@playcademy/vite-plugin 0.2.20 → 0.2.21

package/dist/index.js

@@ -25334,7 +25334,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@playcademy/sandbox",
-    version: "0.3.14",
+    version: "0.3.15",
     description: "Local development server for Playcademy game development",
     type: "module",
     exports: {
@@ -45219,10 +45219,33 @@ class DeployJobService {
     }
     await this.deps.storage.deleteObject(bucketName, this.getCodeBundleObjectKey(jobId)).catch(() => {});
   }
+  assertValidCodeUploadToken(token, gameId) {
+    const expectedPrefix = `uploads-temp/${gameId}/`;
+    if (!token.startsWith(expectedPrefix) || !token.endsWith(".js")) {
+      throw new ValidationError("Invalid backend code upload token");
+    }
+  }
+  async loadUploadedCode(codeUploadToken, gameId) {
+    this.assertValidCodeUploadToken(codeUploadToken, gameId);
+    const bucketName = this.getUploadBucket();
+    const bytes = await this.deps.storage.getObjectBytes(bucketName, codeUploadToken);
+    if (!bytes) {
+      throw new ValidationError("Backend code upload not found");
+    }
+    return new TextDecoder().decode(bytes);
+  }
+  deleteUploadedCode(codeUploadToken, gameId) {
+    this.assertValidCodeUploadToken(codeUploadToken, gameId);
+    const bucketName = this.getUploadBucket();
+    this.deps.storage.deleteObject(bucketName, codeUploadToken).catch(() => {
+      logger2.warn("Failed to delete temp code upload", { key: codeUploadToken });
+    });
+  }
   sanitizeRequestForPersistence(request) {
     const sanitized = { ...request };
     delete sanitized._headers;
     delete sanitized.code;
+    delete sanitized.codeUploadToken;
     return sanitized;
   }
   getLeaseExpiry() {
@@ -45260,6 +45283,16 @@ class DeployJobService {
   async create(slug, request, user) {
     const game = await this.deps.validateDeveloperAccessBySlug(user, slug);
     const jobId = crypto.randomUUID();
+    let codeSource = "none";
+    if (request.code) {
+      codeSource = "inline";
+    } else if (request.codeUploadToken) {
+      codeSource = "presigned-upload";
+    }
+    logger2.info("Deploy job backend code source", { slug, codeSource });
+    if (codeSource === "presigned-upload") {
+      request.code = await this.loadUploadedCode(request.codeUploadToken, game.id);
+    }
     const sanitizedRequest = this.sanitizeRequestForPersistence(request);
     if (request.code) {
       await this.storeCodeBundle(jobId, request.code);
@@ -45288,6 +45321,9 @@ class DeployJobService {
       throw new ValidationError("Failed to create deploy job");
     }
     logger2.info("Deploy job created", { jobId: job.id, gameId: game.id, slug, userId: user.id });
+    if (codeSource === "presigned-upload") {
+      this.deleteUploadedCode(request.codeUploadToken, game.id);
+    }
     return this.toResponse(job);
   }
   async get(jobId, slug, user) {
@@ -54126,6 +54162,12 @@ class UploadService {
   constructor(deps) {
     this.deps = deps;
   }
+  static getContentType(fileName) {
+    if (fileName.endsWith(".js")) {
+      return "application/javascript";
+    }
+    return "application/zip";
+  }
   async initiate(request, user) {
     const { fileName, gameId } = request;
     const bucketName = this.deps.uploadBucket;
@@ -54137,7 +54179,7 @@ class UploadService {
     const version2 = ulid();
     const tempS3Key = `uploads-temp/${gameId}/${version2}/${fileName}`;
     logger17.debug("Initiating upload", { userId: user.id, gameId, fileName, version: version2 });
-    const presignedUrl = await this.deps.generatePresignedPutUrl(bucketName, tempS3Key, "application/zip");
+    const presignedUrl = await this.deps.generatePresignedPutUrl(bucketName, tempS3Key, UploadService.getContentType(fileName));
     logger17.info("Presigned URL generated", {
       userId: user.id,
       gameId,
@@ -117650,6 +117692,7 @@ var UpdateGameStateSchema;
 var InsertGameDeploymentSchema;
 var InsertGameDeployJobSchema;
 var UpsertGameMetadataSchema;
+var ALLOWED_UPLOAD_EXTENSIONS;
 var InitiateUploadSchema;
 var AddCustomHostnameSchema;
 var SetSecretsRequestSchema;
@@ -117750,9 +117793,10 @@ var init_schemas2 = __esm(() => {
     message: "External games require an externalUrl",
     path: ["externalUrl"]
   });
+  ALLOWED_UPLOAD_EXTENSIONS = [".zip", ".js"];
   InitiateUploadSchema = exports_external.object({
-    fileName: exports_external.string().min(1).refine((name4) => name4.endsWith(".zip"), {
-      message: "File must be a .zip file"
+    fileName: exports_external.string().min(1).refine((name4) => ALLOWED_UPLOAD_EXTENSIONS.some((ext2) => name4.endsWith(ext2)), {
+      message: `File must be one of: ${ALLOWED_UPLOAD_EXTENSIONS.join(", ")}`
     }),
     gameId: exports_external.string().uuid()
   });
@@ -117785,6 +117829,7 @@ var init_schemas2 = __esm(() => {
   DeployRequestSchema = exports_external.object({
     uploadToken: exports_external.string().optional(),
     code: exports_external.string().optional(),
+    codeUploadToken: exports_external.string().optional(),
     config: exports_external.unknown().optional(),
     bindings: exports_external.object({
       database: exports_external.array(exports_external.string()).optional(),
@@ -117812,6 +117857,9 @@ var init_schemas2 = __esm(() => {
       platform: exports_external.string().optional(),
       metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
     }).optional()
+  }).refine((data) => !(data.code && data.codeUploadToken), {
+    message: "Specify either code or codeUploadToken, not both",
+    path: ["codeUploadToken"]
   });
 });
 function validateRelativePath(path22, fieldName) {
@@ -120773,6 +120821,97 @@ var init_crud = __esm(() => {
   gameCrudRouter.put("/:slug", handle2(games2.upsertBySlug));
   gameCrudRouter.delete("/:gameId", handle2(games2.remove, { status: 204 }));
 });
+async function initiateHandler(c2) {
+  const user = c2.get("user");
+  if (!user) {
+    return c2.json({ error: { code: "UNAUTHORIZED", message: "Authentication required" } }, 401);
+  }
+  let body2;
+  try {
+    body2 = await c2.req.json();
+  } catch {
+    return c2.json({ error: { code: "BAD_REQUEST", message: "Invalid JSON body" } }, 400);
+  }
+  if (!body2.fileName || !body2.gameId) {
+    return c2.json({
+      error: {
+        code: "VALIDATION_FAILED",
+        message: "Validation failed: fileName and gameId are required"
+      }
+    }, 422);
+  }
+  const uploadToken = `sandbox-upload-${randomUUID3()}`;
+  const version4 = `v${Date.now()}`;
+  pendingUploads.set(uploadToken, {
+    gameId: body2.gameId,
+    fileName: body2.fileName
+  });
+  const host = c2.req.header("host") || "localhost:3000";
+  const protocol = host.startsWith("localhost") || host.startsWith("127.0.0.1") ? "http" : "https";
+  const presignedUrl = `${protocol}://${host}/api/games/uploads/sandbox/${uploadToken}`;
+  return c2.json({
+    uploadToken,
+    presignedUrl,
+    gameId: body2.gameId,
+    version: version4
+  });
+}
+function consumeUploadedCode(token) {
+  const upload = pendingUploads.get(token);
+  if (!upload?.data) {
+    return;
+  }
+  const { data } = upload;
+  pendingUploads.delete(token);
+  return data;
+}
+async function finalizeHandler(c2) {
+  const user = c2.get("user");
+  if (!user) {
+    return c2.json({ error: "Authentication required" }, 401);
+  }
+  let body2;
+  try {
+    body2 = await c2.req.json();
+  } catch {
+    return c2.json({ error: "Invalid JSON body" }, 400);
+  }
+  if (!body2.uploadToken) {
+    return c2.json({ error: "uploadToken is required" }, 400);
+  }
+  const upload = pendingUploads.get(body2.uploadToken);
+  if (!upload) {
+    return c2.json({ error: "Invalid or expired upload token" }, 400);
+  }
+  pendingUploads.delete(body2.uploadToken);
+  return c2.json({
+    success: true,
+    gameId: upload.gameId,
+    fileName: upload.fileName
+  });
+}
+var gameUploadsRouter;
+var pendingUploads;
+var init_uploads = __esm(() => {
+  init_dist4();
+  gameUploadsRouter = new Hono2;
+  pendingUploads = new Map;
+  gameUploadsRouter.post("/uploads/initiate", initiateHandler);
+  gameUploadsRouter.post("/uploads/initiate/", initiateHandler);
+  gameUploadsRouter.put("/uploads/sandbox/:token", async (c2) => {
+    const token = c2.req.param("token");
+    const upload = pendingUploads.get(token);
+    if (!upload) {
+      return c2.json({ error: "Invalid upload token" }, 400);
+    }
+    if (upload.fileName.endsWith(".js")) {
+      upload.data = await c2.req.text();
+    }
+    return c2.text("", 200);
+  });
+  gameUploadsRouter.post("/uploads/finalize", finalizeHandler);
+  gameUploadsRouter.post("/uploads/finalize/", finalizeHandler);
+});
 var logger66;
 var gameDeployRouter;
 var init_deploy = __esm(() => {
@@ -120783,6 +120922,7 @@ var init_deploy = __esm(() => {
   init_tables_index();
   init_src2();
   init_api();
+  init_uploads();
   logger66 = log.scope("SandboxDeploy");
   gameDeployRouter = new Hono2;
   gameDeployRouter.post("/:slug/deploy", async (c2) => {
@@ -120853,6 +120993,14 @@ var init_deploy = __esm(() => {
       }).returning();
       game = inserted[0];
     }
+    let backendCode = body2.code;
+    if (!backendCode && body2.codeUploadToken) {
+      backendCode = consumeUploadedCode(body2.codeUploadToken);
+      if (!backendCode) {
+        return c2.json({ error: { code: "BAD_REQUEST", message: "Backend code upload not found" } }, 400);
+      }
+    }
+    const hasBackend = Boolean(backendCode);
     const events = [
       { type: "status", message: "Deployment queued", createdAt: now2.toISOString() },
       { type: "status", message: "Deployment started", createdAt: now2.toISOString() },
@@ -120864,7 +121012,7 @@ var init_deploy = __esm(() => {
         },
         { type: "status", message: "Extracting assets", createdAt: now2.toISOString() }
       ] : [],
-      ...body2.code ? [
+      ...hasBackend ? [
         {
           type: "status",
           message: "Deploying backend code",
@@ -121114,84 +121262,6 @@ var init_shop = __esm(() => {
   gameShopRouter.patch("/:gameId/items/:itemId/shop-listing", handle2(shopListings2.updateForGameItem));
   gameShopRouter.delete("/:gameId/items/:itemId/shop-listing", handle2(shopListings2.deleteForGameItem, { status: 204 }));
 });
-async function initiateHandler(c2) {
-  const user = c2.get("user");
-  if (!user) {
-    return c2.json({ error: { code: "UNAUTHORIZED", message: "Authentication required" } }, 401);
-  }
-  let body2;
-  try {
-    body2 = await c2.req.json();
-  } catch {
-    return c2.json({ error: { code: "BAD_REQUEST", message: "Invalid JSON body" } }, 400);
-  }
-  if (!body2.fileName || !body2.gameId) {
-    return c2.json({
-      error: {
-        code: "VALIDATION_FAILED",
-        message: "Validation failed: fileName and gameId are required"
-      }
-    }, 422);
-  }
-  const uploadToken = `sandbox-upload-${randomUUID3()}`;
-  const version4 = `v${Date.now()}`;
-  pendingUploads.set(uploadToken, {
-    gameId: body2.gameId,
-    fileName: body2.fileName
-  });
-  const host = c2.req.header("host") || "localhost:3000";
-  const protocol = host.startsWith("localhost") || host.startsWith("127.0.0.1") ? "http" : "https";
-  const presignedUrl = `${protocol}://${host}/api/games/uploads/sandbox/${uploadToken}`;
-  return c2.json({
-    uploadToken,
-    presignedUrl,
-    gameId: body2.gameId,
-    version: version4
-  });
-}
-async function finalizeHandler(c2) {
-  const user = c2.get("user");
-  if (!user) {
-    return c2.json({ error: "Authentication required" }, 401);
-  }
-  let body2;
-  try {
-    body2 = await c2.req.json();
-  } catch {
-    return c2.json({ error: "Invalid JSON body" }, 400);
-  }
-  if (!body2.uploadToken) {
-    return c2.json({ error: "uploadToken is required" }, 400);
-  }
-  const upload = pendingUploads.get(body2.uploadToken);
-  if (!upload) {
-    return c2.json({ error: "Invalid or expired upload token" }, 400);
-  }
-  pendingUploads.delete(body2.uploadToken);
-  return c2.json({
-    success: true,
-    gameId: upload.gameId,
-    fileName: upload.fileName
-  });
-}
-var gameUploadsRouter;
-var pendingUploads;
-var init_uploads = __esm(() => {
-  init_dist4();
-  gameUploadsRouter = new Hono2;
-  pendingUploads = new Map;
-  gameUploadsRouter.post("/uploads/initiate", initiateHandler);
-  gameUploadsRouter.post("/uploads/initiate/", initiateHandler);
-  gameUploadsRouter.put("/uploads/sandbox/:token", async (c2) => {
-    const token = c2.req.param("token");
-    if (!pendingUploads.has(token)) {
-      return c2.json({ error: "Invalid upload token" }, 400);
-    }
-    return c2.text("", 200);
-  });
-  gameUploadsRouter.post("/uploads/finalize", finalizeHandler);
-  gameUploadsRouter.post("/uploads/finalize/", finalizeHandler);
-});
 var gameVerifyRouter;
 var init_verify2 = __esm(() => {
   init_dist4();
@@ -123059,7 +123129,7 @@ var import_picocolors12 = __toESM(require_picocolors(), 1);
 // package.json
 var package_default2 = {
   name: "@playcademy/vite-plugin",
-  version: "0.2.20",
+  version: "0.2.21",
   type: "module",
   exports: {
     ".": {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@playcademy/vite-plugin",
-    "version": "0.2.20",
+    "version": "0.2.21",
     "type": "module",
     "exports": {
         ".": {
@@ -21,14 +21,14 @@
     "dependencies": {
         "archiver": "^7.0.1",
         "picocolors": "^1.1.1",
-        "playcademy": "0.18.0"
+        "playcademy": "0.18.3"
     },
     "devDependencies": {
         "@electric-sql/pglite": "^0.3.16",
         "@inquirer/prompts": "^7.8.6",
         "@playcademy/constants": "0.0.1",
-        "@playcademy/sandbox": "0.3.14",
-        "@playcademy/sdk": "0.3.1",
+        "@playcademy/sandbox": "0.3.15",
+        "@playcademy/sdk": "0.3.2",
         "@playcademy/types": "0.0.1",
         "@playcademy/utils": "0.0.1",
         "@types/archiver": "^6.0.3",