@playcademy/vite-plugin 0.2.24-beta.3 → 0.2.24-beta.4

package/dist/index.js

@@ -25335,7 +25335,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@playcademy/sandbox",
-    version: "0.3.17-beta.6",
+    version: "0.3.17-beta.7",
     description: "Local development server for Playcademy game development",
     type: "module",
     exports: {
@@ -35611,7 +35611,7 @@ var init_table6 = __esm(() => {
   init_drizzle_orm();
   init_pg_core();
   init_table5();
-  userRoleEnum = pgEnum("user_role", ["admin", "player", "developer"]);
+  userRoleEnum = pgEnum("user_role", ["admin", "player", "developer", "teacher"]);
   developerStatusEnum = pgEnum("developer_status", ["none", "pending", "approved"]);
   users = pgTable("user", {
     id: text("id").primaryKey().$defaultFn(() => crypto.randomUUID()),
@@ -50583,10 +50583,13 @@ var init_game_service = __esm(() => {
       });
     }
     async listManageable(user) {
-      this.validateDeveloperStatus(user);
+      const seesAllGames = user.role === "admin" || user.role === "teacher";
+      if (!seesAllGames) {
+        this.validateDeveloperStatus(user);
+      }
       const db2 = this.deps.db;
       return db2.query.games.findMany({
-        where: user.role === "admin" ? undefined : eq(games.developerId, user.id),
+        where: seesAllGames ? undefined : eq(games.developerId, user.id),
         orderBy: [desc(games.createdAt)]
       });
     }
@@ -50990,6 +50993,19 @@ var init_game_service = __esm(() => {
         throw new NotFoundError("Game", gameId);
       }
     }
+    async validateGameManagementAccess(user, gameId) {
+      if (user.role === "admin" || user.role === "teacher") {
+        const gameExists = await this.deps.db.query.games.findFirst({
+          where: eq(games.id, gameId),
+          columns: { id: true }
+        });
+        if (!gameExists) {
+          throw new NotFoundError("Game", gameId);
+        }
+        return;
+      }
+      return this.validateDeveloperAccess(user, gameId);
+    }
     async validateDeveloperAccessBySlug(user, slug) {
       this.validateDeveloperStatus(user);
       const db2 = this.deps.db;
@@ -51058,6 +51074,7 @@ function createGameServices(deps) {
     validators: {
       validateDeveloperAccessBySlug: (user, slug) => game.validateDeveloperAccessBySlug(user, slug),
       validateDeveloperAccess: (user, gameId) => game.validateDeveloperAccess(user, gameId),
+      validateGameManagementAccess: (user, gameId) => game.validateGameManagementAccess(user, gameId),
       validateOwnership: (user, gameId) => game.validateOwnership(user, gameId)
     }
   };
@@ -54499,9 +54516,13 @@ class TimebackAdminService {
       });
     });
   }
-  async resolveAdminMutationContext(gameId, courseId, user, studentId) {
+  async resolveAdminMutationContext(gameId, courseId, user, studentId, accessLevel = "developer") {
     const client = this.requireClient();
-    await this.deps.validateDeveloperAccess(user, gameId);
+    if (accessLevel === "dashboard") {
+      await this.deps.validateGameManagementAccess(user, gameId);
+    } else {
+      await this.deps.validateDeveloperAccess(user, gameId);
+    }
     const integration = await this.deps.db.query.gameTimebackIntegrations.findFirst({
       where: and(eq(gameTimebackIntegrations.gameId, gameId), eq(gameTimebackIntegrations.courseId, courseId))
     });
@@ -54761,7 +54782,7 @@ class TimebackAdminService {
   }
   async listStudentsForCourse(gameId, courseId, user) {
     const client = this.requireClient();
-    await this.deps.validateDeveloperAccess(user, gameId);
+    await this.deps.validateGameManagementAccess(user, gameId);
     const integration = await this.deps.db.query.gameTimebackIntegrations.findFirst({
       where: and(eq(gameTimebackIntegrations.gameId, gameId), eq(gameTimebackIntegrations.courseId, courseId))
     });
@@ -54799,7 +54820,7 @@ class TimebackAdminService {
   }
   async getStudentOverview(gameId, studentId, user, courseId) {
     const client = this.requireClient();
-    await this.deps.validateDeveloperAccess(user, gameId);
+    await this.deps.validateGameManagementAccess(user, gameId);
     const integrations = await this.deps.db.query.gameTimebackIntegrations.findMany({
       where: courseId ? and(eq(gameTimebackIntegrations.gameId, gameId), eq(gameTimebackIntegrations.courseId, courseId)) : eq(gameTimebackIntegrations.gameId, gameId)
     });
@@ -54853,7 +54874,7 @@ class TimebackAdminService {
     const client = this.requireClient();
     const safeLimit = Math.max(1, Math.min(limit, TimebackAdminService.MAX_STUDENT_ACTIVITY_LIMIT));
     const safeOffset = Math.max(0, Math.min(offset, TimebackAdminService.MAX_STUDENT_ACTIVITY_OFFSET));
-    await this.deps.validateDeveloperAccess(user, gameId);
+    await this.deps.validateGameManagementAccess(user, gameId);
     const [integration, sensorUrl] = await Promise.all([
       this.deps.db.query.gameTimebackIntegrations.findFirst({
         where: and(eq(gameTimebackIntegrations.gameId, gameId), eq(gameTimebackIntegrations.courseId, courseId))
@@ -54917,7 +54938,7 @@ class TimebackAdminService {
     return { status: "ok" };
   }
   async toggleCourseCompletion(data, user) {
-    const { client, sensorUrl, appName, actor } = await this.resolveAdminMutationContext(data.gameId, data.courseId, user, data.studentId);
+    const { client, sensorUrl, appName, actor } = await this.resolveAdminMutationContext(data.gameId, data.courseId, user, data.studentId, "dashboard");
     const historyClient = client;
     const ids = deriveSourcedIds(data.courseId);
     const lineItemId = `${ids.course}-mastery-completion-assessment`;
@@ -55010,6 +55031,77 @@ class TimebackAdminService {
     }
     return { status: "ok" };
   }
+  async searchStudentsForEnrollment(gameId, courseId, query, user) {
+    const client = this.requireClient();
+    await this.deps.validateGameManagementAccess(user, gameId);
+    const integration = await this.deps.db.query.gameTimebackIntegrations.findFirst({
+      where: and(eq(gameTimebackIntegrations.gameId, gameId), eq(gameTimebackIntegrations.courseId, courseId))
+    });
+    if (!integration) {
+      throw new NotFoundError("Timeback integration", `${gameId}:${courseId}`);
+    }
+    const trimmedQuery = query.trim();
+    if (trimmedQuery.length < 2) {
+      return { students: [] };
+    }
+    const filterParts = [
+      `givenName~'${escapeFilterValue(trimmedQuery)}'`,
+      `familyName~'${escapeFilterValue(trimmedQuery)}'`,
+      `email~'${escapeFilterValue(trimmedQuery)}'`
+    ];
+    const filter = filterParts.join(" OR ");
+    const params = new URLSearchParams({ filter, limit: "25" });
+    const endpoint = `/ims/oneroster/rostering/v1p2/users?${params}`;
+    let allUsers = [];
+    try {
+      const response = await client["request"](endpoint, "GET");
+      allUsers = response.users || [];
+    } catch (error) {
+      logger16.warn("Failed to search OneRoster users", {
+        query: trimmedQuery,
+        error: error instanceof Error ? error.message : String(error)
+      });
+      return { students: [] };
+    }
+    const roster = await client.oneroster.enrollments.listByCourse(courseId, {
+      role: "student",
+      includeUsers: false
+    });
+    const enrolledStudentIds = new Set(roster.map((entry) => entry.enrollment.user.sourcedId));
+    const students = allUsers.filter((entry) => Boolean(entry.sourcedId) && entry.roles?.some((role) => role.role === "student") === true).map((entry) => ({
+      studentId: entry.sourcedId,
+      name: `${entry.givenName || ""} ${entry.familyName || ""}`.trim() || entry.sourcedId,
+      email: entry.email || null,
+      alreadyEnrolled: enrolledStudentIds.has(entry.sourcedId)
+    }));
+    return { students };
+  }
+  async enrollStudent(data, user) {
+    const client = this.requireClient();
+    await this.deps.validateGameManagementAccess(user, data.gameId);
+    const integration = await this.deps.db.query.gameTimebackIntegrations.findFirst({
+      where: and(eq(gameTimebackIntegrations.gameId, data.gameId), eq(gameTimebackIntegrations.courseId, data.courseId))
+    });
+    if (!integration) {
+      throw new NotFoundError("Timeback integration", `${data.gameId}:${data.courseId}`);
+    }
+    await client.edubridge.enrollments.enroll(data.studentId, data.courseId, {
+      role: "student"
+    });
+    return { status: "ok" };
+  }
+  async unenrollStudent(data, user) {
+    const client = this.requireClient();
+    await this.deps.validateGameManagementAccess(user, data.gameId);
+    const integration = await this.deps.db.query.gameTimebackIntegrations.findFirst({
+      where: and(eq(gameTimebackIntegrations.gameId, data.gameId), eq(gameTimebackIntegrations.courseId, data.courseId))
+    });
+    if (!integration) {
+      throw new NotFoundError("Timeback integration", `${data.gameId}:${data.courseId}`);
+    }
+    await client.edubridge.enrollments.unenroll(data.studentId, data.courseId);
+    return { status: "ok" };
+  }
   async getCompletionStatus(client, courseId, studentId) {
     const ids = deriveSourcedIds(courseId);
     const lineItemId = `${ids.course}-mastery-completion-assessment`;
@@ -55460,7 +55552,7 @@ class TimebackService {
     return { integrations, ...verbose && verboseData.length > 0 && { verbose: verboseData } };
   }
   async getIntegrations(gameId, user) {
-    await this.deps.validateDeveloperAccess(user, gameId);
+    await this.deps.validateGameManagementAccess(user, gameId);
     const rows = await this.deps.db.query.gameTimebackIntegrations.findMany({
       where: eq(gameTimebackIntegrations.gameId, gameId)
     });
@@ -55712,6 +55804,7 @@ function createPlatformServices(deps) {
     alerts,
     validateDeveloperAccessBySlug,
     validateDeveloperAccess,
+    validateGameManagementAccess,
     validateOwnership
   } = deps;
   const bucket = new BucketService({
@@ -55746,12 +55839,14 @@ function createPlatformServices(deps) {
   const timeback2 = new TimebackService({
     db: db2,
     timeback: timebackClient,
-    validateDeveloperAccess
+    validateDeveloperAccess,
+    validateGameManagementAccess
   });
   const timebackAdmin = new TimebackAdminService({
     db: db2,
     timeback: timebackClient,
-    validateDeveloperAccess
+    validateDeveloperAccess,
+    validateGameManagementAccess
   });
   return {
     bucket,
@@ -58845,6 +58940,34 @@ function createEduBridgeNamespace(client) {
     listByUser: async (userId) => {
       const response = await client["request"](`/edubridge/enrollments/user/${userId}`, "GET");
       return response.data;
+    },
+    enroll: async (userId, courseId, options) => {
+      const segments = [userId, courseId];
+      if (options?.schoolId) {
+        segments.push(options.schoolId);
+      }
+      const body2 = {};
+      if (options?.role) {
+        body2.role = options.role;
+      }
+      if (options?.sourcedId) {
+        body2.sourcedId = options.sourcedId;
+      }
+      if (options?.beginDate) {
+        body2.beginDate = options.beginDate;
+      }
+      if (options?.metadata) {
+        body2.metadata = options.metadata;
+      }
+      const response = await client["request"](`/edubridge/enrollments/enroll/${segments.join("/")}`, "POST", body2);
+      return response.data;
+    },
+    unenroll: async (userId, courseId, options) => {
+      const segments = [userId, courseId];
+      if (options?.schoolId) {
+        segments.push(options.schoolId);
+      }
+      await client["request"](`/edubridge/enrollments/unenroll/${segments.join("/")}`, "DELETE");
     }
   };
   const analytics = {
@@ -59020,6 +59143,10 @@ function createOneRosterNamespace(client) {
           logTimebackError("list course roster", error, { courseSourcedId });
           throw error;
         }
+      },
+      create: async (data) => client["request"](ONEROSTER_ENDPOINTS4.enrollments, "POST", { enrollment: data }),
+      delete: async (sourcedId) => {
+        await client["request"](`${ONEROSTER_ENDPOINTS4.enrollments}/${sourcedId}`, "DELETE");
       }
     },
     organizations: {
@@ -120050,6 +120177,8 @@ var GrantTimebackXpRequestSchema;
 var AdjustTimebackTimeRequestSchema;
 var AdjustTimebackMasteryRequestSchema;
 var ToggleCourseCompletionRequestSchema;
+var EnrollStudentRequestSchema;
+var UnenrollStudentRequestSchema;
 var init_schemas11 = __esm(() => {
   init_esm();
   TIMEBACK_GRADES = [-1, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13];
@@ -120192,6 +120321,16 @@ var init_schemas11 = __esm(() => {
     studentId: exports_external.string().min(1),
     action: exports_external.enum(["complete", "resume"])
   });
+  EnrollStudentRequestSchema = exports_external.object({
+    gameId: exports_external.string().uuid(),
+    courseId: exports_external.string().min(1),
+    studentId: exports_external.string().min(1)
+  });
+  UnenrollStudentRequestSchema = exports_external.object({
+    gameId: exports_external.string().uuid(),
+    courseId: exports_external.string().min(1),
+    studentId: exports_external.string().min(1)
+  });
 });
 var init_schemas_index = __esm(() => {
   init_schemas();
@@ -120210,6 +120349,9 @@ function isAuthenticated(ctx) {
   return ctx.user != null;
 }
 var init_types9 = () => {};
+function hasGameManagementAccess(user) {
+  return user.role === "admin" || user.role === "teacher" || user.role === "developer" && user.developerStatus === "approved";
+}
 function requireAuth(handler) {
   return async (ctx) => {
     if (!isAuthenticated(ctx)) {
@@ -120253,6 +120395,17 @@ function requireDeveloper(handler) {
     return handler(ctx);
   };
 }
+function requireGameManagementAccess(handler) {
+  return async (ctx) => {
+    if (!isAuthenticated(ctx)) {
+      throw ApiError.unauthorized("Valid session or bearer token required");
+    }
+    if (!hasGameManagementAccess(ctx.user)) {
+      throw ApiError.forbidden("Game management access required");
+    }
+    return handler(ctx);
+  };
+}
 var init_auth_util = __esm(() => {
   init_errors();
   init_types9();
@@ -122386,6 +122539,9 @@ var grantXp;
 var adjustTime;
 var adjustMastery;
 var toggleCompletion;
+var searchStudents;
+var enrollStudent;
+var unenrollStudent;
 var timeback2;
 var init_timeback_controller = __esm(() => {
   init_esm();
@@ -122476,7 +122632,7 @@ var init_timeback_controller = __esm(() => {
     });
     return ctx.services.timeback.setupIntegration(body2.gameId, body2, ctx.user);
   });
-  getIntegrations = requireDeveloper(async (ctx) => {
+  getIntegrations = requireGameManagementAccess(async (ctx) => {
     const gameId = ctx.params.gameId;
     if (!gameId) {
       throw ApiError.badRequest("Missing gameId");
@@ -122601,7 +122757,7 @@ var init_timeback_controller = __esm(() => {
       include
     });
   });
-  getRoster = requireDeveloper(async (ctx) => {
+  getRoster = requireGameManagementAccess(async (ctx) => {
     const gameId = ctx.params.gameId;
     const courseId = ctx.params.courseId;
     if (!gameId || !courseId) {
@@ -122614,7 +122770,7 @@ var init_timeback_controller = __esm(() => {
     });
     return ctx.services.timebackAdmin.listStudentsForCourse(gameId, courseId, ctx.user);
   });
-  getStudentOverview = requireDeveloper(async (ctx) => {
+  getStudentOverview = requireGameManagementAccess(async (ctx) => {
     const timebackId = ctx.params.timebackId;
     const gameId = ctx.url.searchParams.get("gameId") || undefined;
     const courseId = ctx.url.searchParams.get("courseId") || undefined;
@@ -122629,7 +122785,7 @@ var init_timeback_controller = __esm(() => {
     });
     return ctx.services.timebackAdmin.getStudentOverview(gameId, timebackId, ctx.user, courseId);
   });
-  getStudentActivity = requireDeveloper(async (ctx) => {
+  getStudentActivity = requireGameManagementAccess(async (ctx) => {
     const timebackId = ctx.params.timebackId;
     const courseId = ctx.params.courseId;
     const gameId = ctx.url.searchParams.get("gameId") || undefined;
@@ -122692,7 +122848,7 @@ var init_timeback_controller = __esm(() => {
     });
     return ctx.services.timebackAdmin.adjustMasteredUnits(body2, ctx.user);
   });
-  toggleCompletion = requireDeveloper(async (ctx) => {
+  toggleCompletion = requireGameManagementAccess(async (ctx) => {
     const body2 = await parseRequestBody(ctx.request, ToggleCourseCompletionRequestSchema);
     logger63.debug("Toggling course completion", {
       requesterId: ctx.user.id,
@@ -122703,6 +122859,41 @@ var init_timeback_controller = __esm(() => {
     });
     return ctx.services.timebackAdmin.toggleCourseCompletion(body2, ctx.user);
   });
+  searchStudents = requireGameManagementAccess(async (ctx) => {
+    const gameId = ctx.params.gameId;
+    const courseId = ctx.params.courseId;
+    const query = ctx.url.searchParams.get("q") || "";
+    if (!gameId || !courseId) {
+      throw ApiError.badRequest("Missing gameId or courseId parameter");
+    }
+    logger63.debug("Searching students for enrollment", {
+      requesterId: ctx.user.id,
+      gameId,
+      courseId,
+      query
+    });
+    return ctx.services.timebackAdmin.searchStudentsForEnrollment(gameId, courseId, query, ctx.user);
+  });
+  enrollStudent = requireGameManagementAccess(async (ctx) => {
+    const body2 = await parseRequestBody(ctx.request, EnrollStudentRequestSchema);
+    logger63.debug("Enrolling student", {
+      requesterId: ctx.user.id,
+      gameId: body2.gameId,
+      courseId: body2.courseId,
+      studentId: body2.studentId
+    });
+    return ctx.services.timebackAdmin.enrollStudent(body2, ctx.user);
+  });
+  unenrollStudent = requireGameManagementAccess(async (ctx) => {
+    const body2 = await parseRequestBody(ctx.request, UnenrollStudentRequestSchema);
+    logger63.debug("Unenrolling student", {
+      requesterId: ctx.user.id,
+      gameId: body2.gameId,
+      courseId: body2.courseId,
+      studentId: body2.studentId
+    });
+    return ctx.services.timebackAdmin.unenrollStudent(body2, ctx.user);
+  });
   timeback2 = {
     getTodayXp,
     getTotalXp,
@@ -122724,7 +122915,10 @@ var init_timeback_controller = __esm(() => {
     grantXp,
     adjustTime,
     adjustMastery,
-    toggleCompletion
+    toggleCompletion,
+    searchStudents,
+    enrollStudent,
+    unenrollStudent
   };
 });
 var logger64;
@@ -125286,7 +125480,7 @@ var import_picocolors12 = __toESM(require_picocolors(), 1);
 // package.json
 var package_default2 = {
   name: "@playcademy/vite-plugin",
-  version: "0.2.24-beta.3",
+  version: "0.2.24-beta.4",
   type: "module",
   exports: {
     ".": {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@playcademy/vite-plugin",
-    "version": "0.2.24-beta.3",
+    "version": "0.2.24-beta.4",
     "type": "module",
     "exports": {
         ".": {