playcademy 0.19.5 → 0.19.6-beta.2

package/dist/cli.js

@@ -1065,7 +1065,7 @@ var SAMPLE_BUCKET_FILENAME = "bucket.ts";
 // ../better-auth/package.json
 var package_default = {
   name: "@playcademy/better-auth",
-  version: "0.0.10",
+  version: "0.0.11-beta.2",
   type: "module",
   exports: {
     "./server": {
@@ -1956,6 +1956,7 @@ var TIMEBACK_API_URLS;
 var TIMEBACK_AUTH_URLS;
 var CALIPER_API_URLS;
 var ONEROSTER_ENDPOINTS;
+var QTI_ENDPOINTS;
 var CALIPER_ENDPOINTS;
 var CALIPER_CONSTANTS;
 var TIMEBACK_EVENT_TYPES;
@@ -2003,6 +2004,10 @@ var init_constants = __esm2(() => {
     assessmentResults: "/ims/oneroster/gradebook/v1p2/assessmentResults",
     users: "/ims/oneroster/rostering/v1p2/users"
   };
+  QTI_ENDPOINTS = {
+    assessmentTests: "/assessment-tests",
+    assessmentItems: "/assessment-items"
+  };
   CALIPER_ENDPOINTS = {
     event: "/caliper/event",
     events: "/caliper/events",
@@ -3016,7 +3021,7 @@ import { existsSync as existsSync11, mkdirSync as mkdirSync5, readFileSync as re
 import { join as join13 } from "node:path";
 
 // src/version.ts
-var cliVersion = false ? "0.0.0-dev" : "0.19.5";
+var cliVersion = false ? "0.0.0-dev" : "0.19.6-beta.2";
 
 // src/lib/init/database.ts
 var drizzleConfigTemplate = loadTemplateString("database/drizzle-config.ts");

package/dist/constants.js

@@ -20,7 +20,7 @@ var SAMPLE_BUCKET_FILENAME = "bucket.ts";
 // ../better-auth/package.json
 var package_default = {
   name: "@playcademy/better-auth",
-  version: "0.0.10",
+  version: "0.0.11-beta.2",
   type: "module",
   exports: {
     "./server": {

package/dist/db.js

@@ -36,7 +36,7 @@ var DEFAULT_API_ROUTES_DIRECTORY = join2(SERVER_ROOT_DIRECTORY, "api");
 // ../better-auth/package.json
 var package_default = {
   name: "@playcademy/better-auth",
-  version: "0.0.10",
+  version: "0.0.11-beta.2",
   type: "module",
   exports: {
     "./server": {

package/dist/index.js

@@ -326,7 +326,7 @@ var SAMPLE_BUCKET_FILENAME = "bucket.ts";
 // ../better-auth/package.json
 var package_default = {
   name: "@playcademy/better-auth",
-  version: "0.0.10",
+  version: "0.0.11-beta.2",
   type: "module",
   exports: {
     "./server": {
@@ -2617,6 +2617,7 @@ var TIMEBACK_API_URLS;
 var TIMEBACK_AUTH_URLS;
 var CALIPER_API_URLS;
 var ONEROSTER_ENDPOINTS;
+var QTI_ENDPOINTS;
 var CALIPER_ENDPOINTS;
 var CALIPER_CONSTANTS;
 var TIMEBACK_EVENT_TYPES;
@@ -2664,6 +2665,10 @@ var init_constants = __esm2(() => {
     assessmentResults: "/ims/oneroster/gradebook/v1p2/assessmentResults",
     users: "/ims/oneroster/rostering/v1p2/users"
   };
+  QTI_ENDPOINTS = {
+    assessmentTests: "/assessment-tests",
+    assessmentItems: "/assessment-items"
+  };
   CALIPER_ENDPOINTS = {
     event: "/caliper/event",
     events: "/caliper/events",
@@ -2822,6 +2827,7 @@ var TIMEBACK_API_URLS2;
 var TIMEBACK_AUTH_URLS2;
 var CALIPER_API_URLS2;
 var ONEROSTER_ENDPOINTS2;
+var QTI_ENDPOINTS2;
 var CALIPER_ENDPOINTS2;
 var CALIPER_CONSTANTS2;
 var TIMEBACK_EVENT_TYPES2;
@@ -2869,6 +2875,10 @@ var init_constants2 = __esm3(() => {
     assessmentResults: "/ims/oneroster/gradebook/v1p2/assessmentResults",
     users: "/ims/oneroster/rostering/v1p2/users"
   };
+  QTI_ENDPOINTS2 = {
+    assessmentTests: "/assessment-tests",
+    assessmentItems: "/assessment-items"
+  };
   CALIPER_ENDPOINTS2 = {
     event: "/caliper/event",
     events: "/caliper/events",
@@ -4021,7 +4031,7 @@ import { existsSync as existsSync9, mkdirSync as mkdirSync2, readFileSync as rea
 import { join as join13 } from "node:path";
 
 // src/version.ts
-var cliVersion = false ? "0.0.0-dev" : "0.19.5";
+var cliVersion = false ? "0.0.0-dev" : "0.19.6-beta.2";
 
 // src/lib/init/database.ts
 var drizzleConfigTemplate = loadTemplateString("database/drizzle-config.ts");
@@ -9854,7 +9864,7 @@ function findSingleBuildZip() {
 import * as esbuild3 from "esbuild";
 
 // ../edge-play/src/stub-entry.ts
-var stub_entry_default = "/**\n * Stub Worker for Static-Only Games\n *\n * Minimal worker that serves static assets with CORS headers.\n * Used for games that don't have custom backend routes.\n *\n * Features:\n * - Serves files from Workers Assets or R2 bucket binding\n * - Supports hybrid deployment strategy (small files via Assets, large files via R2)\n * - Adds CORS headers for cross-origin manifest fetching\n * - Handles OPTIONS preflight requests\n * - Returns 404 for /api/* routes (no backend deployed)\n * - Supports SPA routing (falls back to index.html)\n */\n\ninterface AssetsFetcher {\n    fetch(request: Request): Promise<Response>\n}\ninterface R2Bucket {\n    get(key: string): Promise<R2Object | null>\n}\ninterface R2Object {\n    body: ReadableStream\n    httpMetadata?: { contentType?: string }\n    etag: string\n}\n\ninterface Env {\n    ASSETS: AssetsFetcher | R2Bucket\n}\n\n/**\n * Detect if ASSETS binding is an R2 bucket or Workers Assets Fetcher\n */\nfunction isR2Bucket(assets: AssetsFetcher | R2Bucket): assets is R2Bucket {\n    return 'get' in assets && typeof assets.get === 'function' && !('fetch' in assets)\n}\n\n/**\n * Serve from Workers Assets (default for files <25MB)\n */\nasync function serveFromAssets(request: Request, assets: AssetsFetcher): Promise<Response> {\n    const response = await assets.fetch(request)\n\n    if (response.status !== 404) {\n        // Add CORS headers\n        const modifiedResponse = new Response(response.body, response)\n\n        modifiedResponse.headers.set('Access-Control-Allow-Origin', '*')\n        modifiedResponse.headers.set('Access-Control-Allow-Methods', 'GET, HEAD, OPTIONS')\n\n        return modifiedResponse\n    }\n\n    // SPA routing: if not a file request, try index.html\n    const path = new URL(request.url).pathname\n\n    if (path.includes('.')) {\n        return response // File request not found\n    }\n\n    const indexUrl = new URL(request.url)\n\n    indexUrl.pathname = '/index.html'\n\n    const indexResponse = await assets.fetch(new Request(indexUrl.toString()))\n\n    // Add CORS headers to index.html response\n    const modifiedResponse = new Response(indexResponse.body, indexResponse)\n\n    modifiedResponse.headers.set('Access-Control-Allow-Origin', '*')\n    modifiedResponse.headers.set('Access-Control-Allow-Methods', 'GET, HEAD, OPTIONS')\n\n    return modifiedResponse\n}\n\n/**\n * Serve from R2 bucket (for large files like Godot WASM)\n */\nasync function serveFromR2(request: Request, bucket: R2Bucket): Promise<Response> {\n    const path = new URL(request.url).pathname\n    const key = path === '/' ? 'index.html' : path.slice(1)\n\n    const object = await bucket.get(key)\n\n    if (object) {\n        return new Response(object.body, {\n            headers: {\n                'Content-Type': object.httpMetadata?.contentType || 'application/octet-stream',\n                // Use 1-hour caching - balances performance with update propagation\n                // (Godot and other engines use non-hashed filenames)\n                'Cache-Control': key === 'index.html' ? 'no-cache' : 'public, max-age=3600',\n                ETag: object.etag,\n                'Access-Control-Allow-Origin': '*',\n                'Access-Control-Allow-Methods': 'GET, HEAD, OPTIONS',\n            },\n        })\n    }\n\n    // SPA routing: if not a file request, try index.html\n    if (path.includes('.')) {\n        return new Response('Not Found', { status: 404 })\n    }\n\n    const indexObject = await bucket.get('index.html')\n\n    if (indexObject) {\n        return new Response(indexObject.body, {\n            headers: {\n                'Content-Type': 'text/html',\n                'Cache-Control': 'no-cache',\n                'Access-Control-Allow-Origin': '*',\n                'Access-Control-Allow-Methods': 'GET, HEAD, OPTIONS',\n            },\n        })\n    }\n\n    return new Response('Not Found', { status: 404 })\n}\n\nexport default {\n    async fetch(request: Request, env: Env): Promise<Response> {\n        try {\n            const url = new URL(request.url)\n\n            // Handle CORS preflight\n            if (request.method === 'OPTIONS') {\n                const headers = new Headers()\n\n                headers.set('Access-Control-Allow-Origin', '*')\n                headers.set('Access-Control-Allow-Methods', 'GET, HEAD, OPTIONS')\n\n                const reqHeaders = request.headers.get('Access-Control-Request-Headers')\n\n                if (reqHeaders) {\n                    headers.set('Access-Control-Allow-Headers', reqHeaders)\n                }\n\n                headers.set('Access-Control-Max-Age', '86400')\n\n                return new Response(null, { status: 204, headers })\n            }\n\n            // No backend routes available\n            if (url.pathname.startsWith('/api/')) {\n                return new Response('No backend deployed', { status: 404 })\n            }\n\n            // Serve static assets (auto-detect Workers Assets vs R2)\n            if (!env.ASSETS) {\n                return new Response('ASSETS binding not configured', { status: 500 })\n            }\n\n            return isR2Bucket(env.ASSETS)\n                ? await serveFromR2(request, env.ASSETS)\n                : await serveFromAssets(request, env.ASSETS)\n        } catch (error) {\n            return new Response(`Error: ${(error as Error).message}`, { status: 500 })\n        }\n    },\n}\n";
+var stub_entry_default = "/**\n * Stub Worker for Static-Only Games\n *\n * Minimal worker that serves static assets with CORS headers.\n * Used for games that don't have custom backend routes.\n *\n * ## Experiment: Direct asset serving (workers-assets-cache-headers)\n *\n * For Workers Assets deployments (files <25MB), static assets are now served\n * directly by Cloudflare's asset system \u2014 this worker is only invoked for\n * `/api/*` routes (via `run_worker_first: [\"/api/*\"]`). Cache headers and SPA\n * routing are handled by the asset system config (`_headers` and\n * `not_found_handling: 'single-page-application'`).\n *\n * For R2 deployments (large files like Godot WASM), this worker still handles\n * all asset serving since R2 is not part of the Workers Assets system.\n *\n * Features:\n * - Serves files from Workers Assets or R2 bucket binding\n * - Supports hybrid deployment strategy (small files via Assets, large files via R2)\n * - Adds CORS headers for cross-origin manifest fetching\n * - Handles OPTIONS preflight requests\n * - Returns 404 for /api/* routes (no backend deployed)\n * - Supports SPA routing (falls back to index.html)\n */\n\ninterface AssetsFetcher {\n    fetch(request: Request): Promise<Response>\n}\ninterface R2Bucket {\n    get(key: string): Promise<R2Object | null>\n}\ninterface R2Object {\n    body: ReadableStream\n    httpMetadata?: { contentType?: string }\n    etag: string\n}\n\ninterface Env {\n    ASSETS: AssetsFetcher | R2Bucket\n}\n\n/**\n * Detect if ASSETS binding is an R2 bucket or Workers Assets Fetcher\n */\nfunction isR2Bucket(assets: AssetsFetcher | R2Bucket): assets is R2Bucket {\n    return 'get' in assets && typeof assets.get === 'function' && !('fetch' in assets)\n}\n\n/**\n * Serve from R2 bucket (for large files like Godot WASM).\n * The worker always handles R2 asset serving since R2 is not part of Workers Assets.\n */\nasync function serveFromR2(request: Request, bucket: R2Bucket): Promise<Response> {\n    const path = new URL(request.url).pathname\n    const key = path === '/' ? 'index.html' : path.slice(1)\n\n    const object = await bucket.get(key)\n\n    if (object) {\n        return new Response(object.body, {\n            headers: {\n                'Content-Type': object.httpMetadata?.contentType || 'application/octet-stream',\n                // Use 1-hour caching - balances performance with update propagation\n                // (Godot and other engines use non-hashed filenames)\n                'Cache-Control': key === 'index.html' ? 'no-cache' : 'public, max-age=3600',\n                ETag: object.etag,\n                'Access-Control-Allow-Origin': '*',\n                'Access-Control-Allow-Methods': 'GET, HEAD, OPTIONS',\n            },\n        })\n    }\n\n    // SPA routing: if not a file request, try index.html\n    if (path.includes('.')) {\n        return new Response('Not Found', { status: 404 })\n    }\n\n    const indexObject = await bucket.get('index.html')\n\n    if (indexObject) {\n        return new Response(indexObject.body, {\n            headers: {\n                'Content-Type': 'text/html',\n                'Cache-Control': 'no-cache',\n                'Access-Control-Allow-Origin': '*',\n                'Access-Control-Allow-Methods': 'GET, HEAD, OPTIONS',\n            },\n        })\n    }\n\n    return new Response('Not Found', { status: 404 })\n}\n\n/**\n * Serve from Workers Assets (safety net).\n *\n * In the new deploy config, Workers Assets requests are served directly by the\n * asset system and never reach this worker. This function exists only as a\n * fallback for backwards compatibility with old deploy configs that still use\n * `run_worker_first: true`.\n */\nasync function serveFromAssets(request: Request, assets: AssetsFetcher): Promise<Response> {\n    const response = await assets.fetch(request)\n\n    if (response.status !== 404) {\n        const modifiedResponse = new Response(response.body, response)\n\n        modifiedResponse.headers.set('Access-Control-Allow-Origin', '*')\n        modifiedResponse.headers.set('Access-Control-Allow-Methods', 'GET, HEAD, OPTIONS')\n\n        return modifiedResponse\n    }\n\n    // SPA routing: if not a file request, try index.html\n    const path = new URL(request.url).pathname\n\n    if (path.includes('.')) {\n        return response // File request not found\n    }\n\n    const indexUrl = new URL(request.url)\n\n    indexUrl.pathname = '/index.html'\n\n    const indexResponse = await assets.fetch(new Request(indexUrl.toString()))\n\n    // Add CORS headers to index.html response\n    const modifiedResponse = new Response(indexResponse.body, indexResponse)\n\n    modifiedResponse.headers.set('Access-Control-Allow-Origin', '*')\n    modifiedResponse.headers.set('Access-Control-Allow-Methods', 'GET, HEAD, OPTIONS')\n\n    return modifiedResponse\n}\n\nexport default {\n    async fetch(request: Request, env: Env): Promise<Response> {\n        try {\n            const url = new URL(request.url)\n\n            // Handle CORS preflight\n            if (request.method === 'OPTIONS') {\n                const headers = new Headers()\n\n                headers.set('Access-Control-Allow-Origin', '*')\n                headers.set('Access-Control-Allow-Methods', 'GET, HEAD, OPTIONS')\n\n                const reqHeaders = request.headers.get('Access-Control-Request-Headers')\n\n                if (reqHeaders) {\n                    headers.set('Access-Control-Allow-Headers', reqHeaders)\n                }\n\n                headers.set('Access-Control-Max-Age', '86400')\n\n                return new Response(null, { status: 204, headers })\n            }\n\n            // No backend routes available\n            if (url.pathname.startsWith('/api/')) {\n                return new Response('No backend deployed', { status: 404 })\n            }\n\n            // Serve static assets (auto-detect Workers Assets vs R2)\n            if (!env.ASSETS) {\n                return new Response('ASSETS binding not configured', { status: 500 })\n            }\n\n            return isR2Bucket(env.ASSETS)\n                ? await serveFromR2(request, env.ASSETS)\n                : await serveFromAssets(request, env.ASSETS)\n        } catch (error) {\n            return new Response(`Error: ${(error as Error).message}`, { status: 500 })\n        }\n    },\n}\n";
 
 // src/lib/bundle/stub.ts
 var stubEntryTemplate = stub_entry_default.toString();

package/dist/runtime/backend-runtime/index.js

@@ -352,9 +352,9 @@ var init_routes = __esm({
 // ../edge-play/src/entry/metadata.ts
 function getRuntimeMetadata() {
   return {
-    cliVersion: true ? "0.19.5" : "0.0.0-dev",
-    sdkVersion: true ? "0.7.2" : "0.0.0-dev",
-    buildId: true ? "9df877eda20e" : "dev-source"
+    cliVersion: true ? "0.19.6-beta.2" : "0.0.0-dev",
+    sdkVersion: true ? "0.7.3-beta.2" : "0.0.0-dev",
+    buildId: true ? "5444c6c1c794" : "dev-source"
   };
 }
 var init_metadata = __esm({
@@ -3055,19 +3055,6 @@ function registerApiNotFoundHandler(app) {
 function isR2AssetsBinding(assets) {
   return "get" in assets && typeof assets.get === "function" && !("fetch" in assets);
 }
-async function serveFromWorkersAssets(c, assets) {
-  const response = await assets.fetch(c.req.raw);
-  if (response.status !== 404) {
-    return response;
-  }
-  const path = new URL(c.req.url).pathname;
-  if (path.includes(".")) {
-    return response;
-  }
-  const indexUrl = new URL(c.req.url);
-  indexUrl.pathname = "/index.html";
-  return await assets.fetch(new Request(indexUrl.toString()));
-}
 async function serveFromR2(c, bucket) {
   const path = new URL(c.req.url).pathname;
   const key = path === "/" ? "index.html" : path.slice(1);
@@ -3109,7 +3096,21 @@ function registerAssetFallback(app) {
         404
       );
     }
-    return isR2AssetsBinding(c.env.ASSETS) ? await serveFromR2(c, c.env.ASSETS) : await serveFromWorkersAssets(c, c.env.ASSETS);
+    if (isR2AssetsBinding(c.env.ASSETS)) {
+      return await serveFromR2(c, c.env.ASSETS);
+    }
+    const assets = c.env.ASSETS;
+    const response = await assets.fetch(c.req.raw);
+    if (response.status !== 404) {
+      return response;
+    }
+    const path = new URL(c.req.url).pathname;
+    if (path.includes(".")) {
+      return response;
+    }
+    const indexUrl = new URL(c.req.url);
+    indexUrl.pathname = "/index.html";
+    return await assets.fetch(new Request(indexUrl.toString()));
   });
 }
 

package/dist/runtime/backend-runtime/manifest.json

@@ -1,7 +1,7 @@
 {
-  "cliVersion": "0.19.5",
-  "sdkVersion": "0.7.2",
-  "runtimeBuildId": "9df877eda20e",
-  "inputFingerprint": "9df877eda20eba99d8a795cc1604b237ad952ce7e8de755f4bebfad559197eb3",
+  "cliVersion": "0.19.6-beta.2",
+  "sdkVersion": "0.7.3-beta.2",
+  "runtimeBuildId": "5444c6c1c794",
+  "inputFingerprint": "5444c6c1c79435ca312f88adf9ea7d5bf4a9efce39c1aa9dc03768a67955c5ac",
   "entry": "index.js"
 }

package/dist/utils.js

@@ -479,7 +479,7 @@ var DEFAULT_API_ROUTES_DIRECTORY = join2(SERVER_ROOT_DIRECTORY, "api");
 // ../better-auth/package.json
 var package_default = {
   name: "@playcademy/better-auth",
-  version: "0.0.10",
+  version: "0.0.11-beta.2",
   type: "module",
   exports: {
     "./server": {
@@ -2560,7 +2560,7 @@ import { existsSync as existsSync8, mkdirSync as mkdirSync2, writeFileSync as wr
 import { dirname as dirname4, join as join13 } from "node:path";
 
 // src/version.ts
-var cliVersion = false ? "0.0.0-dev" : "0.19.5";
+var cliVersion = false ? "0.0.0-dev" : "0.19.6-beta.2";
 
 // src/lib/build/binary-resource.ts
 function writeFileTree(baseDir, files) {

package/dist/version.js

@@ -1,5 +1,5 @@
 // src/version.ts
-var cliVersion = false ? "0.0.0-dev" : "0.19.5";
+var cliVersion = false ? "0.0.0-dev" : "0.19.6-beta.2";
 export {
   cliVersion
 };

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "playcademy",
-    "version": "0.19.5",
+    "version": "0.19.6-beta.2",
     "type": "module",
     "exports": {
         ".": {