@timeback/sdk 0.1.5 → 0.1.7

package/dist/index.js

@@ -14949,7 +14949,7 @@ var TimebackSubject = exports_external.enum([
   "Math",
   "None",
   "Other"
-]);
+]).meta({ id: "TimebackSubject", description: "Subject area" });
 var TimebackGrade = exports_external.union([
   exports_external.literal(-1),
   exports_external.literal(0),
@@ -14966,7 +14966,10 @@ var TimebackGrade = exports_external.union([
   exports_external.literal(11),
   exports_external.literal(12),
   exports_external.literal(13)
-]);
+]).meta({
+  id: "TimebackGrade",
+  description: "Grade level (-1 = Pre-K, 0 = K, 1-12 = grades, 13 = AP)"
+});
 var ScoreStatus = exports_external.enum([
   "exempt",
   "fully graded",
@@ -15196,62 +15199,84 @@ var CaliperListEventsParams = exports_external.object({
   actorEmail: exports_external.email().optional()
 }).strict();
 var CourseIds = exports_external.object({
-  staging: exports_external.string().optional(),
-  production: exports_external.string().optional()
-});
-var CourseType = exports_external.enum(["base", "hole-filling", "optional"]);
-var PublishStatus = exports_external.enum(["draft", "testing", "published", "deactivated"]);
+  staging: exports_external.string().meta({ description: "Course ID in staging environment" }).optional(),
+  production: exports_external.string().meta({ description: "Course ID in production environment" }).optional()
+}).meta({ id: "CourseIds", description: "Environment-specific course IDs (populated by sync)" });
+var CourseType = exports_external.enum(["base", "hole-filling", "optional"]).meta({ id: "CourseType", description: "Course classification type" });
+var PublishStatus = exports_external.enum(["draft", "testing", "published", "deactivated"]).meta({ id: "PublishStatus", description: "Course publication status" });
 var CourseGoals = exports_external.object({
-  dailyXp: exports_external.number().int().positive().optional(),
-  dailyLessons: exports_external.number().int().positive().optional(),
-  dailyActiveMinutes: exports_external.number().int().positive().optional(),
-  dailyAccuracy: exports_external.number().int().min(0).max(100).optional(),
-  dailyMasteredUnits: exports_external.number().int().positive().optional()
-});
+  dailyXp: exports_external.number().int().positive().meta({ description: "Target XP to earn per day" }).optional(),
+  dailyLessons: exports_external.number().int().positive().meta({ description: "Target lessons to complete per day" }).optional(),
+  dailyActiveMinutes: exports_external.number().int().positive().meta({ description: "Target active learning minutes per day" }).optional(),
+  dailyAccuracy: exports_external.number().int().min(0).max(100).meta({ description: "Target accuracy percentage (0-100)" }).optional(),
+  dailyMasteredUnits: exports_external.number().int().positive().meta({ description: "Target units to master per day" }).optional()
+}).meta({ id: "CourseGoals", description: "Daily learning goals for a course" });
 var CourseMetrics = exports_external.object({
-  totalXp: exports_external.number().int().positive().optional(),
-  totalLessons: exports_external.number().int().positive().optional(),
-  totalGrades: exports_external.number().int().positive().optional()
-});
+  totalXp: exports_external.number().int().positive().meta({ description: "Total XP available in the course" }).optional(),
+  totalLessons: exports_external.number().int().positive().meta({ description: "Total number of lessons/activities" }).optional(),
+  totalGrades: exports_external.number().int().positive().meta({ description: "Total grade levels covered" }).optional()
+}).meta({ id: "CourseMetrics", description: "Aggregate metrics for a course" });
 var CourseMetadata = exports_external.object({
   courseType: CourseType.optional(),
-  isSupplemental: exports_external.boolean().optional(),
-  isCustom: exports_external.boolean().optional(),
+  isSupplemental: exports_external.boolean().meta({ description: "Whether this is supplemental to a base course" }).optional(),
+  isCustom: exports_external.boolean().meta({ description: "Whether this is a custom course for an individual student" }).optional(),
   publishStatus: PublishStatus.optional(),
-  contactEmail: exports_external.email().optional(),
-  primaryApp: exports_external.string().optional(),
+  contactEmail: exports_external.email().meta({ description: "Contact email for course issues" }).optional(),
+  primaryApp: exports_external.string().meta({ description: "Primary application identifier" }).optional(),
   goals: CourseGoals.optional(),
   metrics: CourseMetrics.optional()
-});
+}).meta({ id: "CourseMetadata", description: "Course metadata (matches API metadata object)" });
 var CourseDefaults = exports_external.object({
-  courseCode: exports_external.string().optional(),
-  level: exports_external.string().optional(),
+  courseCode: exports_external.string().meta({ description: "Course code (e.g., 'MATH101')" }).optional(),
+  level: exports_external.string().meta({ description: "Course level (e.g., 'AP', 'Honors')" }).optional(),
   metadata: CourseMetadata.optional()
+}).meta({
+  id: "CourseDefaults",
+  description: "Default properties that apply to all courses unless overridden"
 });
 var CourseEnvOverrides = exports_external.object({
-  level: exports_external.string().optional(),
-  sensor: exports_external.string().url().optional(),
-  launchUrl: exports_external.string().url().optional(),
+  level: exports_external.string().meta({ description: "Course level for this environment" }).optional(),
+  sensor: exports_external.url().meta({ description: "Caliper sensor endpoint URL for this environment" }).optional(),
+  launchUrl: exports_external.url().meta({ description: "LTI launch URL for this environment" }).optional(),
   metadata: CourseMetadata.optional()
+}).meta({
+  id: "CourseEnvOverrides",
+  description: "Environment-specific course overrides (non-identity fields)"
 });
 var CourseOverrides = exports_external.object({
-  staging: CourseEnvOverrides.optional(),
-  production: CourseEnvOverrides.optional()
-});
+  staging: CourseEnvOverrides.meta({
+    description: "Overrides for staging environment"
+  }).optional(),
+  production: CourseEnvOverrides.meta({
+    description: "Overrides for production environment"
+  }).optional()
+}).meta({ id: "CourseOverrides", description: "Per-environment course overrides" });
 var CourseConfig = CourseDefaults.extend({
-  subject: TimebackSubject,
-  grade: TimebackGrade.optional(),
+  subject: TimebackSubject.meta({ description: "Subject area for this course" }),
+  grade: TimebackGrade.meta({
+    description: "Grade level (-1 = Pre-K, 0 = K, 1-12 = grades, 13 = AP)"
+  }).optional(),
   ids: CourseIds.nullable().optional(),
-  sensor: exports_external.string().url().optional(),
-  launchUrl: exports_external.string().url().optional(),
+  sensor: exports_external.url().meta({ description: "Caliper sensor endpoint URL for this course" }).optional(),
+  launchUrl: exports_external.url().meta({ description: "LTI launch URL for this course" }).optional(),
   overrides: CourseOverrides.optional()
+}).meta({
+  id: "CourseConfig",
+  description: "Configuration for a single course. Must have either grade or courseCode (or both)."
 });
 var TimebackConfig = exports_external.object({
-  name: exports_external.string().min(1, "App name is required"),
-  defaults: CourseDefaults.optional(),
-  courses: exports_external.array(CourseConfig).min(1, "At least one course is required"),
-  sensor: exports_external.string().url().optional(),
-  launchUrl: exports_external.string().url().optional()
+  $schema: exports_external.string().meta({ description: "JSON Schema reference for editor support" }).optional(),
+  name: exports_external.string().min(1, "App name is required").meta({ description: "Display name for your app" }),
+  defaults: CourseDefaults.meta({
+    description: "Default properties applied to all courses"
+  }).optional(),
+  courses: exports_external.array(CourseConfig).min(1, "At least one course is required").meta({ description: "Courses available in this app" }),
+  sensor: exports_external.url().meta({ description: "Default Caliper sensor endpoint URL for all courses" }).optional(),
+  launchUrl: exports_external.url().meta({ description: "Default LTI launch URL for all courses" }).optional()
+}).meta({
+  id: "TimebackConfig",
+  title: "Timeback Config",
+  description: "Configuration schema for timeback.config.json files"
 }).refine((config2) => {
   return config2.courses.every((c) => c.grade !== undefined || c.courseCode !== undefined);
 }, {
@@ -15272,14 +15297,20 @@ var TimebackConfig = exports_external.object({
   message: "Duplicate courseCode found; each must be unique",
   path: ["courses"]
 }).refine((config2) => {
-  return config2.courses.every((c) => c.sensor !== undefined || config2.sensor !== undefined);
-}, {
-  message: "Each course must have an effective sensor; set a top-level `sensor` or per-course `sensor`",
-  path: ["courses"]
-}).refine((config2) => {
-  return config2.courses.every((c) => c.launchUrl !== undefined || config2.launchUrl !== undefined);
+  return config2.courses.every((c) => {
+    if (c.sensor !== undefined || config2.sensor !== undefined) {
+      return true;
+    }
+    const launchUrls = [
+      c.launchUrl,
+      config2.launchUrl,
+      c.overrides?.staging?.launchUrl,
+      c.overrides?.production?.launchUrl
+    ].filter(Boolean);
+    return launchUrls.length > 0;
+  });
 }, {
-  message: "Each course must have an effective launchUrl; set a top-level `launchUrl` or per-course `launchUrl`",
+  message: "Each course must have an effective sensor. Either set `sensor` explicitly (top-level or per-course), or provide a `launchUrl` so sensor can be derived from its origin.",
   path: ["courses"]
 });
 var EdubridgeDateString = exports_external.union([IsoDateString, IsoDateTimeString]);
@@ -31327,7 +31358,7 @@ var TimebackSubject2 = exports_external2.enum([
   "Math",
   "None",
   "Other"
-]);
+]).meta({ id: "TimebackSubject", description: "Subject area" });
 var TimebackGrade2 = exports_external2.union([
   exports_external2.literal(-1),
   exports_external2.literal(0),
@@ -31344,7 +31375,10 @@ var TimebackGrade2 = exports_external2.union([
   exports_external2.literal(11),
   exports_external2.literal(12),
   exports_external2.literal(13)
-]);
+]).meta({
+  id: "TimebackGrade",
+  description: "Grade level (-1 = Pre-K, 0 = K, 1-12 = grades, 13 = AP)"
+});
 var ScoreStatus2 = exports_external2.enum([
   "exempt",
   "fully graded",
@@ -31574,62 +31608,84 @@ var CaliperListEventsParams2 = exports_external2.object({
   actorEmail: exports_external2.email().optional()
 }).strict();
 var CourseIds2 = exports_external2.object({
-  staging: exports_external2.string().optional(),
-  production: exports_external2.string().optional()
-});
-var CourseType2 = exports_external2.enum(["base", "hole-filling", "optional"]);
-var PublishStatus2 = exports_external2.enum(["draft", "testing", "published", "deactivated"]);
+  staging: exports_external2.string().meta({ description: "Course ID in staging environment" }).optional(),
+  production: exports_external2.string().meta({ description: "Course ID in production environment" }).optional()
+}).meta({ id: "CourseIds", description: "Environment-specific course IDs (populated by sync)" });
+var CourseType2 = exports_external2.enum(["base", "hole-filling", "optional"]).meta({ id: "CourseType", description: "Course classification type" });
+var PublishStatus2 = exports_external2.enum(["draft", "testing", "published", "deactivated"]).meta({ id: "PublishStatus", description: "Course publication status" });
 var CourseGoals2 = exports_external2.object({
-  dailyXp: exports_external2.number().int().positive().optional(),
-  dailyLessons: exports_external2.number().int().positive().optional(),
-  dailyActiveMinutes: exports_external2.number().int().positive().optional(),
-  dailyAccuracy: exports_external2.number().int().min(0).max(100).optional(),
-  dailyMasteredUnits: exports_external2.number().int().positive().optional()
-});
+  dailyXp: exports_external2.number().int().positive().meta({ description: "Target XP to earn per day" }).optional(),
+  dailyLessons: exports_external2.number().int().positive().meta({ description: "Target lessons to complete per day" }).optional(),
+  dailyActiveMinutes: exports_external2.number().int().positive().meta({ description: "Target active learning minutes per day" }).optional(),
+  dailyAccuracy: exports_external2.number().int().min(0).max(100).meta({ description: "Target accuracy percentage (0-100)" }).optional(),
+  dailyMasteredUnits: exports_external2.number().int().positive().meta({ description: "Target units to master per day" }).optional()
+}).meta({ id: "CourseGoals", description: "Daily learning goals for a course" });
 var CourseMetrics2 = exports_external2.object({
-  totalXp: exports_external2.number().int().positive().optional(),
-  totalLessons: exports_external2.number().int().positive().optional(),
-  totalGrades: exports_external2.number().int().positive().optional()
-});
+  totalXp: exports_external2.number().int().positive().meta({ description: "Total XP available in the course" }).optional(),
+  totalLessons: exports_external2.number().int().positive().meta({ description: "Total number of lessons/activities" }).optional(),
+  totalGrades: exports_external2.number().int().positive().meta({ description: "Total grade levels covered" }).optional()
+}).meta({ id: "CourseMetrics", description: "Aggregate metrics for a course" });
 var CourseMetadata2 = exports_external2.object({
   courseType: CourseType2.optional(),
-  isSupplemental: exports_external2.boolean().optional(),
-  isCustom: exports_external2.boolean().optional(),
+  isSupplemental: exports_external2.boolean().meta({ description: "Whether this is supplemental to a base course" }).optional(),
+  isCustom: exports_external2.boolean().meta({ description: "Whether this is a custom course for an individual student" }).optional(),
   publishStatus: PublishStatus2.optional(),
-  contactEmail: exports_external2.email().optional(),
-  primaryApp: exports_external2.string().optional(),
+  contactEmail: exports_external2.email().meta({ description: "Contact email for course issues" }).optional(),
+  primaryApp: exports_external2.string().meta({ description: "Primary application identifier" }).optional(),
   goals: CourseGoals2.optional(),
   metrics: CourseMetrics2.optional()
-});
+}).meta({ id: "CourseMetadata", description: "Course metadata (matches API metadata object)" });
 var CourseDefaults2 = exports_external2.object({
-  courseCode: exports_external2.string().optional(),
-  level: exports_external2.string().optional(),
+  courseCode: exports_external2.string().meta({ description: "Course code (e.g., 'MATH101')" }).optional(),
+  level: exports_external2.string().meta({ description: "Course level (e.g., 'AP', 'Honors')" }).optional(),
   metadata: CourseMetadata2.optional()
+}).meta({
+  id: "CourseDefaults",
+  description: "Default properties that apply to all courses unless overridden"
 });
 var CourseEnvOverrides2 = exports_external2.object({
-  level: exports_external2.string().optional(),
-  sensor: exports_external2.string().url().optional(),
-  launchUrl: exports_external2.string().url().optional(),
+  level: exports_external2.string().meta({ description: "Course level for this environment" }).optional(),
+  sensor: exports_external2.url().meta({ description: "Caliper sensor endpoint URL for this environment" }).optional(),
+  launchUrl: exports_external2.url().meta({ description: "LTI launch URL for this environment" }).optional(),
   metadata: CourseMetadata2.optional()
+}).meta({
+  id: "CourseEnvOverrides",
+  description: "Environment-specific course overrides (non-identity fields)"
 });
 var CourseOverrides2 = exports_external2.object({
-  staging: CourseEnvOverrides2.optional(),
-  production: CourseEnvOverrides2.optional()
-});
+  staging: CourseEnvOverrides2.meta({
+    description: "Overrides for staging environment"
+  }).optional(),
+  production: CourseEnvOverrides2.meta({
+    description: "Overrides for production environment"
+  }).optional()
+}).meta({ id: "CourseOverrides", description: "Per-environment course overrides" });
 var CourseConfig2 = CourseDefaults2.extend({
-  subject: TimebackSubject2,
-  grade: TimebackGrade2.optional(),
+  subject: TimebackSubject2.meta({ description: "Subject area for this course" }),
+  grade: TimebackGrade2.meta({
+    description: "Grade level (-1 = Pre-K, 0 = K, 1-12 = grades, 13 = AP)"
+  }).optional(),
   ids: CourseIds2.nullable().optional(),
-  sensor: exports_external2.string().url().optional(),
-  launchUrl: exports_external2.string().url().optional(),
+  sensor: exports_external2.url().meta({ description: "Caliper sensor endpoint URL for this course" }).optional(),
+  launchUrl: exports_external2.url().meta({ description: "LTI launch URL for this course" }).optional(),
   overrides: CourseOverrides2.optional()
+}).meta({
+  id: "CourseConfig",
+  description: "Configuration for a single course. Must have either grade or courseCode (or both)."
 });
 var TimebackConfig2 = exports_external2.object({
-  name: exports_external2.string().min(1, "App name is required"),
-  defaults: CourseDefaults2.optional(),
-  courses: exports_external2.array(CourseConfig2).min(1, "At least one course is required"),
-  sensor: exports_external2.string().url().optional(),
-  launchUrl: exports_external2.string().url().optional()
+  $schema: exports_external2.string().meta({ description: "JSON Schema reference for editor support" }).optional(),
+  name: exports_external2.string().min(1, "App name is required").meta({ description: "Display name for your app" }),
+  defaults: CourseDefaults2.meta({
+    description: "Default properties applied to all courses"
+  }).optional(),
+  courses: exports_external2.array(CourseConfig2).min(1, "At least one course is required").meta({ description: "Courses available in this app" }),
+  sensor: exports_external2.url().meta({ description: "Default Caliper sensor endpoint URL for all courses" }).optional(),
+  launchUrl: exports_external2.url().meta({ description: "Default LTI launch URL for all courses" }).optional()
+}).meta({
+  id: "TimebackConfig",
+  title: "Timeback Config",
+  description: "Configuration schema for timeback.config.json files"
 }).refine((config22) => {
   return config22.courses.every((c) => c.grade !== undefined || c.courseCode !== undefined);
 }, {
@@ -31650,14 +31706,20 @@ var TimebackConfig2 = exports_external2.object({
   message: "Duplicate courseCode found; each must be unique",
   path: ["courses"]
 }).refine((config22) => {
-  return config22.courses.every((c) => c.sensor !== undefined || config22.sensor !== undefined);
-}, {
-  message: "Each course must have an effective sensor; set a top-level `sensor` or per-course `sensor`",
-  path: ["courses"]
-}).refine((config22) => {
-  return config22.courses.every((c) => c.launchUrl !== undefined || config22.launchUrl !== undefined);
+  return config22.courses.every((c) => {
+    if (c.sensor !== undefined || config22.sensor !== undefined) {
+      return true;
+    }
+    const launchUrls = [
+      c.launchUrl,
+      config22.launchUrl,
+      c.overrides?.staging?.launchUrl,
+      c.overrides?.production?.launchUrl
+    ].filter(Boolean);
+    return launchUrls.length > 0;
+  });
 }, {
-  message: "Each course must have an effective launchUrl; set a top-level `launchUrl` or per-course `launchUrl`",
+  message: "Each course must have an effective sensor. Either set `sensor` explicitly (top-level or per-course), or provide a `launchUrl` so sensor can be derived from its origin.",
   path: ["courses"]
 });
 var EdubridgeDateString2 = exports_external2.union([IsoDateString2, IsoDateTimeString2]);
@@ -48735,7 +48797,7 @@ var TimebackSubject3 = exports_external3.enum([
   "Math",
   "None",
   "Other"
-]);
+]).meta({ id: "TimebackSubject", description: "Subject area" });
 var TimebackGrade3 = exports_external3.union([
   exports_external3.literal(-1),
   exports_external3.literal(0),
@@ -48752,7 +48814,10 @@ var TimebackGrade3 = exports_external3.union([
   exports_external3.literal(11),
   exports_external3.literal(12),
   exports_external3.literal(13)
-]);
+]).meta({
+  id: "TimebackGrade",
+  description: "Grade level (-1 = Pre-K, 0 = K, 1-12 = grades, 13 = AP)"
+});
 var ScoreStatus3 = exports_external3.enum([
   "exempt",
   "fully graded",
@@ -48982,62 +49047,84 @@ var CaliperListEventsParams3 = exports_external3.object({
   actorEmail: exports_external3.email().optional()
 }).strict();
 var CourseIds3 = exports_external3.object({
-  staging: exports_external3.string().optional(),
-  production: exports_external3.string().optional()
-});
-var CourseType3 = exports_external3.enum(["base", "hole-filling", "optional"]);
-var PublishStatus3 = exports_external3.enum(["draft", "testing", "published", "deactivated"]);
+  staging: exports_external3.string().meta({ description: "Course ID in staging environment" }).optional(),
+  production: exports_external3.string().meta({ description: "Course ID in production environment" }).optional()
+}).meta({ id: "CourseIds", description: "Environment-specific course IDs (populated by sync)" });
+var CourseType3 = exports_external3.enum(["base", "hole-filling", "optional"]).meta({ id: "CourseType", description: "Course classification type" });
+var PublishStatus3 = exports_external3.enum(["draft", "testing", "published", "deactivated"]).meta({ id: "PublishStatus", description: "Course publication status" });
 var CourseGoals3 = exports_external3.object({
-  dailyXp: exports_external3.number().int().positive().optional(),
-  dailyLessons: exports_external3.number().int().positive().optional(),
-  dailyActiveMinutes: exports_external3.number().int().positive().optional(),
-  dailyAccuracy: exports_external3.number().int().min(0).max(100).optional(),
-  dailyMasteredUnits: exports_external3.number().int().positive().optional()
-});
+  dailyXp: exports_external3.number().int().positive().meta({ description: "Target XP to earn per day" }).optional(),
+  dailyLessons: exports_external3.number().int().positive().meta({ description: "Target lessons to complete per day" }).optional(),
+  dailyActiveMinutes: exports_external3.number().int().positive().meta({ description: "Target active learning minutes per day" }).optional(),
+  dailyAccuracy: exports_external3.number().int().min(0).max(100).meta({ description: "Target accuracy percentage (0-100)" }).optional(),
+  dailyMasteredUnits: exports_external3.number().int().positive().meta({ description: "Target units to master per day" }).optional()
+}).meta({ id: "CourseGoals", description: "Daily learning goals for a course" });
 var CourseMetrics3 = exports_external3.object({
-  totalXp: exports_external3.number().int().positive().optional(),
-  totalLessons: exports_external3.number().int().positive().optional(),
-  totalGrades: exports_external3.number().int().positive().optional()
-});
+  totalXp: exports_external3.number().int().positive().meta({ description: "Total XP available in the course" }).optional(),
+  totalLessons: exports_external3.number().int().positive().meta({ description: "Total number of lessons/activities" }).optional(),
+  totalGrades: exports_external3.number().int().positive().meta({ description: "Total grade levels covered" }).optional()
+}).meta({ id: "CourseMetrics", description: "Aggregate metrics for a course" });
 var CourseMetadata3 = exports_external3.object({
   courseType: CourseType3.optional(),
-  isSupplemental: exports_external3.boolean().optional(),
-  isCustom: exports_external3.boolean().optional(),
+  isSupplemental: exports_external3.boolean().meta({ description: "Whether this is supplemental to a base course" }).optional(),
+  isCustom: exports_external3.boolean().meta({ description: "Whether this is a custom course for an individual student" }).optional(),
   publishStatus: PublishStatus3.optional(),
-  contactEmail: exports_external3.email().optional(),
-  primaryApp: exports_external3.string().optional(),
+  contactEmail: exports_external3.email().meta({ description: "Contact email for course issues" }).optional(),
+  primaryApp: exports_external3.string().meta({ description: "Primary application identifier" }).optional(),
   goals: CourseGoals3.optional(),
   metrics: CourseMetrics3.optional()
-});
+}).meta({ id: "CourseMetadata", description: "Course metadata (matches API metadata object)" });
 var CourseDefaults3 = exports_external3.object({
-  courseCode: exports_external3.string().optional(),
-  level: exports_external3.string().optional(),
+  courseCode: exports_external3.string().meta({ description: "Course code (e.g., 'MATH101')" }).optional(),
+  level: exports_external3.string().meta({ description: "Course level (e.g., 'AP', 'Honors')" }).optional(),
   metadata: CourseMetadata3.optional()
+}).meta({
+  id: "CourseDefaults",
+  description: "Default properties that apply to all courses unless overridden"
 });
 var CourseEnvOverrides3 = exports_external3.object({
-  level: exports_external3.string().optional(),
-  sensor: exports_external3.string().url().optional(),
-  launchUrl: exports_external3.string().url().optional(),
+  level: exports_external3.string().meta({ description: "Course level for this environment" }).optional(),
+  sensor: exports_external3.url().meta({ description: "Caliper sensor endpoint URL for this environment" }).optional(),
+  launchUrl: exports_external3.url().meta({ description: "LTI launch URL for this environment" }).optional(),
   metadata: CourseMetadata3.optional()
+}).meta({
+  id: "CourseEnvOverrides",
+  description: "Environment-specific course overrides (non-identity fields)"
 });
 var CourseOverrides3 = exports_external3.object({
-  staging: CourseEnvOverrides3.optional(),
-  production: CourseEnvOverrides3.optional()
-});
+  staging: CourseEnvOverrides3.meta({
+    description: "Overrides for staging environment"
+  }).optional(),
+  production: CourseEnvOverrides3.meta({
+    description: "Overrides for production environment"
+  }).optional()
+}).meta({ id: "CourseOverrides", description: "Per-environment course overrides" });
 var CourseConfig3 = CourseDefaults3.extend({
-  subject: TimebackSubject3,
-  grade: TimebackGrade3.optional(),
+  subject: TimebackSubject3.meta({ description: "Subject area for this course" }),
+  grade: TimebackGrade3.meta({
+    description: "Grade level (-1 = Pre-K, 0 = K, 1-12 = grades, 13 = AP)"
+  }).optional(),
   ids: CourseIds3.nullable().optional(),
-  sensor: exports_external3.string().url().optional(),
-  launchUrl: exports_external3.string().url().optional(),
+  sensor: exports_external3.url().meta({ description: "Caliper sensor endpoint URL for this course" }).optional(),
+  launchUrl: exports_external3.url().meta({ description: "LTI launch URL for this course" }).optional(),
   overrides: CourseOverrides3.optional()
+}).meta({
+  id: "CourseConfig",
+  description: "Configuration for a single course. Must have either grade or courseCode (or both)."
 });
 var TimebackConfig3 = exports_external3.object({
-  name: exports_external3.string().min(1, "App name is required"),
-  defaults: CourseDefaults3.optional(),
-  courses: exports_external3.array(CourseConfig3).min(1, "At least one course is required"),
-  sensor: exports_external3.string().url().optional(),
-  launchUrl: exports_external3.string().url().optional()
+  $schema: exports_external3.string().meta({ description: "JSON Schema reference for editor support" }).optional(),
+  name: exports_external3.string().min(1, "App name is required").meta({ description: "Display name for your app" }),
+  defaults: CourseDefaults3.meta({
+    description: "Default properties applied to all courses"
+  }).optional(),
+  courses: exports_external3.array(CourseConfig3).min(1, "At least one course is required").meta({ description: "Courses available in this app" }),
+  sensor: exports_external3.url().meta({ description: "Default Caliper sensor endpoint URL for all courses" }).optional(),
+  launchUrl: exports_external3.url().meta({ description: "Default LTI launch URL for all courses" }).optional()
+}).meta({
+  id: "TimebackConfig",
+  title: "Timeback Config",
+  description: "Configuration schema for timeback.config.json files"
 }).refine((config22) => {
   return config22.courses.every((c) => c.grade !== undefined || c.courseCode !== undefined);
 }, {
@@ -49058,14 +49145,20 @@ var TimebackConfig3 = exports_external3.object({
   message: "Duplicate courseCode found; each must be unique",
   path: ["courses"]
 }).refine((config22) => {
-  return config22.courses.every((c) => c.sensor !== undefined || config22.sensor !== undefined);
-}, {
-  message: "Each course must have an effective sensor; set a top-level `sensor` or per-course `sensor`",
-  path: ["courses"]
-}).refine((config22) => {
-  return config22.courses.every((c) => c.launchUrl !== undefined || config22.launchUrl !== undefined);
+  return config22.courses.every((c) => {
+    if (c.sensor !== undefined || config22.sensor !== undefined) {
+      return true;
+    }
+    const launchUrls = [
+      c.launchUrl,
+      config22.launchUrl,
+      c.overrides?.staging?.launchUrl,
+      c.overrides?.production?.launchUrl
+    ].filter(Boolean);
+    return launchUrls.length > 0;
+  });
 }, {
-  message: "Each course must have an effective launchUrl; set a top-level `launchUrl` or per-course `launchUrl`",
+  message: "Each course must have an effective sensor. Either set `sensor` explicitly (top-level or per-course), or provide a `launchUrl` so sensor can be derived from its origin.",
   path: ["courses"]
 });
 var EdubridgeDateString3 = exports_external3.union([IsoDateString3, IsoDateTimeString3]);
@@ -66342,7 +66435,7 @@ var TimebackSubject4 = exports_external4.enum([
   "Math",
   "None",
   "Other"
-]);
+]).meta({ id: "TimebackSubject", description: "Subject area" });
 var TimebackGrade4 = exports_external4.union([
   exports_external4.literal(-1),
   exports_external4.literal(0),
@@ -66359,7 +66452,10 @@ var TimebackGrade4 = exports_external4.union([
   exports_external4.literal(11),
   exports_external4.literal(12),
   exports_external4.literal(13)
-]);
+]).meta({
+  id: "TimebackGrade",
+  description: "Grade level (-1 = Pre-K, 0 = K, 1-12 = grades, 13 = AP)"
+});
 var ScoreStatus4 = exports_external4.enum([
   "exempt",
   "fully graded",
@@ -66589,62 +66685,84 @@ var CaliperListEventsParams4 = exports_external4.object({
   actorEmail: exports_external4.email().optional()
 }).strict();
 var CourseIds4 = exports_external4.object({
-  staging: exports_external4.string().optional(),
-  production: exports_external4.string().optional()
-});
-var CourseType4 = exports_external4.enum(["base", "hole-filling", "optional"]);
-var PublishStatus4 = exports_external4.enum(["draft", "testing", "published", "deactivated"]);
+  staging: exports_external4.string().meta({ description: "Course ID in staging environment" }).optional(),
+  production: exports_external4.string().meta({ description: "Course ID in production environment" }).optional()
+}).meta({ id: "CourseIds", description: "Environment-specific course IDs (populated by sync)" });
+var CourseType4 = exports_external4.enum(["base", "hole-filling", "optional"]).meta({ id: "CourseType", description: "Course classification type" });
+var PublishStatus4 = exports_external4.enum(["draft", "testing", "published", "deactivated"]).meta({ id: "PublishStatus", description: "Course publication status" });
 var CourseGoals4 = exports_external4.object({
-  dailyXp: exports_external4.number().int().positive().optional(),
-  dailyLessons: exports_external4.number().int().positive().optional(),
-  dailyActiveMinutes: exports_external4.number().int().positive().optional(),
-  dailyAccuracy: exports_external4.number().int().min(0).max(100).optional(),
-  dailyMasteredUnits: exports_external4.number().int().positive().optional()
-});
+  dailyXp: exports_external4.number().int().positive().meta({ description: "Target XP to earn per day" }).optional(),
+  dailyLessons: exports_external4.number().int().positive().meta({ description: "Target lessons to complete per day" }).optional(),
+  dailyActiveMinutes: exports_external4.number().int().positive().meta({ description: "Target active learning minutes per day" }).optional(),
+  dailyAccuracy: exports_external4.number().int().min(0).max(100).meta({ description: "Target accuracy percentage (0-100)" }).optional(),
+  dailyMasteredUnits: exports_external4.number().int().positive().meta({ description: "Target units to master per day" }).optional()
+}).meta({ id: "CourseGoals", description: "Daily learning goals for a course" });
 var CourseMetrics4 = exports_external4.object({
-  totalXp: exports_external4.number().int().positive().optional(),
-  totalLessons: exports_external4.number().int().positive().optional(),
-  totalGrades: exports_external4.number().int().positive().optional()
-});
+  totalXp: exports_external4.number().int().positive().meta({ description: "Total XP available in the course" }).optional(),
+  totalLessons: exports_external4.number().int().positive().meta({ description: "Total number of lessons/activities" }).optional(),
+  totalGrades: exports_external4.number().int().positive().meta({ description: "Total grade levels covered" }).optional()
+}).meta({ id: "CourseMetrics", description: "Aggregate metrics for a course" });
 var CourseMetadata4 = exports_external4.object({
   courseType: CourseType4.optional(),
-  isSupplemental: exports_external4.boolean().optional(),
-  isCustom: exports_external4.boolean().optional(),
+  isSupplemental: exports_external4.boolean().meta({ description: "Whether this is supplemental to a base course" }).optional(),
+  isCustom: exports_external4.boolean().meta({ description: "Whether this is a custom course for an individual student" }).optional(),
   publishStatus: PublishStatus4.optional(),
-  contactEmail: exports_external4.email().optional(),
-  primaryApp: exports_external4.string().optional(),
+  contactEmail: exports_external4.email().meta({ description: "Contact email for course issues" }).optional(),
+  primaryApp: exports_external4.string().meta({ description: "Primary application identifier" }).optional(),
   goals: CourseGoals4.optional(),
   metrics: CourseMetrics4.optional()
-});
+}).meta({ id: "CourseMetadata", description: "Course metadata (matches API metadata object)" });
 var CourseDefaults4 = exports_external4.object({
-  courseCode: exports_external4.string().optional(),
-  level: exports_external4.string().optional(),
+  courseCode: exports_external4.string().meta({ description: "Course code (e.g., 'MATH101')" }).optional(),
+  level: exports_external4.string().meta({ description: "Course level (e.g., 'AP', 'Honors')" }).optional(),
   metadata: CourseMetadata4.optional()
+}).meta({
+  id: "CourseDefaults",
+  description: "Default properties that apply to all courses unless overridden"
 });
 var CourseEnvOverrides4 = exports_external4.object({
-  level: exports_external4.string().optional(),
-  sensor: exports_external4.string().url().optional(),
-  launchUrl: exports_external4.string().url().optional(),
+  level: exports_external4.string().meta({ description: "Course level for this environment" }).optional(),
+  sensor: exports_external4.url().meta({ description: "Caliper sensor endpoint URL for this environment" }).optional(),
+  launchUrl: exports_external4.url().meta({ description: "LTI launch URL for this environment" }).optional(),
   metadata: CourseMetadata4.optional()
+}).meta({
+  id: "CourseEnvOverrides",
+  description: "Environment-specific course overrides (non-identity fields)"
 });
 var CourseOverrides4 = exports_external4.object({
-  staging: CourseEnvOverrides4.optional(),
-  production: CourseEnvOverrides4.optional()
-});
+  staging: CourseEnvOverrides4.meta({
+    description: "Overrides for staging environment"
+  }).optional(),
+  production: CourseEnvOverrides4.meta({
+    description: "Overrides for production environment"
+  }).optional()
+}).meta({ id: "CourseOverrides", description: "Per-environment course overrides" });
 var CourseConfig4 = CourseDefaults4.extend({
-  subject: TimebackSubject4,
-  grade: TimebackGrade4.optional(),
+  subject: TimebackSubject4.meta({ description: "Subject area for this course" }),
+  grade: TimebackGrade4.meta({
+    description: "Grade level (-1 = Pre-K, 0 = K, 1-12 = grades, 13 = AP)"
+  }).optional(),
   ids: CourseIds4.nullable().optional(),
-  sensor: exports_external4.string().url().optional(),
-  launchUrl: exports_external4.string().url().optional(),
+  sensor: exports_external4.url().meta({ description: "Caliper sensor endpoint URL for this course" }).optional(),
+  launchUrl: exports_external4.url().meta({ description: "LTI launch URL for this course" }).optional(),
   overrides: CourseOverrides4.optional()
+}).meta({
+  id: "CourseConfig",
+  description: "Configuration for a single course. Must have either grade or courseCode (or both)."
 });
 var TimebackConfig4 = exports_external4.object({
-  name: exports_external4.string().min(1, "App name is required"),
-  defaults: CourseDefaults4.optional(),
-  courses: exports_external4.array(CourseConfig4).min(1, "At least one course is required"),
-  sensor: exports_external4.string().url().optional(),
-  launchUrl: exports_external4.string().url().optional()
+  $schema: exports_external4.string().meta({ description: "JSON Schema reference for editor support" }).optional(),
+  name: exports_external4.string().min(1, "App name is required").meta({ description: "Display name for your app" }),
+  defaults: CourseDefaults4.meta({
+    description: "Default properties applied to all courses"
+  }).optional(),
+  courses: exports_external4.array(CourseConfig4).min(1, "At least one course is required").meta({ description: "Courses available in this app" }),
+  sensor: exports_external4.url().meta({ description: "Default Caliper sensor endpoint URL for all courses" }).optional(),
+  launchUrl: exports_external4.url().meta({ description: "Default LTI launch URL for all courses" }).optional()
+}).meta({
+  id: "TimebackConfig",
+  title: "Timeback Config",
+  description: "Configuration schema for timeback.config.json files"
 }).refine((config22) => {
   return config22.courses.every((c) => c.grade !== undefined || c.courseCode !== undefined);
 }, {
@@ -66665,14 +66783,20 @@ var TimebackConfig4 = exports_external4.object({
   message: "Duplicate courseCode found; each must be unique",
   path: ["courses"]
 }).refine((config22) => {
-  return config22.courses.every((c) => c.sensor !== undefined || config22.sensor !== undefined);
-}, {
-  message: "Each course must have an effective sensor; set a top-level `sensor` or per-course `sensor`",
-  path: ["courses"]
-}).refine((config22) => {
-  return config22.courses.every((c) => c.launchUrl !== undefined || config22.launchUrl !== undefined);
+  return config22.courses.every((c) => {
+    if (c.sensor !== undefined || config22.sensor !== undefined) {
+      return true;
+    }
+    const launchUrls = [
+      c.launchUrl,
+      config22.launchUrl,
+      c.overrides?.staging?.launchUrl,
+      c.overrides?.production?.launchUrl
+    ].filter(Boolean);
+    return launchUrls.length > 0;
+  });
 }, {
-  message: "Each course must have an effective launchUrl; set a top-level `launchUrl` or per-course `launchUrl`",
+  message: "Each course must have an effective sensor. Either set `sensor` explicitly (top-level or per-course), or provide a `launchUrl` so sensor can be derived from its origin.",
   path: ["courses"]
 });
 var EdubridgeDateString4 = exports_external4.union([IsoDateString4, IsoDateTimeString4]);
@@ -82979,7 +83103,7 @@ var TimebackSubject5 = exports_external5.enum([
   "Math",
   "None",
   "Other"
-]);
+]).meta({ id: "TimebackSubject", description: "Subject area" });
 var TimebackGrade5 = exports_external5.union([
   exports_external5.literal(-1),
   exports_external5.literal(0),
@@ -82996,7 +83120,10 @@ var TimebackGrade5 = exports_external5.union([
   exports_external5.literal(11),
   exports_external5.literal(12),
   exports_external5.literal(13)
-]);
+]).meta({
+  id: "TimebackGrade",
+  description: "Grade level (-1 = Pre-K, 0 = K, 1-12 = grades, 13 = AP)"
+});
 var ScoreStatus5 = exports_external5.enum([
   "exempt",
   "fully graded",
@@ -83226,62 +83353,84 @@ var CaliperListEventsParams5 = exports_external5.object({
   actorEmail: exports_external5.email().optional()
 }).strict();
 var CourseIds5 = exports_external5.object({
-  staging: exports_external5.string().optional(),
-  production: exports_external5.string().optional()
-});
-var CourseType5 = exports_external5.enum(["base", "hole-filling", "optional"]);
-var PublishStatus5 = exports_external5.enum(["draft", "testing", "published", "deactivated"]);
+  staging: exports_external5.string().meta({ description: "Course ID in staging environment" }).optional(),
+  production: exports_external5.string().meta({ description: "Course ID in production environment" }).optional()
+}).meta({ id: "CourseIds", description: "Environment-specific course IDs (populated by sync)" });
+var CourseType5 = exports_external5.enum(["base", "hole-filling", "optional"]).meta({ id: "CourseType", description: "Course classification type" });
+var PublishStatus5 = exports_external5.enum(["draft", "testing", "published", "deactivated"]).meta({ id: "PublishStatus", description: "Course publication status" });
 var CourseGoals5 = exports_external5.object({
-  dailyXp: exports_external5.number().int().positive().optional(),
-  dailyLessons: exports_external5.number().int().positive().optional(),
-  dailyActiveMinutes: exports_external5.number().int().positive().optional(),
-  dailyAccuracy: exports_external5.number().int().min(0).max(100).optional(),
-  dailyMasteredUnits: exports_external5.number().int().positive().optional()
-});
+  dailyXp: exports_external5.number().int().positive().meta({ description: "Target XP to earn per day" }).optional(),
+  dailyLessons: exports_external5.number().int().positive().meta({ description: "Target lessons to complete per day" }).optional(),
+  dailyActiveMinutes: exports_external5.number().int().positive().meta({ description: "Target active learning minutes per day" }).optional(),
+  dailyAccuracy: exports_external5.number().int().min(0).max(100).meta({ description: "Target accuracy percentage (0-100)" }).optional(),
+  dailyMasteredUnits: exports_external5.number().int().positive().meta({ description: "Target units to master per day" }).optional()
+}).meta({ id: "CourseGoals", description: "Daily learning goals for a course" });
 var CourseMetrics5 = exports_external5.object({
-  totalXp: exports_external5.number().int().positive().optional(),
-  totalLessons: exports_external5.number().int().positive().optional(),
-  totalGrades: exports_external5.number().int().positive().optional()
-});
+  totalXp: exports_external5.number().int().positive().meta({ description: "Total XP available in the course" }).optional(),
+  totalLessons: exports_external5.number().int().positive().meta({ description: "Total number of lessons/activities" }).optional(),
+  totalGrades: exports_external5.number().int().positive().meta({ description: "Total grade levels covered" }).optional()
+}).meta({ id: "CourseMetrics", description: "Aggregate metrics for a course" });
 var CourseMetadata5 = exports_external5.object({
   courseType: CourseType5.optional(),
-  isSupplemental: exports_external5.boolean().optional(),
-  isCustom: exports_external5.boolean().optional(),
+  isSupplemental: exports_external5.boolean().meta({ description: "Whether this is supplemental to a base course" }).optional(),
+  isCustom: exports_external5.boolean().meta({ description: "Whether this is a custom course for an individual student" }).optional(),
   publishStatus: PublishStatus5.optional(),
-  contactEmail: exports_external5.email().optional(),
-  primaryApp: exports_external5.string().optional(),
+  contactEmail: exports_external5.email().meta({ description: "Contact email for course issues" }).optional(),
+  primaryApp: exports_external5.string().meta({ description: "Primary application identifier" }).optional(),
   goals: CourseGoals5.optional(),
   metrics: CourseMetrics5.optional()
-});
+}).meta({ id: "CourseMetadata", description: "Course metadata (matches API metadata object)" });
 var CourseDefaults5 = exports_external5.object({
-  courseCode: exports_external5.string().optional(),
-  level: exports_external5.string().optional(),
+  courseCode: exports_external5.string().meta({ description: "Course code (e.g., 'MATH101')" }).optional(),
+  level: exports_external5.string().meta({ description: "Course level (e.g., 'AP', 'Honors')" }).optional(),
   metadata: CourseMetadata5.optional()
+}).meta({
+  id: "CourseDefaults",
+  description: "Default properties that apply to all courses unless overridden"
 });
 var CourseEnvOverrides5 = exports_external5.object({
-  level: exports_external5.string().optional(),
-  sensor: exports_external5.string().url().optional(),
-  launchUrl: exports_external5.string().url().optional(),
+  level: exports_external5.string().meta({ description: "Course level for this environment" }).optional(),
+  sensor: exports_external5.url().meta({ description: "Caliper sensor endpoint URL for this environment" }).optional(),
+  launchUrl: exports_external5.url().meta({ description: "LTI launch URL for this environment" }).optional(),
   metadata: CourseMetadata5.optional()
+}).meta({
+  id: "CourseEnvOverrides",
+  description: "Environment-specific course overrides (non-identity fields)"
 });
 var CourseOverrides5 = exports_external5.object({
-  staging: CourseEnvOverrides5.optional(),
-  production: CourseEnvOverrides5.optional()
-});
+  staging: CourseEnvOverrides5.meta({
+    description: "Overrides for staging environment"
+  }).optional(),
+  production: CourseEnvOverrides5.meta({
+    description: "Overrides for production environment"
+  }).optional()
+}).meta({ id: "CourseOverrides", description: "Per-environment course overrides" });
 var CourseConfig5 = CourseDefaults5.extend({
-  subject: TimebackSubject5,
-  grade: TimebackGrade5.optional(),
+  subject: TimebackSubject5.meta({ description: "Subject area for this course" }),
+  grade: TimebackGrade5.meta({
+    description: "Grade level (-1 = Pre-K, 0 = K, 1-12 = grades, 13 = AP)"
+  }).optional(),
   ids: CourseIds5.nullable().optional(),
-  sensor: exports_external5.string().url().optional(),
-  launchUrl: exports_external5.string().url().optional(),
+  sensor: exports_external5.url().meta({ description: "Caliper sensor endpoint URL for this course" }).optional(),
+  launchUrl: exports_external5.url().meta({ description: "LTI launch URL for this course" }).optional(),
   overrides: CourseOverrides5.optional()
+}).meta({
+  id: "CourseConfig",
+  description: "Configuration for a single course. Must have either grade or courseCode (or both)."
 });
 var TimebackConfig5 = exports_external5.object({
-  name: exports_external5.string().min(1, "App name is required"),
-  defaults: CourseDefaults5.optional(),
-  courses: exports_external5.array(CourseConfig5).min(1, "At least one course is required"),
-  sensor: exports_external5.string().url().optional(),
-  launchUrl: exports_external5.string().url().optional()
+  $schema: exports_external5.string().meta({ description: "JSON Schema reference for editor support" }).optional(),
+  name: exports_external5.string().min(1, "App name is required").meta({ description: "Display name for your app" }),
+  defaults: CourseDefaults5.meta({
+    description: "Default properties applied to all courses"
+  }).optional(),
+  courses: exports_external5.array(CourseConfig5).min(1, "At least one course is required").meta({ description: "Courses available in this app" }),
+  sensor: exports_external5.url().meta({ description: "Default Caliper sensor endpoint URL for all courses" }).optional(),
+  launchUrl: exports_external5.url().meta({ description: "Default LTI launch URL for all courses" }).optional()
+}).meta({
+  id: "TimebackConfig",
+  title: "Timeback Config",
+  description: "Configuration schema for timeback.config.json files"
 }).refine((config22) => {
   return config22.courses.every((c) => c.grade !== undefined || c.courseCode !== undefined);
 }, {
@@ -83302,14 +83451,20 @@ var TimebackConfig5 = exports_external5.object({
   message: "Duplicate courseCode found; each must be unique",
   path: ["courses"]
 }).refine((config22) => {
-  return config22.courses.every((c) => c.sensor !== undefined || config22.sensor !== undefined);
-}, {
-  message: "Each course must have an effective sensor; set a top-level `sensor` or per-course `sensor`",
-  path: ["courses"]
-}).refine((config22) => {
-  return config22.courses.every((c) => c.launchUrl !== undefined || config22.launchUrl !== undefined);
+  return config22.courses.every((c) => {
+    if (c.sensor !== undefined || config22.sensor !== undefined) {
+      return true;
+    }
+    const launchUrls = [
+      c.launchUrl,
+      config22.launchUrl,
+      c.overrides?.staging?.launchUrl,
+      c.overrides?.production?.launchUrl
+    ].filter(Boolean);
+    return launchUrls.length > 0;
+  });
 }, {
-  message: "Each course must have an effective launchUrl; set a top-level `launchUrl` or per-course `launchUrl`",
+  message: "Each course must have an effective sensor. Either set `sensor` explicitly (top-level or per-course), or provide a `launchUrl` so sensor can be derived from its origin.",
   path: ["courses"]
 });
 var EdubridgeDateString5 = exports_external5.union([IsoDateString5, IsoDateTimeString5]);
@@ -85060,8 +85215,8 @@ var {
 
 // ../internal/cli-infra/src/config/timeback.ts
 import { existsSync } from "node:fs";
-import { basename, relative, resolve } from "node:path";
-import { pathToFileURL } from "node:url";
+import { basename, extname, relative, resolve } from "node:path";
+import { loadConfig as c12LoadConfig } from "c12";
 
 // ../types/src/zod/primitives.ts
 import { z as z6 } from "zod/v4";
@@ -85079,7 +85234,7 @@ var TimebackSubject6 = z6.enum([
   "Math",
   "None",
   "Other"
-]);
+]).meta({ id: "TimebackSubject", description: "Subject area" });
 var TimebackGrade6 = z6.union([
   z6.literal(-1),
   z6.literal(0),
@@ -85096,7 +85251,10 @@ var TimebackGrade6 = z6.union([
   z6.literal(11),
   z6.literal(12),
   z6.literal(13)
-]);
+]).meta({
+  id: "TimebackGrade",
+  description: "Grade level (-1 = Pre-K, 0 = K, 1-12 = grades, 13 = AP)"
+});
 var ScoreStatus6 = z6.enum([
   "exempt",
   "fully graded",
@@ -85330,62 +85488,84 @@ var CaliperListEventsParams6 = z8.object({
 // ../types/src/zod/config.ts
 import { z as z9 } from "zod/v4";
 var CourseIds6 = z9.object({
-  staging: z9.string().optional(),
-  production: z9.string().optional()
-});
-var CourseType6 = z9.enum(["base", "hole-filling", "optional"]);
-var PublishStatus6 = z9.enum(["draft", "testing", "published", "deactivated"]);
+  staging: z9.string().meta({ description: "Course ID in staging environment" }).optional(),
+  production: z9.string().meta({ description: "Course ID in production environment" }).optional()
+}).meta({ id: "CourseIds", description: "Environment-specific course IDs (populated by sync)" });
+var CourseType6 = z9.enum(["base", "hole-filling", "optional"]).meta({ id: "CourseType", description: "Course classification type" });
+var PublishStatus6 = z9.enum(["draft", "testing", "published", "deactivated"]).meta({ id: "PublishStatus", description: "Course publication status" });
 var CourseGoals6 = z9.object({
-  dailyXp: z9.number().int().positive().optional(),
-  dailyLessons: z9.number().int().positive().optional(),
-  dailyActiveMinutes: z9.number().int().positive().optional(),
-  dailyAccuracy: z9.number().int().min(0).max(100).optional(),
-  dailyMasteredUnits: z9.number().int().positive().optional()
-});
+  dailyXp: z9.number().int().positive().meta({ description: "Target XP to earn per day" }).optional(),
+  dailyLessons: z9.number().int().positive().meta({ description: "Target lessons to complete per day" }).optional(),
+  dailyActiveMinutes: z9.number().int().positive().meta({ description: "Target active learning minutes per day" }).optional(),
+  dailyAccuracy: z9.number().int().min(0).max(100).meta({ description: "Target accuracy percentage (0-100)" }).optional(),
+  dailyMasteredUnits: z9.number().int().positive().meta({ description: "Target units to master per day" }).optional()
+}).meta({ id: "CourseGoals", description: "Daily learning goals for a course" });
 var CourseMetrics6 = z9.object({
-  totalXp: z9.number().int().positive().optional(),
-  totalLessons: z9.number().int().positive().optional(),
-  totalGrades: z9.number().int().positive().optional()
-});
+  totalXp: z9.number().int().positive().meta({ description: "Total XP available in the course" }).optional(),
+  totalLessons: z9.number().int().positive().meta({ description: "Total number of lessons/activities" }).optional(),
+  totalGrades: z9.number().int().positive().meta({ description: "Total grade levels covered" }).optional()
+}).meta({ id: "CourseMetrics", description: "Aggregate metrics for a course" });
 var CourseMetadata6 = z9.object({
   courseType: CourseType6.optional(),
-  isSupplemental: z9.boolean().optional(),
-  isCustom: z9.boolean().optional(),
+  isSupplemental: z9.boolean().meta({ description: "Whether this is supplemental to a base course" }).optional(),
+  isCustom: z9.boolean().meta({ description: "Whether this is a custom course for an individual student" }).optional(),
   publishStatus: PublishStatus6.optional(),
-  contactEmail: z9.email().optional(),
-  primaryApp: z9.string().optional(),
+  contactEmail: z9.email().meta({ description: "Contact email for course issues" }).optional(),
+  primaryApp: z9.string().meta({ description: "Primary application identifier" }).optional(),
   goals: CourseGoals6.optional(),
   metrics: CourseMetrics6.optional()
-});
+}).meta({ id: "CourseMetadata", description: "Course metadata (matches API metadata object)" });
 var CourseDefaults6 = z9.object({
-  courseCode: z9.string().optional(),
-  level: z9.string().optional(),
+  courseCode: z9.string().meta({ description: "Course code (e.g., 'MATH101')" }).optional(),
+  level: z9.string().meta({ description: "Course level (e.g., 'AP', 'Honors')" }).optional(),
   metadata: CourseMetadata6.optional()
+}).meta({
+  id: "CourseDefaults",
+  description: "Default properties that apply to all courses unless overridden"
 });
 var CourseEnvOverrides6 = z9.object({
-  level: z9.string().optional(),
-  sensor: z9.string().url().optional(),
-  launchUrl: z9.string().url().optional(),
+  level: z9.string().meta({ description: "Course level for this environment" }).optional(),
+  sensor: z9.url().meta({ description: "Caliper sensor endpoint URL for this environment" }).optional(),
+  launchUrl: z9.url().meta({ description: "LTI launch URL for this environment" }).optional(),
   metadata: CourseMetadata6.optional()
+}).meta({
+  id: "CourseEnvOverrides",
+  description: "Environment-specific course overrides (non-identity fields)"
 });
 var CourseOverrides6 = z9.object({
-  staging: CourseEnvOverrides6.optional(),
-  production: CourseEnvOverrides6.optional()
-});
+  staging: CourseEnvOverrides6.meta({
+    description: "Overrides for staging environment"
+  }).optional(),
+  production: CourseEnvOverrides6.meta({
+    description: "Overrides for production environment"
+  }).optional()
+}).meta({ id: "CourseOverrides", description: "Per-environment course overrides" });
 var CourseConfig6 = CourseDefaults6.extend({
-  subject: TimebackSubject6,
-  grade: TimebackGrade6.optional(),
+  subject: TimebackSubject6.meta({ description: "Subject area for this course" }),
+  grade: TimebackGrade6.meta({
+    description: "Grade level (-1 = Pre-K, 0 = K, 1-12 = grades, 13 = AP)"
+  }).optional(),
   ids: CourseIds6.nullable().optional(),
-  sensor: z9.string().url().optional(),
-  launchUrl: z9.string().url().optional(),
+  sensor: z9.url().meta({ description: "Caliper sensor endpoint URL for this course" }).optional(),
+  launchUrl: z9.url().meta({ description: "LTI launch URL for this course" }).optional(),
   overrides: CourseOverrides6.optional()
+}).meta({
+  id: "CourseConfig",
+  description: "Configuration for a single course. Must have either grade or courseCode (or both)."
 });
 var TimebackConfig6 = z9.object({
-  name: z9.string().min(1, "App name is required"),
-  defaults: CourseDefaults6.optional(),
-  courses: z9.array(CourseConfig6).min(1, "At least one course is required"),
-  sensor: z9.string().url().optional(),
-  launchUrl: z9.string().url().optional()
+  $schema: z9.string().meta({ description: "JSON Schema reference for editor support" }).optional(),
+  name: z9.string().min(1, "App name is required").meta({ description: "Display name for your app" }),
+  defaults: CourseDefaults6.meta({
+    description: "Default properties applied to all courses"
+  }).optional(),
+  courses: z9.array(CourseConfig6).min(1, "At least one course is required").meta({ description: "Courses available in this app" }),
+  sensor: z9.url().meta({ description: "Default Caliper sensor endpoint URL for all courses" }).optional(),
+  launchUrl: z9.url().meta({ description: "Default LTI launch URL for all courses" }).optional()
+}).meta({
+  id: "TimebackConfig",
+  title: "Timeback Config",
+  description: "Configuration schema for timeback.config.json files"
 }).refine((config6) => {
   return config6.courses.every((c) => c.grade !== undefined || c.courseCode !== undefined);
 }, {
@@ -85406,14 +85586,20 @@ var TimebackConfig6 = z9.object({
   message: "Duplicate courseCode found; each must be unique",
   path: ["courses"]
 }).refine((config6) => {
-  return config6.courses.every((c) => c.sensor !== undefined || config6.sensor !== undefined);
-}, {
-  message: "Each course must have an effective sensor; set a top-level `sensor` or per-course `sensor`",
-  path: ["courses"]
-}).refine((config6) => {
-  return config6.courses.every((c) => c.launchUrl !== undefined || config6.launchUrl !== undefined);
+  return config6.courses.every((c) => {
+    if (c.sensor !== undefined || config6.sensor !== undefined) {
+      return true;
+    }
+    const launchUrls = [
+      c.launchUrl,
+      config6.launchUrl,
+      c.overrides?.staging?.launchUrl,
+      c.overrides?.production?.launchUrl
+    ].filter(Boolean);
+    return launchUrls.length > 0;
+  });
 }, {
-  message: "Each course must have an effective launchUrl; set a top-level `launchUrl` or per-course `launchUrl`",
+  message: "Each course must have an effective sensor. Either set `sensor` explicitly (top-level or per-course), or provide a `launchUrl` so sensor can be derived from its origin.",
   path: ["courses"]
 });
 // ../types/src/zod/edubridge.ts
@@ -86433,108 +86619,89 @@ var CREDENTIALS_DIR = getConfigDir();
 var CREDENTIALS_FILE = join(CREDENTIALS_DIR, "credentials.json");
 
 // ../internal/cli-infra/src/config/timeback.ts
-var FILE_PATTERNS = ["timeback.config.ts", "timeback.config.js", "timeback.config.mjs"];
-var isBun = typeof globalThis.Bun !== "undefined";
-var jitiInstance = null;
-async function getJiti() {
-  if (jitiInstance)
-    return jitiInstance;
-  const { createJiti } = await import("jiti");
-  jitiInstance = createJiti(import.meta.url, { fsCache: false });
-  return jitiInstance;
-}
-async function importModule(fullPath) {
-  let module;
-  if (isBun) {
-    const fileUrl = pathToFileURL(fullPath).href;
-    module = await import(fileUrl);
-  } else {
-    const jiti = await getJiti();
-    module = await jiti.import(fullPath);
-  }
-  return module.default ?? module;
+var CONFIG_FILENAME = "timeback.config.json";
+function isJsonConfigPath(configPath) {
+  return extname(configPath).toLowerCase() === ".json";
+}
+async function loadWithC12(cwd, configPath) {
+  if (configPath && !isJsonConfigPath(configPath)) {
+    throw new Error(`Config file must be JSON (.json): ${configPath}`);
+  }
+  const result = await c12LoadConfig({
+    cwd,
+    name: "timeback",
+    configFile: configPath ?? CONFIG_FILENAME,
+    rcFile: false,
+    packageJson: false,
+    dotenv: false,
+    envName: false,
+    extend: false,
+    omit$Keys: true,
+    defaults: {},
+    overrides: {}
+  });
+  if (!result.config || Object.keys(result.config).length === 0) {
+    return null;
+  }
+  const rawConfig = result.config;
+  if ("extends" in rawConfig) {
+    throw new Error("The 'extends' feature is not supported in timeback.config.json. " + "Please inline all configuration.");
+  }
+  const { $schema: _schema, ...configWithoutSchema } = rawConfig;
+  return {
+    config: configWithoutSchema,
+    configFile: result.configFile ?? resolve(cwd, configPath ?? CONFIG_FILENAME)
+  };
 }
 async function loadConfig(opts = {}) {
   const cwd = process.cwd();
-  let rawConfig = null;
-  let foundPath = null;
-  let loadError = null;
-  if (opts.configPath) {
-    const fullPath = resolve(cwd, opts.configPath);
-    if (!existsSync(fullPath)) {
+  try {
+    if (opts.configPath && !isJsonConfigPath(opts.configPath)) {
       return {
         success: false,
-        error: `Config file not found: ${opts.configPath}`
+        error: `Config file must be JSON (.json): ${opts.configPath}`
       };
     }
-    try {
-      rawConfig = await importModule(fullPath);
-      foundPath = fullPath;
-    } catch (err) {
+    if (opts.configPath) {
+      const fullPath = resolve(cwd, opts.configPath);
+      if (!existsSync(fullPath)) {
+        return {
+          success: false,
+          error: `Config file not found: ${opts.configPath}`
+        };
+      }
+    }
+    const loaded = await loadWithC12(cwd, opts.configPath);
+    if (!loaded) {
       return {
         success: false,
-        error: `Failed to load ${opts.configPath}:
-${err instanceof Error ? err.message : String(err)}`
+        error: `No timeback config found. Run ${greenBright("timeback init")} to create one.`
       };
     }
-  } else {
-    for (const filename of FILE_PATTERNS) {
-      const fullPath = resolve(cwd, filename);
-      if (!existsSync(fullPath))
-        continue;
-      try {
-        rawConfig = await importModule(fullPath);
-        foundPath = fullPath;
-        break;
-      } catch (err) {
-        loadError = err instanceof Error ? err : new Error(String(err));
-        foundPath = fullPath;
-        break;
-      }
+    const result = TimebackConfig6.safeParse(loaded.config);
+    if (!result.success) {
+      const issues = result.error.issues.map((issue4) => `  - ${issue4.path.join(".")}: ${issue4.message}`).join(`
+`);
+      return {
+        success: false,
+        error: `Invalid config in ${basename(loaded.configFile)}:
+${issues}`
+      };
     }
-  }
-  if (loadError && foundPath) {
     return {
-      success: false,
-      error: `Failed to load ${basename(foundPath)}:
-${loadError.message}`
+      success: true,
+      config: result.data,
+      configPath: loaded.configFile
     };
-  }
-  if (!rawConfig || !foundPath) {
-    return {
-      success: false,
-      error: `No timeback config found. Run ${greenBright("timeback init")} to create one.`
-    };
-  }
-  const result = TimebackConfig6.safeParse(rawConfig);
-  if (!result.success) {
-    const issues = result.error.issues.map((issue4) => `  - ${issue4.path.join(".")}: ${issue4.message}`).join(`
-`);
+  } catch (err) {
+    const filename = opts.configPath ? basename(opts.configPath) : CONFIG_FILENAME;
     return {
       success: false,
-      error: `Invalid config in ${basename(foundPath)}:
-${issues}`
+      error: `Failed to load ${filename}:
+${err instanceof Error ? err.message : String(err)}`
     };
   }
-  return {
-    success: true,
-    config: result.data,
-    configPath: foundPath
-  };
 }
-// src/shared/constants.ts
-var ROUTES = {
-  ACTIVITY: "/activity",
-  IDENTITY: {
-    SIGNIN: "/identity/signin",
-    SIGNOUT: "/identity/signout",
-    CALLBACK: "/identity/callback"
-  },
-  USER: {
-    ME: "/user/me"
-  }
-};
-
 // ../internal/logger/src/debug.ts
 var patterns7 = null;
 var debugAll7 = false;
@@ -86952,12 +87119,32 @@ async function getUserInfo(params) {
   return response.json();
 }
 // src/server/lib/utils.ts
+function safeIdSegment(value) {
+  return encodeURIComponent(value).replace(/%/g, "_");
+}
+function hashSuffix64Base36(value) {
+  let hash6 = 0xcbf29ce484222325n;
+  const prime = 0x100000001b3n;
+  const mod64 = 0xffffffffffffffffn;
+  for (let i = 0;i < value.length; i++) {
+    hash6 ^= BigInt(value.charCodeAt(i));
+    hash6 = hash6 * prime & mod64;
+  }
+  const base36 = hash6.toString(36);
+  return base36.length > 12 ? base36.slice(-12) : base36;
+}
 function mapEnvForApi(env2) {
   if (env2 === "local" || env2 === "staging") {
     return "staging";
   }
   return "production";
 }
+function normalizeEnv(env2) {
+  if (env2 === "production" || env2 === "local" || env2 === "staging") {
+    return env2;
+  }
+  return "staging";
+}
 function jsonResponse(data, status = 200, headers) {
   const responseHeaders = new Headers(headers);
   responseHeaders.set("Content-Type", "application/json");
@@ -87092,164 +87279,21 @@ async function lookupTimebackIdByEmail(params) {
     throw new TimebackUserResolutionError(`Failed to lookup Timeback user: ${message}`, "timeback_user_lookup_failed");
   }
 }
-
-class ActivityCourseResolutionError extends Error {
-  code;
-  selector;
-  count;
-  constructor(code, selector, count) {
-    super(code);
-    this.code = code;
-    this.selector = selector;
-    this.count = count;
-  }
-  get selectorDescription() {
-    if ("grade" in this.selector) {
-      return `${this.selector.subject} grade ${this.selector.grade}`;
-    }
-    return `code "${this.selector.code}"`;
-  }
-}
-function resolveActivityCourse(courses, courseRef) {
-  let matches;
-  if ("grade" in courseRef) {
-    matches = courses.filter((c) => c.subject === courseRef.subject && c.grade === courseRef.grade);
-  } else {
-    matches = courses.filter((c) => c.courseCode === courseRef.code);
-  }
-  if (matches.length === 0) {
-    throw new ActivityCourseResolutionError("unknown_course", courseRef);
-  }
-  if (matches.length > 1) {
-    throw new ActivityCourseResolutionError("ambiguous_course", courseRef, matches.length);
-  }
-  return matches[0];
-}
-// src/server/lib/build-activity-events.ts
-class MissingSyncedCourseIdError extends Error {
-  course;
-  env;
-  constructor(course, env2) {
-    const identifier = course.grade === undefined ? course.courseCode ?? course.subject : `${course.subject} grade ${course.grade}`;
-    super(`Course "${identifier}" is missing a synced ID for ${env2}. Run \`timeback sync\` first.`);
-    this.name = "MissingSyncedCourseIdError";
-    this.course = course;
-    this.env = env2;
-  }
-}
-function buildCourseId(course, apiEnv) {
-  const courseId = course.ids?.[apiEnv];
-  if (!courseId) {
-    throw new MissingSyncedCourseIdError(course, apiEnv);
-  }
-  return courseId;
-}
-function buildCourseName(course) {
-  if (course.courseCode) {
-    return course.courseCode;
-  }
-  if (course.grade !== undefined) {
-    return `${course.subject} G${String(course.grade)}`;
+// src/shared/constants.ts
+var ROUTES = {
+  ACTIVITY: "/activity",
+  IDENTITY: {
+    SIGNIN: "/identity/signin",
+    SIGNOUT: "/identity/signout",
+    CALLBACK: "/identity/callback"
+  },
+  USER: {
+    ME: "/user/me",
+    VERIFY: "/user/verify"
   }
-  return course.subject;
-}
+};
 
-class InvalidSensorUrlError extends Error {
-  sensor;
-  constructor(sensor) {
-    super(`Invalid sensor URL "${sensor}". Sensor must be a valid absolute URL (e.g., "https://sensor.example.com") to support slug-based activity IDs.`);
-    this.name = "InvalidSensorUrlError";
-    this.sensor = sensor;
-  }
-}
-function buildCanonicalActivityUrl(sensor, selector, slug) {
-  let base;
-  try {
-    base = new URL(sensor);
-  } catch {
-    throw new InvalidSensorUrlError(sensor);
-  }
-  const pathSegment = "grade" in selector ? `${selector.subject}/g${String(selector.grade)}` : selector.code;
-  const basePath = base.pathname.replace(/\/+$/, "");
-  base.pathname = `${basePath}/activities/${pathSegment}/${encodeURIComponent(slug)}`;
-  return base.toString();
-}
-function buildActivityContext(payload, course, appName, apiEnv, sensor) {
-  return {
-    id: buildCanonicalActivityUrl(sensor, payload.course, payload.id),
-    type: "TimebackActivityContext",
-    subject: course.subject,
-    app: { name: appName },
-    activity: { name: payload.name },
-    course: {
-      id: buildCourseId(course, apiEnv),
-      name: buildCourseName(course)
-    }
-  };
-}
-function buildActivityMetrics(metrics) {
-  const result = [];
-  if (metrics.totalQuestions !== undefined) {
-    result.push({ type: "totalQuestions", value: metrics.totalQuestions });
-  }
-  if (metrics.correctQuestions !== undefined) {
-    result.push({ type: "correctQuestions", value: metrics.correctQuestions });
-  }
-  if (metrics.xpEarned !== undefined) {
-    result.push({ type: "xpEarned", value: metrics.xpEarned });
-  }
-  if (metrics.masteredUnits !== undefined) {
-    result.push({ type: "masteredUnits", value: metrics.masteredUnits });
-  }
-  return result;
-}
-function buildTimeSpentMetrics(elapsedMs, pausedMs) {
-  const result = [{ type: "active", value: Math.max(0, elapsedMs) / 1000 }];
-  if (pausedMs > 0) {
-    result.push({ type: "inactive", value: Math.max(0, pausedMs) / 1000 });
-  }
-  return result;
-}
-async function sendCaliperEnvelope(client, sensor, activityEvent, timeSpentEvent) {
-  await client.caliper.events.send(sensor, [activityEvent, timeSpentEvent]);
-}
-// src/server/lib/build-user-profile.ts
-function buildCourseLookup(courses, apiEnv) {
-  const courseById = new Map;
-  for (const course of courses) {
-    const courseId = course.ids?.[apiEnv];
-    if (courseId) {
-      courseById.set(courseId, course);
-    }
-  }
-  return courseById;
-}
-function mapEnrollmentsToCourses(enrollments, courseById) {
-  return enrollments.map((enrollment) => {
-    const configuredCourse = courseById.get(enrollment.course.id);
-    return {
-      id: enrollment.course.id,
-      code: configuredCourse?.courseCode ?? enrollment.course.id,
-      name: enrollment.course.title
-    };
-  });
-}
-function pickGoalsFromEnrollments(enrollments) {
-  return enrollments.map((enrollment) => enrollment.metadata?.goals).find(Boolean);
-}
-function getUtcDayRange(date6) {
-  const start = new Date(Date.UTC(date6.getUTCFullYear(), date6.getUTCMonth(), date6.getUTCDate()));
-  const end = new Date(Date.UTC(date6.getUTCFullYear(), date6.getUTCMonth(), date6.getUTCDate(), 23, 59, 59, 999));
-  return { start, end };
-}
-function sumXp(facts) {
-  return Object.values(facts).reduce((dateTotal, subjects) => {
-    return dateTotal + Object.values(subjects).reduce((subjectTotal, metrics) => {
-      return subjectTotal + (metrics.activityMetrics?.xpEarned ?? 0);
-    }, 0);
-  }, 0);
-}
-// src/server/handlers/identity-full.ts
+// src/server/lib/sso.ts
 function buildErrorContext(error57, errorCode, state, req) {
   return {
     error: error57,
@@ -87268,123 +87312,59 @@ function tryDecodeState(stateParam) {
     return;
   }
 }
-function handleCallbackError(errorParam, url6, state, req, identity) {
+function handleIdpError(errorParam, url6, state, req, onCallbackError) {
   const errorDesc = url6.searchParams.get("error_description");
   ssoLog.error("IdP returned error", { error: errorParam, description: errorDesc });
   const error57 = new Error(errorDesc ?? errorParam);
-  if (identity.onCallbackError) {
-    return identity.onCallbackError(buildErrorContext(error57, errorParam, state, req));
+  if (onCallbackError) {
+    return onCallbackError(buildErrorContext(error57, errorParam, state, req));
   }
   return jsonResponse({ error: errorParam }, 400);
 }
-function handleMissingCode(state, req, identity) {
+function handleMissingCode(state, req, onCallbackError) {
   ssoLog.error("Missing authorization code in callback");
   const error57 = new Error("Missing authorization code");
-  if (identity.onCallbackError) {
-    return identity.onCallbackError(buildErrorContext(error57, "missing_code", state, req));
+  if (onCallbackError) {
+    return onCallbackError(buildErrorContext(error57, "missing_code", state, req));
   }
   return jsonResponse({ error: "Missing authorization code" }, 400);
 }
-async function handleSignIn(req, env2, identity) {
-  if (identity.mode !== "sso") {
-    ssoLog.warn("SSO not configured");
-    return jsonResponse({ error: "SSO not configured" }, 400);
-  }
-  const issuer = identity.issuer ?? getIssuer(env2);
+async function initiateSignIn(params) {
+  const { req, env: env2, clientId, buildState } = params;
+  const issuer = params.issuer ?? getIssuer(env2);
   const url6 = new URL(req.url);
-  let redirectUri = identity.redirectUri;
+  let redirectUri = params.redirectUri;
   if (!redirectUri) {
     const basePath = url6.pathname.replace(ROUTES.IDENTITY.SIGNIN, "");
     redirectUri = `${url6.origin}${basePath}${ROUTES.IDENTITY.CALLBACK}`;
   }
-  ssoLog.debug("SSO sign-in initiated", { env: env2, issuer, clientId: identity.clientId, redirectUri });
-  const stateData = identity.buildState ? identity.buildState({ req, url: url6 }) : {};
+  ssoLog.debug("SSO sign-in initiated", { env: env2, issuer, clientId, redirectUri });
+  const stateData = buildState ? buildState({ req, url: url6 }) : {};
   const state = encodeBase64Url(stateData);
   const authUrl = await buildAuthorizationUrl({
     issuer,
-    clientId: identity.clientId,
+    clientId,
     redirectUri,
     state
   });
   return redirectResponse(authUrl);
 }
-async function completeCallback(code, url6, state, req, env2, identity, api) {
-  try {
-    const issuer = identity.issuer ?? getIssuer(env2);
-    let redirectUri = identity.redirectUri;
-    if (!redirectUri) {
-      const basePath = url6.pathname.replace(ROUTES.IDENTITY.CALLBACK, "");
-      redirectUri = `${url6.origin}${basePath}${ROUTES.IDENTITY.CALLBACK}`;
-    }
-    ssoLog.debug("Exchanging auth code for tokens", { issuer, clientId: identity.clientId });
-    const tokens = await exchangeCodeForTokens({
-      issuer,
-      clientId: identity.clientId,
-      clientSecret: identity.clientSecret,
-      code,
-      redirectUri
-    });
-    const userInfo = await getUserInfo({ issuer, accessToken: tokens.access_token });
-    const identities = typeof userInfo.identities === "string" ? JSON.parse(userInfo.identities) : userInfo.identities;
-    ssoLog.debug("SSO completed, resolving Timeback user", {
-      user: { ...userInfo, identities }
-    });
-    const authUser = await resolveTimebackUserByEmail({
-      env: env2,
-      apiCredentials: api.credentials,
-      userInfo,
-      client: api.getClient()
-    });
-    ssoLog.debug("Timeback user resolved", { timebackId: authUser.id });
-    const ctx = {
-      user: authUser,
-      idp: { tokens, userInfo },
-      state,
-      req,
-      redirect: redirectResponse,
-      json: jsonResponse
-    };
-    return identity.onCallbackSuccess(ctx);
-  } catch (err) {
-    const error57 = err instanceof Error ? err : new Error("Unknown error");
-    const errorCode = err instanceof TimebackUserResolutionError ? err.code : "token_exchange_failed";
-    ssoLog.error("SSO callback failed", { error: error57.message, errorCode });
-    if (identity.onCallbackError) {
-      return identity.onCallbackError(buildErrorContext(error57, errorCode, state, req));
-    }
-    return jsonResponse({ error: error57.message }, 500);
-  }
-}
-async function handleCallback(req, env2, identity, api) {
-  if (identity.mode !== "sso") {
-    ssoLog.warn("SSO not configured");
-    return jsonResponse({ error: "SSO not configured" }, 400);
-  }
+function parseCallback(req) {
   const url6 = new URL(req.url);
   const code = url6.searchParams.get("code");
   const errorParam = url6.searchParams.get("error");
   const stateParam = url6.searchParams.get("state");
   ssoLog.debug("Received callback from IdP", { hasCode: !!code, error: errorParam });
   const state = stateParam ? tryDecodeState(stateParam) : undefined;
-  if (errorParam) {
-    return await handleCallbackError(errorParam, url6, state, req, identity);
-  }
-  if (!code) {
-    return await handleMissingCode(state, req, identity);
-  }
-  return await completeCallback(code, url6, state, req, env2, identity, api);
+  return { url: url6, code, errorParam, state };
 }
-function createIdentityHandlers(params) {
-  const { env: env2, identity, api } = params;
-  return {
-    signIn: (req) => handleSignIn(req, env2, identity),
-    callback: (req) => handleCallback(req, env2, identity, api),
-    signOut: () => redirectResponse("/")
-  };
+function computeRedirectUri(url6, configuredRedirectUri) {
+  if (configuredRedirectUri) {
+    return configuredRedirectUri;
+  }
+  const basePath = url6.pathname.replace(ROUTES.IDENTITY.CALLBACK, "");
+  return `${url6.origin}${basePath}${ROUTES.IDENTITY.CALLBACK}`;
 }
-// src/server/handlers/activity.ts
-import * as z16 from "zod";
-
 // ../clients/caliper/dist/index.js
 var __defProp7 = Object.defineProperty;
 var __export = (target, all) => {
@@ -102317,7 +102297,7 @@ var TimebackSubject8 = exports_external6.enum([
   "Math",
   "None",
   "Other"
-]);
+]).meta({ id: "TimebackSubject", description: "Subject area" });
 var TimebackGrade8 = exports_external6.union([
   exports_external6.literal(-1),
   exports_external6.literal(0),
@@ -102334,7 +102314,10 @@ var TimebackGrade8 = exports_external6.union([
   exports_external6.literal(11),
   exports_external6.literal(12),
   exports_external6.literal(13)
-]);
+]).meta({
+  id: "TimebackGrade",
+  description: "Grade level (-1 = Pre-K, 0 = K, 1-12 = grades, 13 = AP)"
+});
 var ScoreStatus8 = exports_external6.enum([
   "exempt",
   "fully graded",
@@ -102564,62 +102547,84 @@ var CaliperListEventsParams8 = exports_external6.object({
   actorEmail: exports_external6.email().optional()
 }).strict();
 var CourseIds8 = exports_external6.object({
-  staging: exports_external6.string().optional(),
-  production: exports_external6.string().optional()
-});
-var CourseType8 = exports_external6.enum(["base", "hole-filling", "optional"]);
-var PublishStatus8 = exports_external6.enum(["draft", "testing", "published", "deactivated"]);
+  staging: exports_external6.string().meta({ description: "Course ID in staging environment" }).optional(),
+  production: exports_external6.string().meta({ description: "Course ID in production environment" }).optional()
+}).meta({ id: "CourseIds", description: "Environment-specific course IDs (populated by sync)" });
+var CourseType8 = exports_external6.enum(["base", "hole-filling", "optional"]).meta({ id: "CourseType", description: "Course classification type" });
+var PublishStatus8 = exports_external6.enum(["draft", "testing", "published", "deactivated"]).meta({ id: "PublishStatus", description: "Course publication status" });
 var CourseGoals8 = exports_external6.object({
-  dailyXp: exports_external6.number().int().positive().optional(),
-  dailyLessons: exports_external6.number().int().positive().optional(),
-  dailyActiveMinutes: exports_external6.number().int().positive().optional(),
-  dailyAccuracy: exports_external6.number().int().min(0).max(100).optional(),
-  dailyMasteredUnits: exports_external6.number().int().positive().optional()
-});
+  dailyXp: exports_external6.number().int().positive().meta({ description: "Target XP to earn per day" }).optional(),
+  dailyLessons: exports_external6.number().int().positive().meta({ description: "Target lessons to complete per day" }).optional(),
+  dailyActiveMinutes: exports_external6.number().int().positive().meta({ description: "Target active learning minutes per day" }).optional(),
+  dailyAccuracy: exports_external6.number().int().min(0).max(100).meta({ description: "Target accuracy percentage (0-100)" }).optional(),
+  dailyMasteredUnits: exports_external6.number().int().positive().meta({ description: "Target units to master per day" }).optional()
+}).meta({ id: "CourseGoals", description: "Daily learning goals for a course" });
 var CourseMetrics8 = exports_external6.object({
-  totalXp: exports_external6.number().int().positive().optional(),
-  totalLessons: exports_external6.number().int().positive().optional(),
-  totalGrades: exports_external6.number().int().positive().optional()
-});
+  totalXp: exports_external6.number().int().positive().meta({ description: "Total XP available in the course" }).optional(),
+  totalLessons: exports_external6.number().int().positive().meta({ description: "Total number of lessons/activities" }).optional(),
+  totalGrades: exports_external6.number().int().positive().meta({ description: "Total grade levels covered" }).optional()
+}).meta({ id: "CourseMetrics", description: "Aggregate metrics for a course" });
 var CourseMetadata8 = exports_external6.object({
   courseType: CourseType8.optional(),
-  isSupplemental: exports_external6.boolean().optional(),
-  isCustom: exports_external6.boolean().optional(),
+  isSupplemental: exports_external6.boolean().meta({ description: "Whether this is supplemental to a base course" }).optional(),
+  isCustom: exports_external6.boolean().meta({ description: "Whether this is a custom course for an individual student" }).optional(),
   publishStatus: PublishStatus8.optional(),
-  contactEmail: exports_external6.email().optional(),
-  primaryApp: exports_external6.string().optional(),
+  contactEmail: exports_external6.email().meta({ description: "Contact email for course issues" }).optional(),
+  primaryApp: exports_external6.string().meta({ description: "Primary application identifier" }).optional(),
   goals: CourseGoals8.optional(),
   metrics: CourseMetrics8.optional()
-});
+}).meta({ id: "CourseMetadata", description: "Course metadata (matches API metadata object)" });
 var CourseDefaults8 = exports_external6.object({
-  courseCode: exports_external6.string().optional(),
-  level: exports_external6.string().optional(),
+  courseCode: exports_external6.string().meta({ description: "Course code (e.g., 'MATH101')" }).optional(),
+  level: exports_external6.string().meta({ description: "Course level (e.g., 'AP', 'Honors')" }).optional(),
   metadata: CourseMetadata8.optional()
+}).meta({
+  id: "CourseDefaults",
+  description: "Default properties that apply to all courses unless overridden"
 });
 var CourseEnvOverrides8 = exports_external6.object({
-  level: exports_external6.string().optional(),
-  sensor: exports_external6.string().url().optional(),
-  launchUrl: exports_external6.string().url().optional(),
+  level: exports_external6.string().meta({ description: "Course level for this environment" }).optional(),
+  sensor: exports_external6.url().meta({ description: "Caliper sensor endpoint URL for this environment" }).optional(),
+  launchUrl: exports_external6.url().meta({ description: "LTI launch URL for this environment" }).optional(),
   metadata: CourseMetadata8.optional()
+}).meta({
+  id: "CourseEnvOverrides",
+  description: "Environment-specific course overrides (non-identity fields)"
 });
 var CourseOverrides8 = exports_external6.object({
-  staging: CourseEnvOverrides8.optional(),
-  production: CourseEnvOverrides8.optional()
-});
+  staging: CourseEnvOverrides8.meta({
+    description: "Overrides for staging environment"
+  }).optional(),
+  production: CourseEnvOverrides8.meta({
+    description: "Overrides for production environment"
+  }).optional()
+}).meta({ id: "CourseOverrides", description: "Per-environment course overrides" });
 var CourseConfig8 = CourseDefaults8.extend({
-  subject: TimebackSubject8,
-  grade: TimebackGrade8.optional(),
+  subject: TimebackSubject8.meta({ description: "Subject area for this course" }),
+  grade: TimebackGrade8.meta({
+    description: "Grade level (-1 = Pre-K, 0 = K, 1-12 = grades, 13 = AP)"
+  }).optional(),
   ids: CourseIds8.nullable().optional(),
-  sensor: exports_external6.string().url().optional(),
-  launchUrl: exports_external6.string().url().optional(),
+  sensor: exports_external6.url().meta({ description: "Caliper sensor endpoint URL for this course" }).optional(),
+  launchUrl: exports_external6.url().meta({ description: "LTI launch URL for this course" }).optional(),
   overrides: CourseOverrides8.optional()
+}).meta({
+  id: "CourseConfig",
+  description: "Configuration for a single course. Must have either grade or courseCode (or both)."
 });
 var TimebackConfig8 = exports_external6.object({
-  name: exports_external6.string().min(1, "App name is required"),
-  defaults: CourseDefaults8.optional(),
-  courses: exports_external6.array(CourseConfig8).min(1, "At least one course is required"),
-  sensor: exports_external6.string().url().optional(),
-  launchUrl: exports_external6.string().url().optional()
+  $schema: exports_external6.string().meta({ description: "JSON Schema reference for editor support" }).optional(),
+  name: exports_external6.string().min(1, "App name is required").meta({ description: "Display name for your app" }),
+  defaults: CourseDefaults8.meta({
+    description: "Default properties applied to all courses"
+  }).optional(),
+  courses: exports_external6.array(CourseConfig8).min(1, "At least one course is required").meta({ description: "Courses available in this app" }),
+  sensor: exports_external6.url().meta({ description: "Default Caliper sensor endpoint URL for all courses" }).optional(),
+  launchUrl: exports_external6.url().meta({ description: "Default LTI launch URL for all courses" }).optional()
+}).meta({
+  id: "TimebackConfig",
+  title: "Timeback Config",
+  description: "Configuration schema for timeback.config.json files"
 }).refine((config22) => {
   return config22.courses.every((c) => c.grade !== undefined || c.courseCode !== undefined);
 }, {
@@ -102640,14 +102645,20 @@ var TimebackConfig8 = exports_external6.object({
   message: "Duplicate courseCode found; each must be unique",
   path: ["courses"]
 }).refine((config22) => {
-  return config22.courses.every((c) => c.sensor !== undefined || config22.sensor !== undefined);
-}, {
-  message: "Each course must have an effective sensor; set a top-level `sensor` or per-course `sensor`",
-  path: ["courses"]
-}).refine((config22) => {
-  return config22.courses.every((c) => c.launchUrl !== undefined || config22.launchUrl !== undefined);
+  return config22.courses.every((c) => {
+    if (c.sensor !== undefined || config22.sensor !== undefined) {
+      return true;
+    }
+    const launchUrls = [
+      c.launchUrl,
+      config22.launchUrl,
+      c.overrides?.staging?.launchUrl,
+      c.overrides?.production?.launchUrl
+    ].filter(Boolean);
+    return launchUrls.length > 0;
+  });
 }, {
-  message: "Each course must have an effective launchUrl; set a top-level `launchUrl` or per-course `launchUrl`",
+  message: "Each course must have an effective sensor. Either set `sensor` explicitly (top-level or per-course), or provide a `launchUrl` so sensor can be derived from its origin.",
   path: ["courses"]
 });
 var EdubridgeDateString8 = exports_external6.union([IsoDateString8, IsoDateTimeString8]);
@@ -103930,8 +103941,337 @@ function createCaliperClient2(registry22 = DEFAULT_PROVIDER_REGISTRY7) {
 }
 var CaliperClient2 = createCaliperClient2();
 
-// src/server/handlers/activity.ts
-var log11 = createScopedLogger3("handlers:activity");
+// src/server/handlers/activity/caliper.ts
+class MissingSyncedCourseIdError extends Error {
+  course;
+  env;
+  constructor(course, env2) {
+    const identifier = course.grade === undefined ? course.courseCode ?? course.subject : `${course.subject} grade ${course.grade}`;
+    super(`Course "${identifier}" is missing a synced ID for ${env2}. Run \`timeback resources push\` first.`);
+    this.name = "MissingSyncedCourseIdError";
+    this.course = course;
+    this.env = env2;
+  }
+}
+
+class InvalidSensorUrlError extends Error {
+  sensor;
+  constructor(sensor) {
+    super(`Invalid sensor URL "${sensor}". Sensor must be a valid absolute URL (e.g., "https://sensor.example.com") to support slug-based activity IDs.`);
+    this.name = "InvalidSensorUrlError";
+    this.sensor = sensor;
+  }
+}
+function buildCourseId(course, apiEnv) {
+  const courseId = course.ids?.[apiEnv];
+  if (!courseId) {
+    throw new MissingSyncedCourseIdError(course, apiEnv);
+  }
+  return courseId;
+}
+function buildCourseName(course) {
+  if (course.courseCode) {
+    return course.courseCode;
+  }
+  if (course.grade !== undefined) {
+    return `${course.subject} G${String(course.grade)}`;
+  }
+  return course.subject;
+}
+function buildCanonicalActivityUrl(sensor, selector, slug) {
+  let base;
+  try {
+    base = new URL(sensor);
+  } catch {
+    throw new InvalidSensorUrlError(sensor);
+  }
+  const pathSegment = "grade" in selector ? `${selector.subject}/g${String(selector.grade)}` : selector.code;
+  const basePath = base.pathname.replace(/\/+$/, "");
+  base.pathname = `${basePath}/activities/${pathSegment}/${encodeURIComponent(slug)}`;
+  return base.toString();
+}
+function buildActivityContext(payload, course, appName, apiEnv, sensor) {
+  return {
+    id: buildCanonicalActivityUrl(sensor, payload.course, payload.id),
+    type: "TimebackActivityContext",
+    subject: course.subject,
+    app: { name: appName },
+    activity: { name: payload.name },
+    course: {
+      id: buildCourseId(course, apiEnv),
+      name: buildCourseName(course)
+    },
+    process: false
+  };
+}
+function buildActivityMetrics(metrics) {
+  const result = [];
+  if (metrics.totalQuestions !== undefined) {
+    result.push({ type: "totalQuestions", value: metrics.totalQuestions });
+  }
+  if (metrics.correctQuestions !== undefined) {
+    result.push({ type: "correctQuestions", value: metrics.correctQuestions });
+  }
+  if (metrics.xpEarned !== undefined) {
+    result.push({ type: "xpEarned", value: metrics.xpEarned });
+  }
+  if (metrics.masteredUnits !== undefined) {
+    result.push({ type: "masteredUnits", value: metrics.masteredUnits });
+  }
+  return result;
+}
+function buildTimeSpentMetrics(elapsedMs, pausedMs) {
+  const result = [{ type: "active", value: Math.max(0, elapsedMs) / 1000 }];
+  if (pausedMs > 0) {
+    result.push({ type: "inactive", value: Math.max(0, pausedMs) / 1000 });
+  }
+  return result;
+}
+function buildActivityEvents(params) {
+  const { sensor, timebackId, email: email8, payload, course, appName, apiEnv } = params;
+  const actor = {
+    id: `urn:timeback:user:${timebackId}`,
+    type: "TimebackUser",
+    email: email8
+  };
+  const object7 = buildActivityContext(payload, course, appName, apiEnv, sensor);
+  const metrics = buildActivityMetrics(payload.metrics);
+  const timeSpentMetrics = buildTimeSpentMetrics(payload.elapsedMs, payload.pausedMs);
+  const activityEvent = createActivityEvent2({
+    actor,
+    object: object7,
+    metrics,
+    eventTime: payload.endedAt,
+    attempt: payload.attemptNumber,
+    generatedExtensions: payload.pctCompleteApp === undefined ? undefined : { pctCompleteApp: payload.pctCompleteApp }
+  });
+  const timeSpentEvent = createTimeSpentEvent2({
+    actor,
+    object: object7,
+    metrics: timeSpentMetrics,
+    eventTime: payload.endedAt
+  });
+  return {
+    sensor,
+    actor,
+    object: object7,
+    events: [activityEvent, timeSpentEvent],
+    payload,
+    course,
+    appName,
+    apiEnv,
+    email: email8,
+    timebackId
+  };
+}
+async function sendCaliperEnvelope(client, sensor, activityEvent, timeSpentEvent) {
+  await client.caliper.events.send(sensor, [activityEvent, timeSpentEvent]);
+}
+
+// src/server/handlers/activity/gradebook.ts
+var log11 = createScopedLogger3("handlers:activity:gradebook");
+function buildAssessmentResultPayload(params) {
+  const { resultId, lineItemId, timebackId, attempt, write } = params;
+  return {
+    sourcedId: resultId,
+    status: "active",
+    assessmentLineItem: { sourcedId: lineItemId },
+    student: { sourcedId: timebackId },
+    score: write.score,
+    scoreDate: write.endedAt,
+    scoreStatus: "fully graded",
+    inProgress: "false",
+    metadata: {
+      totalQuestions: write.metrics.totalQuestions,
+      correctQuestions: write.metrics.correctQuestions,
+      accuracy: write.score,
+      xpEarned: write.metrics.xpEarned,
+      masteredUnits: write.metrics.masteredUnits,
+      attempt,
+      endedAt: write.endedAt,
+      pctCompleteApp: write.pctCompleteApp,
+      appName: write.appName,
+      lastUpdated: new Date().toISOString()
+    }
+  };
+}
+function buildAttemptResultId(lineItemId, timebackId, attempt, endedAt) {
+  return `${lineItemId}:${safeIdSegment(timebackId)}:attempt-${attempt}:e-${hashSuffix64Base36(endedAt)}`;
+}
+async function ensureAssessmentLineItemExists(params) {
+  const { client, lineItemId, activityName, courseId, appName } = params;
+  try {
+    await client.oneroster.assessmentLineItems(lineItemId).get();
+    return;
+  } catch {}
+  try {
+    await client.oneroster.assessmentLineItems.create({
+      sourcedId: lineItemId,
+      title: activityName,
+      status: "active",
+      course: { sourcedId: courseId },
+      resultValueMin: 0,
+      resultValueMax: 100,
+      metadata: {
+        createdBy: "timeback-sdk",
+        appName
+      }
+    });
+  } catch (err) {
+    try {
+      await client.oneroster.assessmentLineItems(lineItemId).get();
+    } catch {
+      throw err;
+    }
+  }
+  log11.debug("Created assessment line item", { lineItemId });
+}
+function findRetryResult(existingResults, endedAt) {
+  return existingResults.find((result) => {
+    const metadata = result.metadata;
+    return result.scoreDate === endedAt || metadata?.endedAt === endedAt;
+  });
+}
+function computeMaxAttempt(existingResults) {
+  let maxAttempt = 0;
+  for (const result of existingResults) {
+    const metadata = result.metadata;
+    const attempt = metadata?.attempt;
+    if (typeof attempt === "number" && attempt > maxAttempt) {
+      maxAttempt = attempt;
+    }
+  }
+  return maxAttempt;
+}
+function resolveAttemptFromResult(result) {
+  const metadata = result.metadata;
+  return typeof metadata?.attempt === "number" && metadata.attempt >= 1 ? metadata.attempt : 1;
+}
+async function writeAssessmentResultWithAttemptReservation(params) {
+  const { client, lineItemId, timebackId, write } = params;
+  const existingResults = await client.oneroster.assessmentResults.listAll({
+    where: {
+      status: "active",
+      "assessmentLineItem.sourcedId": lineItemId,
+      "student.sourcedId": timebackId
+    }
+  });
+  const retryResult = findRetryResult(existingResults, write.endedAt);
+  if (retryResult) {
+    const attempt2 = resolveAttemptFromResult(retryResult);
+    const resultId2 = retryResult.sourcedId || buildAttemptResultId(lineItemId, timebackId, attempt2, write.endedAt);
+    await client.oneroster.assessmentResults.update(resultId2, buildAssessmentResultPayload({
+      resultId: resultId2,
+      lineItemId,
+      timebackId,
+      attempt: attempt2,
+      write
+    }));
+    log11.debug("Wrote gradebook entry (retry)", {
+      lineItemId,
+      resultId: resultId2,
+      score: write.score,
+      attempt: attempt2
+    });
+    return;
+  }
+  const attempt = computeMaxAttempt(existingResults) + 1;
+  const resultId = buildAttemptResultId(lineItemId, timebackId, attempt, write.endedAt);
+  await client.oneroster.assessmentResults.update(resultId, buildAssessmentResultPayload({
+    resultId,
+    lineItemId,
+    timebackId,
+    attempt,
+    write
+  }));
+  log11.debug("Wrote gradebook entry (new attempt)", {
+    lineItemId,
+    resultId,
+    score: write.score,
+    attempt
+  });
+}
+async function writeGradebookEntry(params) {
+  const { client, courseId, activityId, activityName, timebackId, payload, appName } = params;
+  const { metrics, endedAt, pctCompleteApp } = payload;
+  if (metrics.totalQuestions === undefined || metrics.correctQuestions === undefined) {
+    log11.debug("Skipping gradebook write: missing totalQuestions or correctQuestions", {
+      activityId
+    });
+    return;
+  }
+  if (metrics.totalQuestions <= 0) {
+    log11.debug("Skipping gradebook write: totalQuestions must be positive", {
+      activityId,
+      totalQuestions: metrics.totalQuestions
+    });
+    return;
+  }
+  const rawScore = metrics.correctQuestions / metrics.totalQuestions * 100;
+  const score = Math.round(Math.min(100, Math.max(0, rawScore)));
+  const lineItemId = `${safeIdSegment(courseId)}-${safeIdSegment(activityId)}-assessment`;
+  try {
+    await ensureAssessmentLineItemExists({
+      client,
+      lineItemId,
+      activityName,
+      courseId,
+      appName
+    });
+    await writeAssessmentResultWithAttemptReservation({
+      client,
+      lineItemId,
+      timebackId,
+      write: { score, endedAt, metrics, pctCompleteApp, appName }
+    });
+  } catch (err) {
+    const message = err instanceof Error ? err.message : "Unknown error";
+    log11.warn("Failed to write gradebook entry", {
+      lineItemId,
+      error: message
+    });
+  }
+}
+
+// src/server/handlers/activity/schema.ts
+import * as z16 from "zod";
+
+// src/server/handlers/activity/resolve.ts
+class ActivityCourseResolutionError extends Error {
+  code;
+  selector;
+  count;
+  constructor(code, selector, count) {
+    super(code);
+    this.code = code;
+    this.selector = selector;
+    this.count = count;
+  }
+  get selectorDescription() {
+    if ("grade" in this.selector) {
+      return `${this.selector.subject} grade ${this.selector.grade}`;
+    }
+    return `code "${this.selector.code}"`;
+  }
+}
+function resolveActivityCourse(courses, courseRef) {
+  let matches;
+  if ("grade" in courseRef) {
+    matches = courses.filter((c) => c.subject === courseRef.subject && c.grade === courseRef.grade);
+  } else {
+    matches = courses.filter((c) => c.courseCode === courseRef.code);
+  }
+  if (matches.length === 0) {
+    throw new ActivityCourseResolutionError("unknown_course", courseRef);
+  }
+  if (matches.length > 1) {
+    throw new ActivityCourseResolutionError("ambiguous_course", courseRef, matches.length);
+  }
+  return matches[0];
+}
+
+// src/server/handlers/activity/schema.ts
+var log12 = createScopedLogger3("handlers:activity:schema");
 var activityMetricsSchema = z16.object({
   totalQuestions: z16.number().int().nonnegative().optional(),
   correctQuestions: z16.number().int().nonnegative().optional(),
@@ -103983,16 +104323,16 @@ function validateActivityRequest(body, appConfig, env2) {
     if (err instanceof ActivityCourseResolutionError) {
       const selectorDesc = formatCourseSelector(payload.course);
       if (err.code === "unknown_course") {
-        log11.warn("Unknown course selector", { selector: payload.course });
+        log12.warn("Unknown course selector", { selector: payload.course });
         return {
           ok: false,
           response: jsonResponse({ success: false, error: `Unknown course: ${selectorDesc}` }, 400)
         };
       }
-      log11.error("Ambiguous course selector", { selector: payload.course });
+      log12.error("Ambiguous course selector", { selector: payload.course });
       return {
         ok: false,
-        response: jsonResponse({ success: false, error: "Ambiguous course selector in timeback.config.ts" }, 500)
+        response: jsonResponse({ success: false, error: "Ambiguous course selector in timeback.config.json" }, 500)
       };
     }
     throw err;
@@ -104001,17 +104341,20 @@ function validateActivityRequest(body, appConfig, env2) {
   const sensor = course.overrides?.[envForOverrides]?.sensor ?? course.sensor ?? appConfig.sensor;
   if (!sensor) {
     const selectorDesc = formatCourseSelector(payload.course);
-    log11.error("Missing sensor for course", { selector: payload.course });
+    log12.error("Missing sensor for course", { selector: payload.course });
     return {
       ok: false,
       response: jsonResponse({
         success: false,
-        error: `Course "${selectorDesc}" has no sensor configured. Set 'courses[].overrides.${envForOverrides}.sensor', 'courses[].sensor', or top-level 'sensor' in timeback.config.ts.`
+        error: `Course "${selectorDesc}" has no sensor configured. Set 'courses[].overrides.${envForOverrides}.sensor', 'courses[].sensor', or top-level 'sensor' in timeback.config.json.`
       }, 500)
     };
   }
   return { ok: true, payload, course, sensor };
 }
+
+// src/server/handlers/activity/handler.ts
+var log13 = createScopedLogger3("handlers:activity");
 async function getActivityUserInfo(identity, req) {
   if (identity.mode === "custom") {
     const email8 = await identity.getEmail(req);
@@ -104023,55 +104366,18 @@ async function getActivityUserInfo(identity, req) {
 function resolveTimebackId(userInfo, client) {
   return userInfo.timebackId ?? lookupTimebackIdByEmail({ email: userInfo.email, client });
 }
-function buildActivityEvents(params) {
-  const { sensor, timebackId, email: email8, payload, course, appName, apiEnv } = params;
-  const actor = {
-    id: `urn:timeback:user:${timebackId}`,
-    type: "TimebackUser",
-    email: email8
-  };
-  const object7 = buildActivityContext(payload, course, appName, apiEnv, sensor);
-  const metrics = buildActivityMetrics(payload.metrics);
-  const timeSpentMetrics = buildTimeSpentMetrics(payload.elapsedMs, payload.pausedMs);
-  const activityEvent = createActivityEvent2({
-    actor,
-    object: object7,
-    metrics,
-    eventTime: payload.endedAt,
-    attempt: payload.attemptNumber,
-    generatedExtensions: payload.pctCompleteApp === undefined ? undefined : { pctCompleteApp: payload.pctCompleteApp }
-  });
-  const timeSpentEvent = createTimeSpentEvent2({
-    actor,
-    object: object7,
-    metrics: timeSpentMetrics,
-    eventTime: payload.endedAt
-  });
-  return {
-    sensor,
-    actor,
-    object: object7,
-    events: [activityEvent, timeSpentEvent],
-    payload,
-    course,
-    appName,
-    apiEnv,
-    email: email8,
-    timebackId
-  };
-}
 function mapErrorToResponse(err, context) {
   if (err instanceof TimebackUserResolutionError) {
-    log11.warn("Failed to resolve Timeback user", { code: err.code });
+    log13.warn("Failed to resolve Timeback user", { code: err.code });
     return jsonResponse({ success: false, error: "Unable to resolve Timeback identity" }, resolveStatusForUserResolutionError(err));
   }
   if (err instanceof MissingSyncedCourseIdError) {
     const syncErr = err;
-    log11.error("Course not synced", { course: syncErr.course, env: syncErr.env });
+    log13.error("Course not synced", { course: syncErr.course, env: syncErr.env });
     return jsonResponse({ success: false, error: syncErr.message }, 500);
   }
   const message = err instanceof Error ? err.message : "Unknown error";
-  log11.error("Failed to submit activity", { ...context, error: message });
+  log13.error("Failed to submit activity", { ...context, error: message });
   return jsonResponse({ success: false, error: message }, 502);
 }
 function createActivityHandler(config7) {
@@ -104117,8 +104423,20 @@ function createActivityHandler(config7) {
           events: effective.events
         });
       }
+      const courseId = effective.object.course?.id;
+      if (courseId) {
+        await writeGradebookEntry({
+          client,
+          courseId,
+          activityId: effective.payload.id,
+          activityName: effective.payload.name,
+          timebackId: effective.timebackId,
+          payload: effective.payload,
+          appName: effective.appName
+        });
+      }
       await sendCaliperEnvelope(client, effective.sensor, effective.events[0], effective.events[1]);
-      log11.debug("Submitted activity", {
+      log13.debug("Submitted activity", {
         courseSelector: payload.course,
         activityId: payload.id
       });
@@ -104133,27 +104451,191 @@ function createActivityHandler(config7) {
     }
   };
 }
-// src/server/handlers/user.ts
-var log12 = createScopedLogger3("handlers:user");
+// src/server/handlers/identity/oidc.ts
+async function handleSignIn(req, env2, identity) {
+  if (identity.mode !== "sso") {
+    ssoLog.warn("SSO not configured");
+    return jsonResponse({ error: "SSO not configured" }, 400);
+  }
+  return await initiateSignIn({
+    req,
+    env: env2,
+    clientId: identity.clientId,
+    issuer: identity.issuer,
+    redirectUri: identity.redirectUri,
+    buildState: identity.buildState
+  });
+}
+async function completeCallback(code, url7, state, req, env2, identity, api) {
+  try {
+    const issuer = identity.issuer ?? getIssuer(env2);
+    const redirectUri = computeRedirectUri(url7, identity.redirectUri);
+    ssoLog.debug("Exchanging auth code for tokens", { issuer, clientId: identity.clientId });
+    const tokens = await exchangeCodeForTokens({
+      issuer,
+      clientId: identity.clientId,
+      clientSecret: identity.clientSecret,
+      code,
+      redirectUri
+    });
+    const userInfo = await getUserInfo({ issuer, accessToken: tokens.access_token });
+    const identities = typeof userInfo.identities === "string" ? JSON.parse(userInfo.identities) : userInfo.identities;
+    ssoLog.debug("SSO completed, resolving Timeback user", {
+      user: { ...userInfo, identities }
+    });
+    const authUser = await resolveTimebackUserByEmail({
+      env: env2,
+      apiCredentials: api.credentials,
+      userInfo,
+      client: api.getClient()
+    });
+    ssoLog.debug("Timeback user resolved", { timebackId: authUser.id });
+    const ctx = {
+      user: authUser,
+      idp: { tokens, userInfo },
+      state,
+      req,
+      redirect: redirectResponse,
+      json: jsonResponse
+    };
+    return identity.onCallbackSuccess(ctx);
+  } catch (err) {
+    const error59 = err instanceof Error ? err : new Error("Unknown error");
+    const errorCode = err instanceof TimebackUserResolutionError ? err.code : "token_exchange_failed";
+    ssoLog.error("SSO callback failed", { error: error59.message, errorCode });
+    if (identity.onCallbackError) {
+      return identity.onCallbackError(buildErrorContext(error59, errorCode, state, req));
+    }
+    return jsonResponse({ error: error59.message }, 500);
+  }
+}
+async function handleCallback(req, env2, identity, api) {
+  if (identity.mode !== "sso") {
+    ssoLog.warn("SSO not configured");
+    return jsonResponse({ error: "SSO not configured" }, 400);
+  }
+  const { url: url7, code, errorParam, state } = parseCallback(req);
+  if (errorParam) {
+    return handleIdpError(errorParam, url7, state, req, identity.onCallbackError);
+  }
+  if (!code) {
+    return handleMissingCode(state, req, identity.onCallbackError);
+  }
+  return await completeCallback(code, url7, state, req, env2, identity, api);
+}
+
+// src/server/handlers/identity/handler.ts
+function createIdentityHandlers(params) {
+  const { env: env2, identity, api } = params;
+  return {
+    signIn: (req) => handleSignIn(req, env2, identity),
+    callback: (req) => handleCallback(req, env2, identity, api),
+    signOut: () => redirectResponse("/")
+  };
+}
+// src/server/handlers/user/enrollments.ts
+function buildCourseLookup(courses, apiEnv) {
+  const courseById = new Map;
+  for (const course of courses) {
+    const courseId = course.ids?.[apiEnv];
+    if (courseId) {
+      courseById.set(courseId, course);
+    }
+  }
+  return courseById;
+}
+function mapEnrollmentsToCourses(enrollments, courseById) {
+  return enrollments.map((enrollment) => {
+    const configuredCourse = courseById.get(enrollment.course.id);
+    return {
+      id: enrollment.course.id,
+      code: configuredCourse?.courseCode ?? enrollment.course.id,
+      name: enrollment.course.title
+    };
+  });
+}
+function pickGoalsFromEnrollments(enrollments) {
+  return enrollments.map((enrollment) => enrollment.metadata?.goals).find(Boolean);
+}
+function getUtcDayRange(date10) {
+  const start = new Date(Date.UTC(date10.getUTCFullYear(), date10.getUTCMonth(), date10.getUTCDate()));
+  const end = new Date(Date.UTC(date10.getUTCFullYear(), date10.getUTCMonth(), date10.getUTCDate(), 23, 59, 59, 999));
+  return { start, end };
+}
+function sumXp(facts) {
+  return Object.values(facts).reduce((dateTotal, subjects) => {
+    return dateTotal + Object.values(subjects).reduce((subjectTotal, metrics) => {
+      return subjectTotal + (metrics.activityMetrics?.xpEarned ?? 0);
+    }, 0);
+  }, 0);
+}
+
+// src/server/handlers/user/profile.ts
+async function buildUserProfile(client, user, appConfig, apiEnv) {
+  const enrollments = await client.edubridge.enrollments.list({
+    userId: user.id
+  });
+  const courseById = buildCourseLookup(appConfig.courses, apiEnv);
+  const courses = mapEnrollmentsToCourses(enrollments, courseById);
+  const goals = pickGoalsFromEnrollments(enrollments);
+  const { start: todayStart, end: todayEnd } = getUtcDayRange(new Date);
+  const [todayFacts, allFacts] = await Promise.all([
+    client.edubridge.analytics.getActivity({
+      studentId: user.id,
+      startDate: todayStart.toISOString(),
+      endDate: todayEnd.toISOString()
+    }),
+    client.edubridge.analytics.getActivity({
+      studentId: user.id,
+      startDate: "2000-01-01",
+      endDate: todayEnd.toISOString()
+    })
+  ]);
+  return {
+    id: user.id,
+    email: user.email,
+    name: user.name,
+    school: user.school,
+    grade: user.grade,
+    courses: courses.length ? courses : undefined,
+    goals,
+    xp: {
+      today: sumXp(todayFacts),
+      all: sumXp(allFacts)
+    }
+  };
+}
+
+// src/server/handlers/user/handler.ts
+var log14 = createScopedLogger3("handlers:user");
+async function getUserIdentity(identity, req) {
+  if (identity.mode === "custom") {
+    const email8 = await identity.getEmail(req);
+    if (!email8)
+      return;
+    return { sub: email8, email: email8 };
+  }
+  const user = await identity.getUser(req);
+  if (!user)
+    return;
+  return { sub: user.id, email: user.email };
+}
+function mapResolutionErrorToResponse(error59) {
+  log14.warn("Timeback user resolution failed", { code: error59.code });
+  if (error59.code === "timeback_user_ambiguous") {
+    return jsonResponse({ error: "Timeback user resolution ambiguous" }, 409);
+  }
+  if (error59.code === "timeback_user_not_found") {
+    return jsonResponse({ error: "Timeback user not found" }, 404);
+  }
+  return jsonResponse({ error: "User resolution failed" }, 500);
+}
 function createUserHandler(config7) {
   return async (req) => {
     try {
-      let userSub;
-      let userEmail;
-      if (config7.identity.mode === "custom") {
-        const email8 = await config7.identity.getEmail(req);
-        if (!email8) {
-          return jsonResponse({ error: "Unauthorized" }, 401);
-        }
-        userSub = email8;
-        userEmail = email8;
-      } else {
-        const user = await config7.identity.getUser(req);
-        if (!user) {
-          return jsonResponse({ error: "Unauthorized" }, 401);
-        }
-        userSub = user.id;
-        userEmail = user.email;
+      const userIdentity = await getUserIdentity(config7.identity, req);
+      if (!userIdentity) {
+        return jsonResponse({ error: "Unauthorized" }, 401);
       }
       const apiEnv = mapEnvForApi(config7.env);
       const client = new TimebackClient({
@@ -104167,65 +104649,85 @@ function createUserHandler(config7) {
         const resolved = await resolveTimebackUserByEmail({
           env: config7.env,
           apiCredentials: config7.api,
-          userInfo: {
-            sub: userSub,
-            email: userEmail
-          },
+          userInfo: userIdentity,
           client
         });
-        const enrollments = await client.edubridge.enrollments.list({
-          userId: resolved.id
-        });
-        const courseById = buildCourseLookup(config7.appConfig.courses, apiEnv);
-        const courses = mapEnrollmentsToCourses(enrollments, courseById);
-        const goals = pickGoalsFromEnrollments(enrollments);
-        const { start: todayStart, end: todayEnd } = getUtcDayRange(new Date);
-        const [todayFacts, allFacts] = await Promise.all([
-          client.edubridge.analytics.getActivity({
-            studentId: resolved.id,
-            startDate: todayStart.toISOString(),
-            endDate: todayEnd.toISOString()
-          }),
-          client.edubridge.analytics.getActivity({
-            studentId: resolved.id,
-            startDate: "2000-01-01",
-            endDate: todayEnd.toISOString()
-          })
-        ]);
-        const profile = {
-          id: resolved.id,
-          email: resolved.email,
-          name: resolved.name,
-          school: resolved.school,
-          grade: resolved.grade,
-          courses: courses.length ? courses : undefined,
-          goals,
-          xp: {
-            today: sumXp(todayFacts),
-            all: sumXp(allFacts)
-          }
-        };
+        const profile = await buildUserProfile(client, resolved, config7.appConfig, apiEnv);
         return jsonResponse(profile);
       } catch (error59) {
         if (error59 instanceof TimebackUserResolutionError) {
-          log12.warn("Timeback user resolution failed", { code: error59.code });
+          return mapResolutionErrorToResponse(error59);
+        }
+        const message = error59 instanceof Error ? error59.message : "Unknown error";
+        log14.error("Failed to build user profile", { error: message });
+        return jsonResponse({ error: message }, 502);
+      } finally {
+        client.close();
+      }
+    } catch (error59) {
+      const message = error59 instanceof Error ? error59.message : "Unknown error";
+      log14.error("Unhandled error in user handler", { error: message });
+      return jsonResponse({ error: message }, 500);
+    }
+  };
+}
+// src/server/handlers/user/verify.ts
+var log15 = createScopedLogger3("handlers:user:verify");
+async function getUserIdentity2(identity, req) {
+  if (identity.mode === "custom") {
+    const email8 = await identity.getEmail(req);
+    if (!email8)
+      return;
+    return { sub: email8, email: email8 };
+  }
+  const user = await identity.getUser(req);
+  if (!user)
+    return;
+  return { sub: user.id, email: user.email };
+}
+function createUserVerifyHandler(config7) {
+  return async (req) => {
+    try {
+      const userIdentity = await getUserIdentity2(config7.identity, req);
+      if (!userIdentity) {
+        return jsonResponse({ verified: false, error: "Unauthorized" }, 401);
+      }
+      const client = new TimebackClient({
+        env: mapEnvForApi(config7.env),
+        auth: {
+          clientId: config7.api.clientId,
+          clientSecret: config7.api.clientSecret
+        }
+      });
+      try {
+        const resolved = await resolveTimebackUserByEmail({
+          env: config7.env,
+          apiCredentials: config7.api,
+          userInfo: userIdentity,
+          client
+        });
+        return jsonResponse({ verified: true, timebackId: resolved.id });
+      } catch (error59) {
+        if (error59 instanceof TimebackUserResolutionError) {
+          log15.warn("Timeback user resolution failed", { code: error59.code });
           if (error59.code === "timeback_user_ambiguous") {
-            return jsonResponse({ error: "Timeback user resolution ambiguous" }, 409);
+            return jsonResponse({ verified: false, error: "Timeback user resolution ambiguous" }, 409);
           }
           if (error59.code === "timeback_user_not_found") {
-            return jsonResponse({ error: "Timeback user not found" }, 404);
+            return jsonResponse({ verified: false });
           }
+          return jsonResponse({ verified: false, error: error59.message }, 502);
         }
         const message = error59 instanceof Error ? error59.message : "Unknown error";
-        log12.error("Failed to build user profile", { error: message });
-        return jsonResponse({ error: message }, 502);
+        log15.error("Failed to verify user", { error: message });
+        return jsonResponse({ verified: false, error: message }, 502);
       } finally {
         client.close();
       }
     } catch (error59) {
       const message = error59 instanceof Error ? error59.message : "Unknown error";
-      log12.error("Unhandled error in user handler", { error: message });
-      return jsonResponse({ error: message }, 500);
+      log15.error("Unhandled error in verify handler", { error: message });
+      return jsonResponse({ verified: false, error: message }, 500);
     }
   };
 }
@@ -104240,6 +104742,7 @@ function toAppCourses(courses) {
   });
 }
 async function createTimeback(config7) {
+  const env2 = normalizeEnv(config7.env);
   const configResult = await loadConfig({ configPath: config7.configPath });
   if (!configResult.success) {
     throw new Error(`Failed to load timeback config: ${configResult.error}`);
@@ -104249,7 +104752,7 @@ async function createTimeback(config7) {
   const getApiClient = () => {
     if (!apiClient) {
       apiClient = new TimebackClient({
-        env: mapEnvForApi(config7.env),
+        env: mapEnvForApi(env2),
         auth: {
           clientId: config7.api.clientId,
           clientSecret: config7.api.clientSecret
@@ -104259,7 +104762,7 @@ async function createTimeback(config7) {
     return apiClient;
   };
   const activity = createActivityHandler({
-    env: config7.env,
+    env: env2,
     identity: config7.identity,
     appConfig: {
       name: appConfig.name,
@@ -104270,7 +104773,7 @@ async function createTimeback(config7) {
     hooks: config7.hooks
   });
   const identity = createIdentityHandlers({
-    env: config7.env,
+    env: env2,
     identity: config7.identity,
     api: {
       credentials: config7.api,
@@ -104278,7 +104781,7 @@ async function createTimeback(config7) {
     }
   });
   const user = createUserHandler({
-    env: config7.env,
+    env: env2,
     identity: config7.identity,
     api: config7.api,
     appConfig: {
@@ -104287,13 +104790,19 @@ async function createTimeback(config7) {
       courses: toAppCourses(appConfig.courses)
     }
   });
+  const userVerify = createUserVerifyHandler({
+    env: env2,
+    identity: config7.identity,
+    api: config7.api
+  });
   const instance = {
     config: config7,
     handle: {
       activity,
       identity,
       user: {
-        me: user
+        me: user,
+        verify: userVerify
       }
     },
     get api() {
@@ -104302,74 +104811,21 @@ async function createTimeback(config7) {
   };
   return instance;
 }
-// src/server/handlers/identity-only.ts
-function buildErrorContext2(error59, errorCode, state, req) {
-  return {
-    error: error59,
-    errorCode,
-    state,
-    req,
-    redirect: redirectResponse,
-    json: jsonResponse
-  };
-}
-function tryDecodeState2(stateParam) {
-  try {
-    return decodeBase64Url(stateParam);
-  } catch {
-    ssoLog.warn("Failed to decode state");
-    return;
-  }
-}
-function handleCallbackError2(errorParam, url7, state, req, identity) {
-  const errorDesc = url7.searchParams.get("error_description");
-  ssoLog.error("IdP returned error", { error: errorParam, description: errorDesc });
-  const error59 = new Error(errorDesc ?? errorParam);
-  if (identity.onCallbackError) {
-    return identity.onCallbackError(buildErrorContext2(error59, errorParam, state, req));
-  }
-  return jsonResponse({ error: errorParam }, 400);
-}
-function handleMissingCode2(state, req, identity) {
-  ssoLog.error("Missing authorization code in callback");
-  const error59 = new Error("Missing authorization code");
-  if (identity.onCallbackError) {
-    return identity.onCallbackError(buildErrorContext2(error59, "missing_code", state, req));
-  }
-  return jsonResponse({ error: "Missing authorization code" }, 400);
-}
+// src/server/handlers/identity-only/oidc.ts
 async function handleSignIn2(req, env2, identity) {
-  const issuer = identity.issuer ?? getIssuer(env2);
-  const url7 = new URL(req.url);
-  let redirectUri = identity.redirectUri;
-  if (!redirectUri) {
-    const basePath = url7.pathname.replace(ROUTES.IDENTITY.SIGNIN, "");
-    redirectUri = `${url7.origin}${basePath}${ROUTES.IDENTITY.CALLBACK}`;
-  }
-  ssoLog.debug("SSO sign-in initiated (identity-only)", {
+  return await initiateSignIn({
+    req,
     env: env2,
-    issuer,
-    clientId: identity.clientId,
-    redirectUri
-  });
-  const stateData = identity.buildState ? identity.buildState({ req, url: url7 }) : {};
-  const state = encodeBase64Url(stateData);
-  const authUrl = await buildAuthorizationUrl({
-    issuer,
     clientId: identity.clientId,
-    redirectUri,
-    state
+    issuer: identity.issuer,
+    redirectUri: identity.redirectUri,
+    buildState: identity.buildState
   });
-  return redirectResponse(authUrl);
 }
-async function completeCallbackIdentityOnly(code, url7, state, req, env2, identity) {
+async function completeCallback2(code, url7, state, req, env2, identity) {
   try {
     const issuer = identity.issuer ?? getIssuer(env2);
-    let redirectUri = identity.redirectUri;
-    if (!redirectUri) {
-      const basePath = url7.pathname.replace(ROUTES.IDENTITY.CALLBACK, "");
-      redirectUri = `${url7.origin}${basePath}${ROUTES.IDENTITY.CALLBACK}`;
-    }
+    const redirectUri = computeRedirectUri(url7, identity.redirectUri);
     ssoLog.debug("Exchanging auth code for tokens (identity-only)", {
       issuer,
       clientId: identity.clientId
@@ -104397,29 +104853,23 @@ async function completeCallbackIdentityOnly(code, url7, state, req, env2, identi
     const error59 = err instanceof Error ? err : new Error("Unknown error");
     ssoLog.error("Token exchange failed (identity-only)", { error: error59.message });
     if (identity.onCallbackError) {
-      return identity.onCallbackError(buildErrorContext2(error59, undefined, state, req));
+      return identity.onCallbackError(buildErrorContext(error59, undefined, state, req));
     }
     return jsonResponse({ error: error59.message }, 500);
   }
 }
-async function handleCallbackIdentityOnly(req, env2, identity) {
-  const url7 = new URL(req.url);
-  const code = url7.searchParams.get("code");
-  const errorParam = url7.searchParams.get("error");
-  const stateParam = url7.searchParams.get("state");
-  ssoLog.debug("Received callback from IdP (identity-only)", {
-    hasCode: !!code,
-    error: errorParam
-  });
-  const state = stateParam ? tryDecodeState2(stateParam) : undefined;
+async function handleCallback2(req, env2, identity) {
+  const { url: url7, code, errorParam, state } = parseCallback(req);
   if (errorParam) {
-    return await handleCallbackError2(errorParam, url7, state, req, identity);
+    return handleIdpError(errorParam, url7, state, req, identity.onCallbackError);
   }
   if (!code) {
-    return await handleMissingCode2(state, req, identity);
+    return handleMissingCode(state, req, identity.onCallbackError);
   }
-  return await completeCallbackIdentityOnly(code, url7, state, req, env2, identity);
+  return await completeCallback2(code, url7, state, req, env2, identity);
 }
+
+// src/server/handlers/identity-only/handler.ts
 function createIdentityOnlyHandlers(params) {
   const { env: env2, identity } = params;
   if (identity.mode !== "sso") {
@@ -104427,15 +104877,14 @@ function createIdentityOnlyHandlers(params) {
   }
   return {
     signIn: (req) => handleSignIn2(req, env2, identity),
-    callback: (req) => handleCallbackIdentityOnly(req, env2, identity),
+    callback: (req) => handleCallback2(req, env2, identity),
     signOut: () => redirectResponse("/")
   };
 }
-
 // src/server/timeback-identity.ts
 function createTimebackIdentity(config7) {
   const identity = createIdentityOnlyHandlers({
-    env: config7.env,
+    env: normalizeEnv(config7.env),
     identity: config7.identity
   });
   return {