx.user.id });
     return ctx.services.lti.getStatus(ctx.user);
   });
   lti = {
@@ -87866,7 +87992,7 @@ var init_lti_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/map.controller.ts
-var logger47, getByIdentifier, getElements, getObjects, createObject, deleteObject, maps2;
+var logger49, getByIdentifier, getElements, getObjects, createObject, deleteObject, maps2;
 var init_map_controller = __esm(() => {
   init_esm();
   init_schemas_index();
@@ -87874,13 +88000,13 @@ var init_map_controller = __esm(() => {
   init_src4();
   init_errors();
   init_utils11();
-  logger47 = log.scope("MapController");
+  logger49 = log.scope("MapController");
   getByIdentifier = requireAuth(async (ctx) => {
     const identifier = ctx.params.identifier;
     if (!identifier) {
       throw ApiError.badRequest("Missing map identifier");
     }
-    logger47.debug("Getting map", { userId: ctx.user.id, identifier });
+    logger49.debug("Getting map", { userId: ctx.user.id, identifier });
     return ctx.services.map.getByIdentifier(identifier);
   });
   getElements = requireAuth(async (ctx) => {
@@ -87891,7 +88017,7 @@ var init_map_controller = __esm(() => {
     if (!isValidUUID(mapId)) {
       throw ApiError.unprocessableEntity("mapId must be a valid UUID format");
     }
-    logger47.debug("Getting map elements", { userId: ctx.user.id, mapId });
+    logger49.debug("Getting map elements", { userId: ctx.user.id, mapId });
     return ctx.services.map.getElements(mapId);
   });
   getObjects = requireAuth(async (ctx) => {
@@ -87902,7 +88028,7 @@ var init_map_controller = __esm(() => {
     if (!isValidUUID(mapId)) {
       throw ApiError.unprocessableEntity("mapId must be a valid UUID format");
     }
-    logger47.debug("Getting map objects", { userId: ctx.user.id, mapId });
+    logger49.debug("Getting map objects", { userId: ctx.user.id, mapId });
     return ctx.services.map.getObjects(mapId, ctx.user.id);
   });
   createObject = requireAuth(async (ctx) => {
@@ -87924,12 +88050,12 @@ var init_map_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger47.warn("Create map object validation failed", { details });
+        logger49.warn("Create map object validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger47.debug("Creating map object", {
+    logger49.debug("Creating map object", {
       userId: ctx.user.id,
       mapId,
       itemId: body2.itemId,
@@ -87953,7 +88079,7 @@ var init_map_controller = __esm(() => {
     if (!isValidUUID(objectId)) {
       throw ApiError.unprocessableEntity("objectId must be a valid UUID format");
     }
-    logger47.debug("Deleting map object", { userId: ctx.user.id, mapId, objectId });
+    logger49.debug("Deleting map object", { userId: ctx.user.id, mapId, objectId });
     await ctx.services.map.deleteObject(mapId, objectId, ctx.user);
   });
   maps2 = {
@@ -87966,14 +88092,14 @@ var init_map_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/notification.controller.ts
-var logger48, list6, updateStatus, getStats, create4, deliver, notifications2;
+var logger50, list6, updateStatus, getStats, create4, deliver, notifications2;
 var init_notification_controller = __esm(() => {
   init_esm();
   init_schemas_index();
   init_src2();
   init_errors();
   init_utils11();
-  logger48 = log.scope("NotificationController");
+  logger50 = log.scope("NotificationController");
   list6 = requireAuth(async (ctx) => {
     const query = {
       status: ctx.url.searchParams.get("status") || undefined,
@@ -87984,10 +88110,10 @@ var init_notification_controller = __esm(() => {
     const result = NotificationListQuerySchema.omit({ userId: true }).safeParse(query);
     if (!result.success) {
       const details = formatZodError(result.error);
-      logger48.warn("List notifications query validation failed", { details });
+      logger50.warn("List notifications query validation failed", { details });
       throw ApiError.badRequest("Invalid query parameters", details);
     }
-    logger48.debug("Listing notifications", { userId: ctx.user.id, ...result.data });
+    logger50.debug("Listing notifications", { userId: ctx.user.id, ...result.data });
     return ctx.services.notification.list(ctx.user, result.data);
   });
   updateStatus = requireAuth(async (ctx) => {
@@ -88002,12 +88128,12 @@ var init_notification_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger48.warn("Update notification status validation failed", { details });
+        logger50.warn("Update notification status validation failed", { details });
         throw ApiError.unprocessableEntity("Invalid request body", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger48.debug("Updating status", {
+    logger50.debug("Updating status", {
       userId: ctx.user.id,
       notificationId,
       status: body2.status
@@ -88017,7 +88143,7 @@ var init_notification_controller = __esm(() => {
   getStats = requireAuth(async (ctx) => {
     const startDate = ctx.url.searchParams.get("startDate");
     const endDate = ctx.url.searchParams.get("endDate");
-    logger48.debug("Getting stats", { userId: ctx.user.id, startDate, endDate });
+    logger50.debug("Getting stats", { userId: ctx.user.id, startDate, endDate });
     return ctx.services.notification.getStats(ctx.user, {
       startDate: startDate ? new Date(startDate) : undefined,
       endDate: endDate ? new Date(endDate) : undefined
@@ -88031,12 +88157,12 @@ var init_notification_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger48.warn("Create notification validation failed", { details });
+        logger50.warn("Create notification validation failed", { details });
         throw ApiError.unprocessableEntity("Invalid request body", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger48.debug("Creating notification", {
+    logger50.debug("Creating notification", {
       userId: ctx.user.id,
       targetUserId: body2.userId,
       type: body2.type
@@ -88054,12 +88180,12 @@ var init_notification_controller = __esm(() => {
     });
   });
   deliver = requireAuth(async (ctx) => {
-    logger48.debug("Delivering notifications", { userId: ctx.user.id });
+    logger50.debug("Delivering notifications", { userId: ctx.user.id });
     try {
       await ctx.services.notification.deliverPending(ctx.user.id);
       return { success: true };
     } catch (error2) {
-      logger48.error("Failed to deliver notifications", { error: error2 });
+      logger50.error("Failed to deliver notifications", { error: error2 });
       throw ApiError.internal("Failed to deliver notifications");
     }
   });
@@ -88073,39 +88199,39 @@ var init_notification_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/realtime.controller.ts
-var logger49, generateToken, realtime;
+var logger51, generateToken2, realtime;
 var init_realtime_controller = __esm(() => {
   init_src2();
   init_utils11();
-  logger49 = log.scope("RealtimeController");
-  generateToken = requireAuth(async (ctx) => {
+  logger51 = log.scope("RealtimeController");
+  generateToken2 = requireAuth(async (ctx) => {
     const gameIdOrSlug = ctx.params.gameId;
-    logger49.debug("Generating token", {
+    logger51.debug("Generating token", {
       userId: ctx.user.id,
       gameId: gameIdOrSlug || "global"
     });
     return ctx.services.realtime.generateToken(ctx.user, gameIdOrSlug);
   });
   realtime = {
-    generateToken
+    generateToken: generateToken2
   };
 });
 
 // ../api-core/src/controllers/secrets.controller.ts
-var logger50, listKeys, getValues, setSecrets, deleteSecret, secrets;
+var logger52, listKeys, getValues, setSecrets, deleteSecret, secrets;
 var init_secrets_controller = __esm(() => {
   init_esm();
   init_schemas_index();
   init_src2();
   init_errors();
   init_utils11();
-  logger50 = log.scope("SecretsController");
+  logger52 = log.scope("SecretsController");
   listKeys = requireDeveloper(async (ctx) => {
     const slug2 = ctx.params.slug;
     if (!slug2) {
       throw ApiError.badRequest("Missing game slug");
     }
-    logger50.debug("Listing secret keys", { userId: ctx.user.id, slug: slug2 });
+    logger52.debug("Listing secret keys", { userId: ctx.user.id, slug: slug2 });
     const keys = await ctx.services.secrets.listKeys(slug2, ctx.user);
     return { keys };
   });
@@ -88114,7 +88240,7 @@ var init_secrets_controller = __esm(() => {
     if (!slug2) {
       throw ApiError.badRequest("Missing game slug");
     }
-    logger50.debug("Getting secret values", { userId: ctx.user.id, slug: slug2 });
+    logger52.debug("Getting secret values", { userId: ctx.user.id, slug: slug2 });
     const secrets = await ctx.services.secrets.getValues(slug2, ctx.user);
     return { secrets };
   });
@@ -88130,12 +88256,12 @@ var init_secrets_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger50.warn("Set secrets validation failed", { details });
+        logger52.warn("Set secrets validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger50.debug("Setting secrets", {
+    logger52.debug("Setting secrets", {
       userId: ctx.user.id,
       slug: slug2,
       keyCount: Object.keys(body2).length
@@ -88152,7 +88278,7 @@ var init_secrets_controller = __esm(() => {
     if (!key) {
       throw ApiError.badRequest("Missing secret key");
     }
-    logger50.debug("Deleting secret", { userId: ctx.user.id, slug: slug2, key });
+    logger52.debug("Deleting secret", { userId: ctx.user.id, slug: slug2, key });
     await ctx.services.secrets.deleteSecret(slug2, key, ctx.user);
     return { success: true };
   });
@@ -88165,14 +88291,14 @@ var init_secrets_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/seed.controller.ts
-var logger51, seed;
+var logger53, seed;
 var init_seed_controller = __esm(() => {
   init_esm();
   init_schemas_index();
   init_src2();
   init_errors();
   init_utils11();
-  logger51 = log.scope("SeedController");
+  logger53 = log.scope("SeedController");
   seed = requireDeveloper(async (ctx) => {
     const slug2 = ctx.params.slug;
     if (!slug2) {
@@ -88185,29 +88311,29 @@ var init_seed_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger51.warn("Seed database validation failed", { details });
+        logger53.warn("Seed database validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger51.debug("Seeding database", { userId: ctx.user.id, slug: slug2, codeLength: body2.code.length });
+    logger53.debug("Seeding database", { userId: ctx.user.id, slug: slug2, codeLength: body2.code.length });
     return ctx.services.seed.seed(slug2, body2.code, ctx.user);
   });
 });
 
 // ../api-core/src/controllers/session.controller.ts
-var logger52, start2, end, mintToken, sessions2;
+var logger54, start2, end, mintToken, sessions2;
 var init_session_controller = __esm(() => {
   init_src2();
   init_errors();
   init_utils11();
-  logger52 = log.scope("SessionController");
+  logger54 = log.scope("SessionController");
   start2 = requireAuth(async (ctx) => {
     const gameIdOrSlug = ctx.params.gameId;
     if (!gameIdOrSlug) {
       throw ApiError.badRequest("Missing game ID or slug");
     }
-    logger52.debug("Starting session", { userId: ctx.user.id, gameIdOrSlug });
+    logger54.debug("Starting session", { userId: ctx.user.id, gameIdOrSlug });
     return ctx.services.session.start(gameIdOrSlug, ctx.user.id);
   });
   end = requireAuth(async (ctx) => {
@@ -88219,7 +88345,7 @@ var init_session_controller = __esm(() => {
     if (!sessionId) {
       throw ApiError.badRequest("Missing session ID");
     }
-    logger52.debug("Ending session", { userId: ctx.user.id, gameIdOrSlug, sessionId });
+    logger54.debug("Ending session", { userId: ctx.user.id, gameIdOrSlug, sessionId });
     return ctx.services.session.end(gameIdOrSlug, sessionId, ctx.user.id);
   });
   mintToken = requireAuth(async (ctx) => {
@@ -88227,7 +88353,7 @@ var init_session_controller = __esm(() => {
     if (!gameIdOrSlug) {
       throw ApiError.badRequest("Missing game ID or slug");
     }
-    logger52.debug("Minting token", { userId: ctx.user.id, gameIdOrSlug });
+    logger54.debug("Minting token", { userId: ctx.user.id, gameIdOrSlug });
     return ctx.services.session.mintToken(gameIdOrSlug, ctx.user.id);
   });
   sessions2 = {
@@ -88238,13 +88364,13 @@ var init_session_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/shop.controller.ts
-var logger53, getShopView, shop;
+var logger55, getShopView, shop;
 var init_shop_controller = __esm(() => {
   init_src2();
   init_utils11();
-  logger53 = log.scope("ShopController");
+  logger55 = log.scope("ShopController");
   getShopView = requireAuth(async (ctx) => {
-    logger53.debug("Getting shop view", { userId: ctx.user.id });
+    logger55.debug("Getting shop view", { userId: ctx.user.id });
     return ctx.services.shop.getShopView(ctx.user);
   });
   shop = {
@@ -88253,7 +88379,7 @@ var init_shop_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/shop-listing.controller.ts
-var logger54, list7, getById4, create5, update5, remove5, listByGame2, getByGameItem, createForGameItem, updateForGameItem, deleteForGameItem, shopListings2;
+var logger56, list7, getById4, create5, update5, remove5, listByGame2, getByGameItem, createForGameItem, updateForGameItem, deleteForGameItem, shopListings2;
 var init_shop_listing_controller = __esm(() => {
   init_esm();
   init_schemas_index();
@@ -88261,9 +88387,9 @@ var init_shop_listing_controller = __esm(() => {
   init_src4();
   init_errors();
   init_utils11();
-  logger54 = log.scope("ShopListingController");
+  logger56 = log.scope("ShopListingController");
   list7 = requireAdmin(async (ctx) => {
-    logger54.debug("Listing shop listings", { userId: ctx.user.id });
+    logger56.debug("Listing shop listings", { userId: ctx.user.id });
     return ctx.services.shopListing.list();
   });
   getById4 = requireAdmin(async (ctx) => {
@@ -88274,7 +88400,7 @@ var init_shop_listing_controller = __esm(() => {
     if (!isValidUUID(listingId)) {
       throw ApiError.unprocessableEntity("listingId must be a valid UUID format");
     }
-    logger54.debug("Getting listing", { userId: ctx.user.id, listingId });
+    logger56.debug("Getting listing", { userId: ctx.user.id, listingId });
     return ctx.services.shopListing.getById(listingId);
   });
   create5 = requireAdmin(async (ctx) => {
@@ -88285,12 +88411,12 @@ var init_shop_listing_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger54.warn("Create shop listing validation failed", { details });
+        logger56.warn("Create shop listing validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger54.debug("Creating listing", {
+    logger56.debug("Creating listing", {
       userId: ctx.user.id,
       itemId: body2.itemId,
       currencyId: body2.currencyId,
@@ -88313,12 +88439,12 @@ var init_shop_listing_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger54.warn("Update shop listing validation failed", { details });
+        logger56.warn("Update shop listing validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger54.debug("Updating listing", {
+    logger56.debug("Updating listing", {
       userId: ctx.user.id,
       listingId,
       price: body2.price,
@@ -88335,7 +88461,7 @@ var init_shop_listing_controller = __esm(() => {
     if (!isValidUUID(listingId)) {
       throw ApiError.unprocessableEntity("listingId must be a valid UUID format");
     }
-    logger54.debug("Deleting listing", { userId: ctx.user.id, listingId });
+    logger56.debug("Deleting listing", { userId: ctx.user.id, listingId });
     await ctx.services.shopListing.delete(listingId);
   });
   listByGame2 = requireAuth(async (ctx) => {
@@ -88346,7 +88472,7 @@ var init_shop_listing_controller = __esm(() => {
     if (!isValidUUID(gameId)) {
       throw ApiError.unprocessableEntity("gameId must be a valid UUID format");
     }
-    logger54.debug("Listing game listings", { userId: ctx.user.id, gameId });
+    logger56.debug("Listing game listings", { userId: ctx.user.id, gameId });
     return ctx.services.shopListing.listByGame(gameId, ctx.user);
   });
   getByGameItem = requireAuth(async (ctx) => {
@@ -88361,7 +88487,7 @@ var init_shop_listing_controller = __esm(() => {
     if (!isValidUUID(itemId)) {
       throw ApiError.unprocessableEntity("itemId must be a valid UUID format");
     }
-    logger54.debug("Getting game item listing", { userId: ctx.user.id, gameId, itemId });
+    logger56.debug("Getting game item listing", { userId: ctx.user.id, gameId, itemId });
     return ctx.services.shopListing.getByGameItem(gameId, itemId, ctx.user);
   });
   createForGameItem = requireAuth(async (ctx) => {
@@ -88383,12 +88509,12 @@ var init_shop_listing_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger54.warn("Create game item listing validation failed", { details });
+        logger56.warn("Create game item listing validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger54.debug("Creating game item listing", {
+    logger56.debug("Creating game item listing", {
       userId: ctx.user.id,
       gameId,
       itemId,
@@ -88416,12 +88542,12 @@ var init_shop_listing_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger54.warn("Update game item listing validation failed", { details });
+        logger56.warn("Update game item listing validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger54.debug("Updating game item listing", {
+    logger56.debug("Updating game item listing", {
       userId: ctx.user.id,
       gameId,
       itemId,
@@ -88443,7 +88569,7 @@ var init_shop_listing_controller = __esm(() => {
     if (!isValidUUID(itemId)) {
       throw ApiError.unprocessableEntity("itemId must be a valid UUID format");
     }
-    logger54.debug("Deleting game item listing", {
+    logger56.debug("Deleting game item listing", {
       userId: ctx.user.id,
       gameId,
       itemId
@@ -88470,21 +88596,21 @@ async function getBySlug2(ctx) {
   if (!slug2) {
     throw ApiError.badRequest("Template slug is required");
   }
-  logger55.debug("Getting sprite by slug", { slug: slug2 });
+  logger57.debug("Getting sprite by slug", { slug: slug2 });
   return ctx.services.sprite.getBySlug(slug2);
 }
-var logger55, sprites;
+var logger57, sprites;
 var init_sprite_controller = __esm(() => {
   init_src2();
   init_errors();
-  logger55 = log.scope("SpriteController");
+  logger57 = log.scope("SpriteController");
   sprites = {
     getBySlug: getBySlug2
   };
 });
 
 // ../api-core/src/controllers/timeback.controller.ts
-var logger56, getTodayXp, getTotalXp, updateTodayXp, getXpHistory, populateStudent, getUser, getUserById, setupIntegration, getIntegrations, verifyIntegration, getConfig2, deleteIntegrations, endActivity, timeback2;
+var logger58, getTodayXp, getTotalXp, updateTodayXp, getXpHistory, populateStudent, getUser, getUserById, setupIntegration, getIntegrations, verifyIntegration, getConfig2, deleteIntegrations, endActivity, timeback2;
 var init_timeback_controller = __esm(() => {
   init_esm();
   init_schemas_index();
@@ -88492,15 +88618,15 @@ var init_timeback_controller = __esm(() => {
   init_src4();
   init_errors();
   init_utils11();
-  logger56 = log.scope("TimebackController");
+  logger58 = log.scope("TimebackController");
   getTodayXp = requireAuth(async (ctx) => {
     const date4 = ctx.url.searchParams.get("date") || undefined;
     const tz = ctx.url.searchParams.get("tz") || undefined;
-    logger56.debug("Getting today XP", { userId: ctx.user.id, date: date4, tz });
+    logger58.debug("Getting today XP", { userId: ctx.user.id, date: date4, tz });
     return ctx.services.timeback.getTodayXp(ctx.user.id, date4, tz);
   });
   getTotalXp = requireAuth(async (ctx) => {
-    logger56.debug("Getting total XP", { userId: ctx.user.id });
+    logger58.debug("Getting total XP", { userId: ctx.user.id });
     return ctx.services.timeback.getTotalXp(ctx.user.id);
   });
   updateTodayXp = requireAuth(async (ctx) => {
@@ -88511,18 +88637,18 @@ var init_timeback_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger56.warn("Update today XP validation failed", { details });
+        logger58.warn("Update today XP validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger56.debug("Updating today XP", { userId: ctx.user.id, xp: body2.xp });
+    logger58.debug("Updating today XP", { userId: ctx.user.id, xp: body2.xp });
     return ctx.services.timeback.updateTodayXp(ctx.user.id, body2);
   });
   getXpHistory = requireAuth(async (ctx) => {
     const startDate = ctx.url.searchParams.get("startDate") || undefined;
     const endDate = ctx.url.searchParams.get("endDate") || undefined;
-    logger56.debug("Getting XP history", { userId: ctx.user.id, startDate, endDate });
+    logger58.debug("Getting XP history", { userId: ctx.user.id, startDate, endDate });
     return ctx.services.timeback.getXpHistory(ctx.user.id, startDate, endDate);
   });
   populateStudent = requireAuth(async (ctx) => {
@@ -88533,18 +88659,18 @@ var init_timeback_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger56.warn("Populate student validation failed", { details });
+        logger58.warn("Populate student validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
     }
-    logger56.debug("Populating student", {
+    logger58.debug("Populating student", {
       userId: ctx.user.id,
       hasProvidedNames: !!providedNames
     });
     return ctx.services.timeback.populateStudent(ctx.user, providedNames);
   });
   getUser = requireAuth(async (ctx) => {
-    logger56.debug("Getting user", { userId: ctx.user.id, gameId: ctx.gameId });
+    logger58.debug("Getting user", { userId: ctx.user.id, gameId: ctx.gameId });
     return ctx.services.timeback.getUserData(ctx.user.id, ctx.gameId);
   });
   getUserById = requireAuth(async (ctx) => {
@@ -88552,7 +88678,7 @@ var init_timeback_controller = __esm(() => {
     if (!timebackId) {
       throw ApiError.badRequest("Missing timebackId parameter");
     }
-    logger56.debug("Getting user by ID", { requesterId: ctx.user.id, timebackId });
+    logger58.debug("Getting user by ID", { requesterId: ctx.user.id, timebackId });
     return ctx.services.timeback.getUserDataByTimebackId(timebackId);
   });
   setupIntegration = requireDeveloper(async (ctx) => {
@@ -88563,12 +88689,12 @@ var init_timeback_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger56.warn("Setup integration validation failed", { details });
+        logger58.warn("Setup integration validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger56.debug("Setting up integration", {
+    logger58.debug("Setting up integration", {
       userId: ctx.user.id,
       gameId: body2.gameId
     });
@@ -88580,7 +88706,7 @@ var init_timeback_controller = __esm(() => {
       throw ApiError.badRequest("Missing gameId");
     if (!isValidUUID(gameId))
       throw ApiError.unprocessableEntity("Invalid gameId format");
-    logger56.debug("Getting integrations", { userId: ctx.user.id, gameId });
+    logger58.debug("Getting integrations", { userId: ctx.user.id, gameId });
     return ctx.services.timeback.getIntegrations(gameId, ctx.user);
   });
   verifyIntegration = requireDeveloper(async (ctx) => {
@@ -88589,7 +88715,7 @@ var init_timeback_controller = __esm(() => {
       throw ApiError.badRequest("Missing gameId");
     if (!isValidUUID(gameId))
       throw ApiError.unprocessableEntity("Invalid gameId format");
-    logger56.debug("Verifying integration", { userId: ctx.user.id, gameId });
+    logger58.debug("Verifying integration", { userId: ctx.user.id, gameId });
     return ctx.services.timeback.verifyIntegration(gameId, ctx.user);
   });
   getConfig2 = requireDeveloper(async (ctx) => {
@@ -88598,7 +88724,7 @@ var init_timeback_controller = __esm(() => {
       throw ApiError.badRequest("Missing gameId");
     if (!isValidUUID(gameId))
       throw ApiError.unprocessableEntity("Invalid gameId format");
-    logger56.debug("Getting config", { userId: ctx.user.id, gameId });
+    logger58.debug("Getting config", { userId: ctx.user.id, gameId });
     return ctx.services.timeback.getConfig(gameId, ctx.user);
   });
   deleteIntegrations = requireDeveloper(async (ctx) => {
@@ -88607,7 +88733,7 @@ var init_timeback_controller = __esm(() => {
       throw ApiError.badRequest("Missing gameId");
     if (!isValidUUID(gameId))
       throw ApiError.unprocessableEntity("Invalid gameId format");
-    logger56.debug("Deleting integrations", { userId: ctx.user.id, gameId });
+    logger58.debug("Deleting integrations", { userId: ctx.user.id, gameId });
     await ctx.services.timeback.deleteIntegrations(gameId, ctx.user);
   });
   endActivity = requireDeveloper(async (ctx) => {
@@ -88618,13 +88744,13 @@ var init_timeback_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger56.warn("End activity validation failed", { details });
+        logger58.warn("End activity validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
     const { gameId, studentId, activityData, scoreData, timingData, xpEarned, masteredUnits } = body2;
-    logger56.debug("Ending activity", { userId: ctx.user.id, gameId });
+    logger58.debug("Ending activity", { userId: ctx.user.id, gameId });
     return ctx.services.timeback.endActivity(gameId, studentId, activityData, scoreData, timingData, xpEarned, masteredUnits, ctx.user);
   });
   timeback2 = {
@@ -88645,14 +88771,14 @@ var init_timeback_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/upload.controller.ts
-var logger57, initiate;
+var logger59, initiate;
 var init_upload_controller = __esm(() => {
   init_esm();
   init_schemas_index();
   init_src2();
   init_errors();
   init_utils11();
-  logger57 = log.scope("UploadController");
+  logger59 = log.scope("UploadController");
   initiate = requireDeveloper(async (ctx) => {
     let body2;
     try {
@@ -88661,24 +88787,24 @@ var init_upload_controller = __esm(() => {
     } catch (error2) {
       if (error2 instanceof exports_external.ZodError) {
         const details = formatZodError(error2);
-        logger57.warn("Initiate upload validation failed", { details });
+        logger59.warn("Initiate upload validation failed", { details });
         throw ApiError.unprocessableEntity("Validation failed", details);
       }
       throw ApiError.badRequest("Invalid JSON body");
     }
-    logger57.debug("Initiating upload", { userId: ctx.user.id, gameId: body2.gameId });
+    logger59.debug("Initiating upload", { userId: ctx.user.id, gameId: body2.gameId });
     return ctx.services.upload.initiate(body2, ctx.user);
   });
 });
 
 // ../api-core/src/controllers/user.controller.ts
-var logger58, getMe, users2;
+var logger60, getMe, users2;
 var init_user_controller = __esm(() => {
   init_src2();
   init_utils11();
-  logger58 = log.scope("UserController");
+  logger60 = log.scope("UserController");
   getMe = requireAuth(async (ctx) => {
-    logger58.debug("Getting current user", { userId: ctx.user.id, gameId: ctx.gameId });
+    logger60.debug("Getting current user", { userId: ctx.user.id, gameId: ctx.gameId });
     return ctx.services.user.getMe(ctx.user, ctx.gameId);
   });
   users2 = {
@@ -88687,13 +88813,13 @@ var init_user_controller = __esm(() => {
 });
 
 // ../api-core/src/controllers/verify.controller.ts
-var logger59;
+var logger61;
 var init_verify_controller = __esm(() => {
   init_schemas_index();
   init_src2();
   init_errors();
   init_utils11();
-  logger59 = log.scope("VerifyController");
+  logger61 = log.scope("VerifyController");
 });
 
 // ../api-core/src/controllers/index.ts
@@ -88712,6 +88838,7 @@ var init_controllers = __esm(() => {
   init_item_controller();
   init_leaderboard_controller();
   init_level_controller();
+  init_logs_controller();
   init_lti_controller();
   init_map_controller();
   init_notification_controller();
@@ -89228,6 +89355,16 @@ var init_items = __esm(() => {
   gameItemsRouter.delete("/:gameId/items/:itemId", handle2(items2.deleteForGame, { status: 204 }));
 });
 
+// src/routes/platform/games/logs.ts
+var gameLogsRouter;
+var init_logs = __esm(() => {
+  init_dist3();
+  init_controllers();
+  init_api();
+  gameLogsRouter = new Hono2;
+  gameLogsRouter.post("/:slug/logs/token", handle2(logs.generateToken));
+});
+
 // src/routes/platform/games/scores.ts
 var gameScoresRouter;
 var init_scores = __esm(() => {
@@ -89543,6 +89680,7 @@ var init_games2 = __esm(() => {
   init_deploy();
   init_domains3();
   init_items();
+  init_logs();
   init_scores();
   init_secrets();
   init_seed2();
@@ -89558,6 +89696,7 @@ var init_games2 = __esm(() => {
   gamesRouter.route("/", gameDeployRouter);
   gamesRouter.route("/", gameDomainsRouter);
   gamesRouter.route("/", gameItemsRouter);
+  gamesRouter.route("/", gameLogsRouter);
   gamesRouter.route("/", gameShopRouter);
   gamesRouter.route("/", gameScoresRouter);
   gamesRouter.route("/", gameSecretsRouter);