@playcademy/sdk 0.15.1-beta.2 → 0.15.1-beta.3

package/dist/index.js

@@ -580,7 +580,7 @@ async function login(baseUrl, email, password) {
 async function generateSecureRandomString(length) {
   const charset = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~";
   const randomValues = new Uint8Array(length);
-  globalThis.crypto.getRandomValues(randomValues);
+  crypto.getRandomValues(randomValues);
   return [...randomValues].map((byte) => charset[byte % charset.length]).join("");
 }
 
@@ -2391,7 +2391,7 @@ async function request({
   return rawText && rawText.length > 0 ? rawText : undefined;
 }
 // src/version.ts
-var SDK_VERSION = "0.15.1-beta.2";
+var SDK_VERSION = "0.15.1-beta.3";
 
 // src/clients/base.ts
 class PlaycademyBaseClient {

package/dist/internal.d.ts

@@ -5,8 +5,8 @@ import * as _playcademy_types from '@playcademy/types';
 import { GameManifest, LocalDayContext } from '@playcademy/types';
 export { AuthenticatedUser, DeveloperStatusEnumType, DeveloperStatusResponse, DeveloperStatusValue, GameCourseMetrics, GameLeaderboardEntry, GameManifest, GameMetricComparisonKind, GameMetricComparisonMetric, GameMetricComparisonRow, GameMetricComparisonRowStatus, GameMetricsProxyResponse, GameMetricsResponse, GameMetricsUnsupportedReason, GamePlatform, GameRunMetrics, GameRunMetricsComparison, GameRunMetricsComparisonStatus, GameRunMetricsComparisonSummary, GameTimebackIntegration, GameType, GameUser, LeaderboardEntry, LeaderboardOptions, LeaderboardTimeframe, LocalDayContext, LocalDaySource, ManifestV1, ManifestV2, ManifestVersions, PopulateStudentResponse, UserEnrollment, UserInfo, UserOrganization, UserRank, UserRankResponse, UserRoleEnumType, UserScore, UserTimebackData } from '@playcademy/types';
 import * as drizzle_orm_pg_core from 'drizzle-orm/pg-core';
-import { z } from 'zod';
 import { DomainValidationRecords } from '@playcademy/types/game';
+import { z } from 'zod';
 import { TimebackUserRole, UserEnrollment, UserOrganization, UserInfo } from '@playcademy/types/user';
 import { AUTH_PROVIDER_IDS } from '@playcademy/constants';
 
@@ -1336,6 +1336,277 @@ declare const gameMembers: drizzle_orm_pg_core.PgTableWithColumns<{
     };
     dialect: 'pg';
 }>;
+/**
+ * Standalone login accounts for a game's developer dashboard.
+ *
+ * These are NOT platform accounts — dashboard users authenticate directly
+ * against their game's dashboard worker with credentials stored here. The
+ * platform owns this table entirely; game devs manage rows only through the
+ * dashboard endpoints (gated by game membership). `platformUserId` is
+ * reserved for a future "sign in with Playcademy" grant path.
+ */
+declare const gameDashboardUsers: drizzle_orm_pg_core.PgTableWithColumns<{
+    name: "game_dashboard_users";
+    schema: undefined;
+    columns: {
+        id: drizzle_orm_pg_core.PgColumn<{
+            name: "id";
+            tableName: "game_dashboard_users";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: true;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        gameId: drizzle_orm_pg_core.PgColumn<{
+            name: "game_id";
+            tableName: "game_dashboard_users";
+            dataType: "string";
+            columnType: "PgUUID";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        email: drizzle_orm_pg_core.PgColumn<{
+            name: "email";
+            tableName: "game_dashboard_users";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: true;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        displayName: drizzle_orm_pg_core.PgColumn<{
+            name: "display_name";
+            tableName: "game_dashboard_users";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        role: drizzle_orm_pg_core.PgColumn<{
+            name: "role";
+            tableName: "game_dashboard_users";
+            dataType: "string";
+            columnType: "PgEnumColumn";
+            data: "admin" | "viewer";
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: ["admin", "viewer"];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        passwordHash: drizzle_orm_pg_core.PgColumn<{
+            name: "password_hash";
+            tableName: "game_dashboard_users";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        inviteTokenHash: drizzle_orm_pg_core.PgColumn<{
+            name: "invite_token_hash";
+            tableName: "game_dashboard_users";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        inviteExpiresAt: drizzle_orm_pg_core.PgColumn<{
+            name: "invite_expires_at";
+            tableName: "game_dashboard_users";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        resetTokenHash: drizzle_orm_pg_core.PgColumn<{
+            name: "reset_token_hash";
+            tableName: "game_dashboard_users";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        resetExpiresAt: drizzle_orm_pg_core.PgColumn<{
+            name: "reset_expires_at";
+            tableName: "game_dashboard_users";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        failedLoginAttempts: drizzle_orm_pg_core.PgColumn<{
+            name: "failed_login_attempts";
+            tableName: "game_dashboard_users";
+            dataType: "number";
+            columnType: "PgInteger";
+            data: number;
+            driverParam: string | number;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        lastFailedLoginAt: drizzle_orm_pg_core.PgColumn<{
+            name: "last_failed_login_at";
+            tableName: "game_dashboard_users";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        platformUserId: drizzle_orm_pg_core.PgColumn<{
+            name: "platform_user_id";
+            tableName: "game_dashboard_users";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        createdAt: drizzle_orm_pg_core.PgColumn<{
+            name: "created_at";
+            tableName: "game_dashboard_users";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+        updatedAt: drizzle_orm_pg_core.PgColumn<{
+            name: "updated_at";
+            tableName: "game_dashboard_users";
+            dataType: "date";
+            columnType: "PgTimestamp";
+            data: Date;
+            driverParam: string;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
+    };
+    dialect: 'pg';
+}>;
 /**
  * Custom hostnames table
  *
@@ -1621,6 +1892,19 @@ declare const UpdateGameMemberRoleSchema: z.ZodObject<{
 }, {
     role: "collaborator" | "owner";
 }>;
+declare const AddGameDashboardUserSchema: z.ZodObject<{
+    email: z.ZodString;
+    displayName: z.ZodOptional<z.ZodString>;
+    role: z.ZodDefault<z.ZodOptional<z.ZodEnum<["admin", "viewer"]>>>;
+}, "strict", z.ZodTypeAny, {
+    email: string;
+    displayName?: string | undefined;
+    role: "admin" | "viewer";
+}, {
+    email: string;
+    displayName?: string | undefined;
+    role?: "admin" | "viewer" | undefined;
+}>;
 
 type GameRow = typeof games.$inferSelect;
 type BaseGame = Omit<GameRow, 'gameType' | 'deploymentUrl' | 'externalUrl'>;
@@ -1650,12 +1934,25 @@ interface GameMemberSearchResult {
     email: string;
     image: string | null;
 }
+type GameDashboardUserRow = typeof gameDashboardUsers.$inferSelect;
+/** Dashboard user shape safe to return from the API (no credential material) */
+type GameDashboardUserSummary = Pick<GameDashboardUserRow, 'id' | 'gameId' | 'email' | 'displayName' | 'role' | 'platformUserId' | 'createdAt' | 'updatedAt'> & {
+    /** Whether the invite is still pending (password not yet set) */
+    pending: boolean;
+};
+/** A freshly-minted credential link: an invite for pending users, a password reset for active ones */
+interface GameDashboardCredentialLink {
+    user: GameDashboardUserSummary;
+    token: string;
+    kind: 'invite' | 'reset';
+}
 type GameCustomHostnameRow = typeof gameCustomHostnames.$inferSelect;
 
 type UpsertGameMetadataInput = z.infer<typeof UpsertGameMetadataSchema>;
 type PatchGameMetadataInput = z.infer<typeof PatchGameMetadataSchema>;
 type AddGameMemberInput = z.infer<typeof AddGameMemberSchema>;
 type UpdateGameMemberRoleInput = z.infer<typeof UpdateGameMemberRoleSchema>;
+type AddGameDashboardUserInput = z.input<typeof AddGameDashboardUserSchema>;
 
 type UserRow = typeof users.$inferSelect;
 
@@ -2730,6 +3027,34 @@ interface IntegrationsConfig {
     /** Queues (optional) */
     queues?: Record<string, QueueConfig | boolean>;
 }
+/**
+ * Developer dashboard configuration.
+ *
+ * The dashboard is a separate app in the game's repo, deployed as a sibling
+ * worker with `playcademy dashboard deploy`. Auth and session plumbing are
+ * platform-managed; the dashboard app itself is just a static SPA build.
+ */
+interface DashboardConfig {
+    /** Path to the dashboard app, relative to the config file (default: './dashboard') */
+    directory?: string;
+    /** Build command run inside the dashboard directory (defaults to the workspace package manager's build script) */
+    buildCommand?: string[];
+    /** Path to the dashboard build output, relative to the dashboard directory (default: 'dist') */
+    buildPath?: string;
+    /** Colors for the platform-managed login/invite page (hex); unset uses the built-in palette */
+    theme?: DashboardThemeConfig;
+}
+/**
+ * Login-page theming. Two seeds — a primary (button, focus, background
+ * wash) and a secondary accent — the platform derives the full palette
+ * from. Either may be omitted to keep that half of the built-in palette.
+ */
+interface DashboardThemeConfig {
+    /** Primary color as a hex string, e.g. '#e0245e' */
+    primary?: string;
+    /** Secondary/accent color as a hex string, e.g. '#ffd166' */
+    secondary?: string;
+}
 /**
  * Unified Playcademy configuration
  * Used for playcademy.config.{js,json}
@@ -2751,6 +3076,8 @@ interface PlaycademyConfig {
     externalUrl?: string;
     /** Game platform */
     platform?: 'web' | 'godot';
+    /** Developer dashboard app (optional) — `true` uses defaults */
+    dashboard?: DashboardConfig | boolean;
     /** Integrations (database, custom routes, external services) */
     integrations?: IntegrationsConfig;
 }
@@ -2824,10 +3151,10 @@ interface PlaycademyServerClientState {
     courseId?: string;
 }
 /**
- * Resource bindings for backend deployment
+ * Resource bindings for worker deployment
  * Provider-agnostic abstraction for cloud resources
  */
-interface BackendResourceBindings {
+interface WorkerResourceBindings {
     /** SQL database — `true` to request, server names it (maps to D1 on Cloudflare) */
     database?: boolean | string[];
     /** Key-value store — `true` to request, server names it (maps to KV on Cloudflare) */
@@ -2838,15 +3165,15 @@ interface BackendResourceBindings {
     queues?: Record<string, QueueConfig | boolean>;
 }
 /**
- * Backend deployment bundle for uploading to Playcademy platform
+ * Worker deployment bundle for uploading to Playcademy platform
  */
-interface BackendDeploymentBundle {
+interface WorkerDeploymentBundle {
     /** Bundled JavaScript code ready for deployment */
     code: string;
     /** Game configuration */
     config: PlaycademyConfig;
     /** Optional resource bindings (database, storage, etc.) */
-    bindings?: BackendResourceBindings;
+    bindings?: WorkerResourceBindings;
     /** Optional schema information for database setup */
     schema?: SchemaInfo;
     /** Cloudflare Worker compatibility date (YYYY-MM-DD) */
@@ -2996,7 +3323,7 @@ declare class PlaycademyInternalClient extends PlaycademyBaseClient {
             deploy: (slug: string, options: {
                 metadata?: UpsertGameMetadataInput;
                 file?: File | Blob | null;
-                backend?: BackendDeploymentBundle;
+                worker?: WorkerDeploymentBundle;
                 hooks?: DevUploadHooks;
             }) => Promise<Game>;
             seed: (slug: string, code: string, environment?: 'local' | 'staging' | 'production', secrets?: Record<string, string>) => Promise<_playcademy_types.SeedResponse>;
@@ -3007,6 +3334,26 @@ declare class PlaycademyInternalClient extends PlaycademyBaseClient {
                 list: (slug: string) => Promise<string[]>;
                 delete: (slug: string, key: string) => Promise<void>;
             };
+            dashboard: {
+                deploy: (slug: string, options: {
+                    file: File | Blob;
+                    worker: WorkerDeploymentBundle;
+                    hooks?: DevUploadHooks;
+                }) => Promise<{
+                    url: string;
+                    deploymentId: string;
+                }>;
+                remove: (slug: string) => Promise<void>;
+                users: {
+                    list: (slug: string) => Promise<GameDashboardUserSummary[]>;
+                    add: (slug: string, input: AddGameDashboardUserInput) => Promise<GameDashboardCredentialLink>;
+                    recover: (slug: string, userId: string) => Promise<GameDashboardCredentialLink>;
+                    remove: (slug: string, userId: string) => Promise<void>;
+                };
+                sessions: {
+                    revoke: (slug: string) => Promise<void>;
+                };
+            };
             database: {
                 reset: (slug: string, schema?: {
                     sql: string;

package/dist/internal.js

@@ -580,7 +580,7 @@ async function login(baseUrl, email, password) {
 async function generateSecureRandomString(length) {
   const charset = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~";
   const randomValues = new Uint8Array(length);
-  globalThis.crypto.getRandomValues(randomValues);
+  crypto.getRandomValues(randomValues);
   return [...randomValues].map((byte) => charset[byte % charset.length]).join("");
 }
 
@@ -2262,7 +2262,18 @@ class DeployPipeline {
     }
     return uploadToken;
   }
-  async submit(args) {
+  async submitGame(args) {
+    await this.submitAndPoll(args);
+    return this.fetchGameWithRetry(args.slug);
+  }
+  async submitDashboard(args) {
+    const result = await this.submitAndPoll({ ...args, target: "dashboard" });
+    if (!result.deploymentId) {
+      throw new Error("Deployment completed but no deployment ID was recorded");
+    }
+    return { url: result.url, deploymentId: result.deploymentId };
+  }
+  async submitAndPoll(args) {
     const { requestBody } = await this.buildRequestBody(args);
     const { slug, hooks } = args;
     const job = await this.client["request"](`/games/${slug}/deploy`, "POST", { body: requestBody });
@@ -2270,44 +2281,50 @@ class DeployPipeline {
     if (!completedJob.result?.url) {
       throw new Error("Deployment completed but no deployment URL was recorded");
     }
-    return this.fetchGameWithRetry(slug);
+    return {
+      url: completedJob.result.url,
+      deploymentId: completedJob.result.deploymentId ?? undefined
+    };
   }
   async buildRequestBody(args) {
     const game2 = await this.resolveGame(args.slug, args.game);
     const requestBody = {};
+    if (args.target) {
+      requestBody.target = args.target;
+    }
     if (args.uploadToken) {
       requestBody.uploadToken = args.uploadToken;
     }
     if (args.metadata) {
       requestBody.metadata = args.metadata;
     }
-    if (!args.backend) {
+    if (!args.worker) {
       return { game: game2, requestBody };
     }
-    const backendFields = {
-      config: args.backend.config,
-      ...args.backend.bindings ? { bindings: args.backend.bindings } : {},
-      ...args.backend.schema ? { schema: args.backend.schema } : {},
-      ...args.backend.compatibilityDate ? { compatibilityDate: args.backend.compatibilityDate } : {},
-      ...args.backend.compatibilityFlags?.length ? { compatibilityFlags: args.backend.compatibilityFlags } : {}
+    const workerFields = {
+      config: args.worker.config,
+      ...args.worker.bindings ? { bindings: args.worker.bindings } : {},
+      ...args.worker.schema ? { schema: args.worker.schema } : {},
+      ...args.worker.compatibilityDate ? { compatibilityDate: args.worker.compatibilityDate } : {},
+      ...args.worker.compatibilityFlags?.length ? { compatibilityFlags: args.worker.compatibilityFlags } : {}
     };
     const inlineBody = {
       ...requestBody,
-      ...backendFields,
-      code: args.backend.code
+      ...workerFields,
+      code: args.worker.code
     };
     if (this.serializedSize(inlineBody) <= DeployPipeline.MAX_INLINE_REQUEST_BYTES) {
       return { game: game2, requestBody: inlineBody };
     }
     const skeletonBody = {
       ...requestBody,
-      ...backendFields,
+      ...workerFields,
       codeUploadToken: "________placeholder________"
     };
     if (this.serializedSize(skeletonBody) > DeployPipeline.MAX_INLINE_REQUEST_BYTES) {
-      throw new Error("Deploy request is too large even after uploading backend code");
+      throw new Error("Deploy request is too large even after uploading worker code");
     }
-    skeletonBody.codeUploadToken = await this.uploadCode(game2.id, args.backend.code);
+    skeletonBody.codeUploadToken = await this.uploadCode(game2.id, args.worker.code);
     return { game: game2, requestBody: skeletonBody };
   }
   serializedSize(body) {
@@ -2325,7 +2342,7 @@ class DeployPipeline {
     });
     if (!res.ok) {
       const detail = await parseS3Error(res);
-      throw new Error(`Backend code upload failed: ${detail}`);
+      throw new Error(`Worker code upload failed: ${detail}`);
     }
     return uploadToken;
   }
@@ -2431,25 +2448,25 @@ function createDevNamespace(client) {
     games: {
       list: () => client["request"]("/games/accessible", "GET"),
       deploy: async (slug, options) => {
-        const { metadata, file, backend, hooks } = options;
+        const { metadata, file, worker, hooks } = options;
         hooks?.onEvent?.({ type: "init" });
         let game2;
         if (metadata) {
           game2 = await client["request"](`/games/${slug}`, "PUT", {
             body: metadata
           });
-          if (metadata.gameType === "external" && !file && !backend) {
+          if (metadata.gameType === "external" && !file && !worker) {
             return game2;
           }
         }
         const uploadToken = file ? await deploy.uploadFile(file, game2?.id || slug, hooks) : undefined;
-        if (uploadToken || backend) {
-          return deploy.submit({ slug, game: game2, uploadToken, metadata, backend, hooks });
+        if (uploadToken || worker) {
+          return deploy.submitGame({ slug, game: game2, uploadToken, metadata, worker, hooks });
         }
         if (game2) {
           return game2;
         }
-        throw new Error("No deployment actions specified (need metadata, file, or backend)");
+        throw new Error("No deployment actions specified (need metadata, file, or worker)");
       },
       seed: async (slug, code, environment, secrets) => client["request"](`/games/${slug}/seed`, "POST", {
         body: { code, environment, secrets }
@@ -2469,6 +2486,34 @@ function createDevNamespace(client) {
           await client["request"](`/games/${slug}/secrets/${key}`, "DELETE");
         }
       },
+      dashboard: {
+        deploy: async (slug, options) => {
+          const { file, worker, hooks } = options;
+          hooks?.onEvent?.({ type: "init" });
+          const game2 = await client["request"](`/games/${slug}`, "GET");
+          const uploadToken = await deploy.uploadFile(file, game2.id, hooks);
+          return deploy.submitDashboard({ slug, game: game2, uploadToken, worker, hooks });
+        },
+        remove: async (slug) => {
+          await client["request"](`/games/${slug}/dashboard`, "DELETE");
+        },
+        users: {
+          list: async (slug) => {
+            const result = await client["request"](`/games/${slug}/dashboard/users`, "GET");
+            return result.users;
+          },
+          add: async (slug, input) => client["request"](`/games/${slug}/dashboard/users`, "POST", { body: input }),
+          recover: async (slug, userId) => client["request"](`/games/${slug}/dashboard/users/${userId}/recovery`, "POST"),
+          remove: async (slug, userId) => {
+            await client["request"](`/games/${slug}/dashboard/users/${userId}`, "DELETE");
+          }
+        },
+        sessions: {
+          revoke: async (slug) => {
+            await client["request"](`/games/${slug}/dashboard/sessions/revoke`, "POST");
+          }
+        }
+      },
       database: {
         reset: async (slug, schema) => client["request"](`/games/${slug}/database/reset`, "POST", {
           body: { schema }
@@ -3094,7 +3139,7 @@ async function request({
   return rawText && rawText.length > 0 ? rawText : undefined;
 }
 // src/version.ts
-var SDK_VERSION = "0.15.1-beta.2";
+var SDK_VERSION = "0.15.1-beta.3";
 
 // src/clients/base.ts
 class PlaycademyBaseClient {

package/dist/server/edge.d.ts

@@ -113,6 +113,34 @@ interface IntegrationsConfig {
     /** Queues (optional) */
     queues?: Record<string, QueueConfig | boolean>;
 }
+/**
+ * Developer dashboard configuration.
+ *
+ * The dashboard is a separate app in the game's repo, deployed as a sibling
+ * worker with `playcademy dashboard deploy`. Auth and session plumbing are
+ * platform-managed; the dashboard app itself is just a static SPA build.
+ */
+interface DashboardConfig {
+    /** Path to the dashboard app, relative to the config file (default: './dashboard') */
+    directory?: string;
+    /** Build command run inside the dashboard directory (defaults to the workspace package manager's build script) */
+    buildCommand?: string[];
+    /** Path to the dashboard build output, relative to the dashboard directory (default: 'dist') */
+    buildPath?: string;
+    /** Colors for the platform-managed login/invite page (hex); unset uses the built-in palette */
+    theme?: DashboardThemeConfig;
+}
+/**
+ * Login-page theming. Two seeds — a primary (button, focus, background
+ * wash) and a secondary accent — the platform derives the full palette
+ * from. Either may be omitted to keep that half of the built-in palette.
+ */
+interface DashboardThemeConfig {
+    /** Primary color as a hex string, e.g. '#e0245e' */
+    primary?: string;
+    /** Secondary/accent color as a hex string, e.g. '#ffd166' */
+    secondary?: string;
+}
 /**
  * Unified Playcademy configuration
  * Used for playcademy.config.{js,json}
@@ -134,6 +162,8 @@ interface PlaycademyConfig {
     externalUrl?: string;
     /** Game platform */
     platform?: 'web' | 'godot';
+    /** Developer dashboard app (optional) — `true` uses defaults */
+    dashboard?: DashboardConfig | boolean;
     /** Integrations (database, custom routes, external services) */
     integrations?: IntegrationsConfig;
 }
@@ -214,10 +244,10 @@ interface RequestContext {
 }
 
 /**
- * Resource bindings for backend deployment
+ * Resource bindings for worker deployment
  * Provider-agnostic abstraction for cloud resources
  */
-interface BackendResourceBindings {
+interface WorkerResourceBindings {
     /** SQL database — `true` to request, server names it (maps to D1 on Cloudflare) */
     database?: boolean | string[];
     /** Key-value store — `true` to request, server names it (maps to KV on Cloudflare) */
@@ -228,15 +258,15 @@ interface BackendResourceBindings {
     queues?: Record<string, QueueConfig | boolean>;
 }
 /**
- * Backend deployment bundle for uploading to Playcademy platform
+ * Worker deployment bundle for uploading to Playcademy platform
  */
-interface BackendDeploymentBundle {
+interface WorkerDeploymentBundle {
     /** Bundled JavaScript code ready for deployment */
     code: string;
     /** Game configuration */
     config: PlaycademyConfig;
     /** Optional resource bindings (database, storage, etc.) */
-    bindings?: BackendResourceBindings;
+    bindings?: WorkerResourceBindings;
     /** Optional schema information for database setup */
     schema?: SchemaInfo;
     /** Cloudflare Worker compatibility date (YYYY-MM-DD) */
@@ -395,4 +425,4 @@ declare function verifyGameToken(gameToken: string, options?: {
 }): Promise<VerifyGameTokenResponse>;
 
 export { PlaycademyClient, verifyGameToken };
-export type { BackendDeploymentBundle, BackendResourceBindings, IntegrationsConfig, PlaycademyConfig, PlaycademyServerClientConfig, PlaycademyServerClientState, QueueConfig, RequestContext, TimebackBaseConfig, TimebackCourseConfigWithOverrides, TimebackIntegrationConfig };
+export type { IntegrationsConfig, PlaycademyConfig, PlaycademyServerClientConfig, PlaycademyServerClientState, QueueConfig, RequestContext, TimebackBaseConfig, TimebackCourseConfigWithOverrides, TimebackIntegrationConfig, WorkerDeploymentBundle, WorkerResourceBindings };

package/dist/server/edge.js

@@ -234,7 +234,7 @@ function extractApiErrorInfo(error) {
 }
 
 // src/version.ts
-var SDK_VERSION = "0.15.1-beta.2";
+var SDK_VERSION = "0.15.1-beta.3";
 
 // src/server/request.ts
 async function makeApiRequest(opts) {

package/dist/server.d.ts

@@ -113,6 +113,34 @@ interface IntegrationsConfig {
     /** Queues (optional) */
     queues?: Record<string, QueueConfig | boolean>;
 }
+/**
+ * Developer dashboard configuration.
+ *
+ * The dashboard is a separate app in the game's repo, deployed as a sibling
+ * worker with `playcademy dashboard deploy`. Auth and session plumbing are
+ * platform-managed; the dashboard app itself is just a static SPA build.
+ */
+interface DashboardConfig {
+    /** Path to the dashboard app, relative to the config file (default: './dashboard') */
+    directory?: string;
+    /** Build command run inside the dashboard directory (defaults to the workspace package manager's build script) */
+    buildCommand?: string[];
+    /** Path to the dashboard build output, relative to the dashboard directory (default: 'dist') */
+    buildPath?: string;
+    /** Colors for the platform-managed login/invite page (hex); unset uses the built-in palette */
+    theme?: DashboardThemeConfig;
+}
+/**
+ * Login-page theming. Two seeds — a primary (button, focus, background
+ * wash) and a secondary accent — the platform derives the full palette
+ * from. Either may be omitted to keep that half of the built-in palette.
+ */
+interface DashboardThemeConfig {
+    /** Primary color as a hex string, e.g. '#e0245e' */
+    primary?: string;
+    /** Secondary/accent color as a hex string, e.g. '#ffd166' */
+    secondary?: string;
+}
 /**
  * Unified Playcademy configuration
  * Used for playcademy.config.{js,json}
@@ -134,6 +162,8 @@ interface PlaycademyConfig {
     externalUrl?: string;
     /** Game platform */
     platform?: 'web' | 'godot';
+    /** Developer dashboard app (optional) — `true` uses defaults */
+    dashboard?: DashboardConfig | boolean;
     /** Integrations (database, custom routes, external services) */
     integrations?: IntegrationsConfig;
 }
@@ -214,10 +244,10 @@ interface RequestContext {
 }
 
 /**
- * Resource bindings for backend deployment
+ * Resource bindings for worker deployment
  * Provider-agnostic abstraction for cloud resources
  */
-interface BackendResourceBindings {
+interface WorkerResourceBindings {
     /** SQL database — `true` to request, server names it (maps to D1 on Cloudflare) */
     database?: boolean | string[];
     /** Key-value store — `true` to request, server names it (maps to KV on Cloudflare) */
@@ -228,15 +258,15 @@ interface BackendResourceBindings {
     queues?: Record<string, QueueConfig | boolean>;
 }
 /**
- * Backend deployment bundle for uploading to Playcademy platform
+ * Worker deployment bundle for uploading to Playcademy platform
  */
-interface BackendDeploymentBundle {
+interface WorkerDeploymentBundle {
     /** Bundled JavaScript code ready for deployment */
     code: string;
     /** Game configuration */
     config: PlaycademyConfig;
     /** Optional resource bindings (database, storage, etc.) */
-    bindings?: BackendResourceBindings;
+    bindings?: WorkerResourceBindings;
     /** Optional schema information for database setup */
     schema?: SchemaInfo;
     /** Cloudflare Worker compatibility date (YYYY-MM-DD) */
@@ -441,4 +471,4 @@ declare function verifyGameToken(gameToken: string, options?: {
 }): Promise<VerifyGameTokenResponse>;
 
 export { PlaycademyClient, verifyGameToken };
-export type { BackendDeploymentBundle, BackendResourceBindings, IntegrationsConfig, PlaycademyConfig, PlaycademyServerClientConfig, PlaycademyServerClientState, QueueConfig, TimebackBaseConfig, TimebackCourseConfigWithOverrides, TimebackIntegrationConfig };
+export type { DashboardConfig, IntegrationsConfig, PlaycademyConfig, PlaycademyServerClientConfig, PlaycademyServerClientState, QueueConfig, TimebackBaseConfig, TimebackCourseConfigWithOverrides, TimebackIntegrationConfig, WorkerDeploymentBundle, WorkerResourceBindings };

package/dist/server.js

@@ -423,7 +423,7 @@ function extractApiErrorInfo(error) {
 }
 
 // src/version.ts
-var SDK_VERSION = "0.15.1-beta.2";
+var SDK_VERSION = "0.15.1-beta.3";
 
 // src/server/request.ts
 async function makeApiRequest(opts) {

package/dist/types.d.ts

@@ -6,8 +6,8 @@ export { QtiTestQuestionRef, QtiTestQuestionsResponse } from '@playcademy/types/
 import { TimebackUserRole, UserEnrollment, UserOrganization, UserInfo } from '@playcademy/types/user';
 import { AUTH_PROVIDER_IDS } from '@playcademy/constants';
 import * as drizzle_orm_pg_core from 'drizzle-orm/pg-core';
-import { z } from 'zod';
 import { DomainValidationRecords } from '@playcademy/types/game';
+import { z } from 'zod';
 
 /**
  * OAuth 2.0 implementation for the Playcademy SDK
@@ -307,6 +307,34 @@ interface IntegrationsConfig {
     /** Queues (optional) */
     queues?: Record<string, QueueConfig | boolean>;
 }
+/**
+ * Developer dashboard configuration.
+ *
+ * The dashboard is a separate app in the game's repo, deployed as a sibling
+ * worker with `playcademy dashboard deploy`. Auth and session plumbing are
+ * platform-managed; the dashboard app itself is just a static SPA build.
+ */
+interface DashboardConfig {
+    /** Path to the dashboard app, relative to the config file (default: './dashboard') */
+    directory?: string;
+    /** Build command run inside the dashboard directory (defaults to the workspace package manager's build script) */
+    buildCommand?: string[];
+    /** Path to the dashboard build output, relative to the dashboard directory (default: 'dist') */
+    buildPath?: string;
+    /** Colors for the platform-managed login/invite page (hex); unset uses the built-in palette */
+    theme?: DashboardThemeConfig;
+}
+/**
+ * Login-page theming. Two seeds — a primary (button, focus, background
+ * wash) and a secondary accent — the platform derives the full palette
+ * from. Either may be omitted to keep that half of the built-in palette.
+ */
+interface DashboardThemeConfig {
+    /** Primary color as a hex string, e.g. '#e0245e' */
+    primary?: string;
+    /** Secondary/accent color as a hex string, e.g. '#ffd166' */
+    secondary?: string;
+}
 /**
  * Unified Playcademy configuration
  * Used for playcademy.config.{js,json}
@@ -328,6 +356,8 @@ interface PlaycademyConfig {
     externalUrl?: string;
     /** Game platform */
     platform?: 'web' | 'godot';
+    /** Developer dashboard app (optional) — `true` uses defaults */
+    dashboard?: DashboardConfig | boolean;
     /** Integrations (database, custom routes, external services) */
     integrations?: IntegrationsConfig;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@playcademy/sdk",
-    "version": "0.15.1-beta.2",
+    "version": "0.15.1-beta.3",
     "type": "module",
     "exports": {
         ".": {