playcademy 0.28.0 → 0.28.1-beta.10

package/README.md

@@ -264,6 +264,19 @@ Remove TimeBack integration (keeps game metadata).
 playcademy timeback cleanup
 ```
 
+#### `timeback assessments import`
+
+Import the ordered live assessment catalog and host-only QTI fixture data from the platform for
+local game testing.
+
+```bash
+playcademy timeback assessments import
+playcademy timeback assessments import --env production
+```
+
+Fixtures are written to `.playcademy/timeback/assessment-fixtures.json`. The local dev host serves
+them through the normal game SDK assessment methods and resets local attempts when it restarts.
+
 ## Environment Variables
 
 - `CI` - Set to `1` or `true` to disable interactive prompts

package/dist/bin.js

@@ -15,7 +15,8 @@ var CLI_DIRECTORIES = {
   WORKSPACE: WORKSPACE_NAME,
   DATABASE: join(WORKSPACE_NAME, "db"),
   KV: join(WORKSPACE_NAME, "kv"),
-  BUCKET: join(WORKSPACE_NAME, "bucket")
+  BUCKET: join(WORKSPACE_NAME, "bucket"),
+  TIMEBACK: join(WORKSPACE_NAME, "timeback")
 };
 var PLAYCADEMY_HOME = join(homedir(), ".playcademy");
 var CLI_USER_DIRECTORIES = {

package/dist/bucket.d.ts

@@ -1,3 +1,4 @@
+import { GamePermission } from '@playcademy/constants';
 import { TimebackCourseConfig, CourseConfig, OrganizationConfig, ComponentConfig, ResourceConfig, ComponentResourceConfig } from '@playcademy/types/timeback';
 import { Miniflare } from 'miniflare';
 
@@ -148,6 +149,13 @@ interface PlaycademyConfig {
     description?: string;
     /** Game emoji icon */
     emoji?: string;
+    /**
+     * Browser permissions to request for the game's iframe (e.g.
+     * `['microphone']`). Opt-in per game; only `microphone` and `camera` are
+     * delegated this way. Fullscreen, autoplay, and gamepad are granted to
+     * every game automatically.
+     */
+    permissions?: GamePermission[];
     /** Build command to run before deployment */
     buildCommand?: string[];
     /** Path to build output */

package/dist/bucket.js

@@ -44,7 +44,7 @@ var GAME_API_ROUTES_DIRECTORY = join2(GAME_SERVER_ROOT_DIRECTORY, "api");
 // ../better-auth/package.json
 var package_default = {
   name: "@playcademy/better-auth",
-  version: "0.0.20",
+  version: "0.0.21-beta.10",
   type: "module",
   exports: {
     "./server": {
@@ -87,18 +87,7 @@ var package_default = {
 // src/constants/auth.ts
 var BETTER_AUTH_VERSION = package_default.dependencies["better-auth"];
 
-// src/constants/config.ts
-var ENV_FILES = [
-  ".env",
-  // Loaded first
-  ".env.development",
-  // Overrides .env
-  ".env.local"
-  // Overrides all (highest priority)
-];
-
 // src/constants/bucket.ts
-var BUCKET_ALWAYS_SKIP = [".git", ".DS_Store", ".gitignore", ...ENV_FILES];
 var PRESIGNED_UPLOAD_THRESHOLD = 4 * 1024 * 1024;
 
 // src/constants/cloudflare.ts
@@ -138,7 +127,8 @@ var CLI_DIRECTORIES = {
   WORKSPACE: WORKSPACE_NAME,
   DATABASE: join5(WORKSPACE_NAME, "db"),
   KV: join5(WORKSPACE_NAME, "kv"),
-  BUCKET: join5(WORKSPACE_NAME, "bucket")
+  BUCKET: join5(WORKSPACE_NAME, "bucket"),
+  TIMEBACK: join5(WORKSPACE_NAME, "timeback")
 };
 var PLAYCADEMY_HOME = join5(homedir(), ".playcademy");
 var CLI_USER_DIRECTORIES = {
@@ -281,11 +271,44 @@ var PLAYCADEMY_SUPPORTED_QTI_INTERACTION_TYPES = [
   "text-entry",
   "order",
   "match",
-  "hottext"
+  "hottext",
+  "hotspot",
+  "gap-match",
+  "graphic-gap-match",
+  "select-point",
+  "graphic-associate",
+  "position-object"
 ];
 var PLAYCADEMY_SUPPORTED_QTI_INTERACTION_TYPE_SET = new Set(
   PLAYCADEMY_SUPPORTED_QTI_INTERACTION_TYPES
 );
+var PLAYCADEMY_AUTHORABLE_QTI_INTERACTION_TYPES = [
+  "choice",
+  "inline-choice",
+  "text-entry",
+  "order",
+  "match",
+  "hottext",
+  "gap-match",
+  "hotspot",
+  "graphic-associate",
+  "graphic-gap-match"
+];
+var PLAYCADEMY_AUTHORABLE_QTI_INTERACTION_TYPE_SET = new Set(
+  PLAYCADEMY_AUTHORABLE_QTI_INTERACTION_TYPES
+);
+var QTI_RASTER_IMAGE_MIME_TYPES = [
+  "image/png",
+  "image/jpeg",
+  // Some browsers and operating systems still report the legacy jpg spelling.
+  "image/jpg",
+  "image/gif",
+  "image/webp",
+  "image/bmp"
+];
+var QTI_RASTER_IMAGE_SUBTYPE_PATTERN = QTI_RASTER_IMAGE_MIME_TYPES.map(
+  (type) => type.slice("image/".length)
+).join("|");
 var TIMEBACK_DISCREPANCY_QUEUE_WINDOW_VALUES = new Set(TIMEBACK_DISCREPANCY_QUEUE_WINDOWS);
 var TIMEBACK_DISCREPANCY_QUEUE_METRIC_VALUES = new Set(TIMEBACK_DISCREPANCY_QUEUE_METRICS);
 

package/dist/cli.js

@@ -1207,7 +1207,7 @@ var SAMPLE_BUCKET_FILENAME = "bucket.ts";
 // ../better-auth/package.json
 var package_default = {
   name: "@playcademy/better-auth",
-  version: "0.0.20",
+  version: "0.0.21-beta.10",
   type: "module",
   exports: {
     "./server": {
@@ -1252,6 +1252,12 @@ var BETTER_AUTH_VERSION = package_default.dependencies["better-auth"];
 var PLAYCADEMY_AUTH_VERSION = "latest";
 var AUTH_CONFIG_FILE = "auth.ts";
 
+// src/constants/bucket.ts
+var PRESIGNED_UPLOAD_THRESHOLD = 4 * 1024 * 1024;
+
+// src/constants/cloudflare.ts
+var QUEUE_NAME_PREFIX = "playcademy";
+
 // src/constants/config.ts
 var ENV_FILES = [
   ".env",
@@ -1277,13 +1283,6 @@ var TSCONFIG_REQUIRED_INCLUDES = [
   // Server-side code
 ];
 
-// src/constants/bucket.ts
-var BUCKET_ALWAYS_SKIP = [".git", ".DS_Store", ".gitignore", ...ENV_FILES];
-var PRESIGNED_UPLOAD_THRESHOLD = 4 * 1024 * 1024;
-
-// src/constants/cloudflare.ts
-var QUEUE_NAME_PREFIX = "playcademy";
-
 // src/constants/database.ts
 import { join as join4 } from "path";
 var DEFAULT_DATABASE_DIRECTORY = join4("server", "db");
@@ -1339,7 +1338,8 @@ var CLI_DIRECTORIES = {
   WORKSPACE: WORKSPACE_NAME,
   DATABASE: join6(WORKSPACE_NAME, "db"),
   KV: join6(WORKSPACE_NAME, "kv"),
-  BUCKET: join6(WORKSPACE_NAME, "bucket")
+  BUCKET: join6(WORKSPACE_NAME, "bucket"),
+  TIMEBACK: join6(WORKSPACE_NAME, "timeback")
 };
 var PLAYCADEMY_HOME = join6(homedir(), ".playcademy");
 var CLI_USER_DIRECTORIES = {
@@ -1372,6 +1372,18 @@ var CONFIG_FILE_NAMES = [
 ];
 
 // ../constants/src/timeback.ts
+var TIMEBACK_GRADES = [-1, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13];
+var TIMEBACK_SUBJECTS = [
+  "Reading",
+  "Language",
+  "Vocabulary",
+  "Social Studies",
+  "Writing",
+  "Science",
+  "FastMath",
+  "Math",
+  "None"
+];
 var TIMEBACK_ORG_NAME = "Playcademy Studios";
 var TIMEBACK_ORG_TYPE = "department";
 var TIMEBACK_COURSE_DEFAULTS = {
@@ -2048,17 +2060,6 @@ function processConfigVariables(config) {
 }
 
 // ../timeback/dist/constants.js
-var TIMEBACK_SUBJECTS = [
-  "Math",
-  "FastMath",
-  "Science",
-  "Social Studies",
-  "Language",
-  "Reading",
-  "Vocabulary",
-  "Writing"
-];
-var TIMEBACK_GRADE_LEVELS = [-1, 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13];
 var TIMEBACK_GRADE_LEVEL_LABELS = {
   "-1": "pre-k",
   "0": "kindergarten",
@@ -2121,11 +2122,44 @@ var PLAYCADEMY_SUPPORTED_QTI_INTERACTION_TYPES = [
   "text-entry",
   "order",
   "match",
-  "hottext"
+  "hottext",
+  "hotspot",
+  "gap-match",
+  "graphic-gap-match",
+  "select-point",
+  "graphic-associate",
+  "position-object"
 ];
 var PLAYCADEMY_SUPPORTED_QTI_INTERACTION_TYPE_SET = new Set(
   PLAYCADEMY_SUPPORTED_QTI_INTERACTION_TYPES
 );
+var PLAYCADEMY_AUTHORABLE_QTI_INTERACTION_TYPES = [
+  "choice",
+  "inline-choice",
+  "text-entry",
+  "order",
+  "match",
+  "hottext",
+  "gap-match",
+  "hotspot",
+  "graphic-associate",
+  "graphic-gap-match"
+];
+var PLAYCADEMY_AUTHORABLE_QTI_INTERACTION_TYPE_SET = new Set(
+  PLAYCADEMY_AUTHORABLE_QTI_INTERACTION_TYPES
+);
+var QTI_RASTER_IMAGE_MIME_TYPES = [
+  "image/png",
+  "image/jpeg",
+  // Some browsers and operating systems still report the legacy jpg spelling.
+  "image/jpg",
+  "image/gif",
+  "image/webp",
+  "image/bmp"
+];
+var QTI_RASTER_IMAGE_SUBTYPE_PATTERN = QTI_RASTER_IMAGE_MIME_TYPES.map(
+  (type) => type.slice("image/".length)
+).join("|");
 var TIMEBACK_DISCREPANCY_QUEUE_WINDOW_VALUES = new Set(TIMEBACK_DISCREPANCY_QUEUE_WINDOWS);
 var TIMEBACK_DISCREPANCY_QUEUE_METRIC_VALUES = new Set(TIMEBACK_DISCREPANCY_QUEUE_METRICS);
 
@@ -3007,7 +3041,7 @@ import { existsSync as existsSync11, mkdirSync as mkdirSync5, readFileSync as re
 import { join as join13 } from "node:path";
 
 // src/version.ts
-var cliVersion = false ? "0.0.0-dev" : "0.28.0";
+var cliVersion = false ? "0.0.0-dev" : "0.28.1-beta.10";
 
 // src/lib/init/database.ts
 var drizzleConfigTemplate = loadTemplateString("database/drizzle-config.ts");
@@ -3252,7 +3286,7 @@ async function promptForTimeBackIntegration(options) {
   }
   const grades = await checkbox({
     message: "Select grade levels:",
-    choices: TIMEBACK_GRADE_LEVELS.map((grade) => ({
+    choices: TIMEBACK_GRADES.map((grade) => ({
       value: grade,
       name: TIMEBACK_GRADE_LEVEL_LABELS[grade.toString()]
     })),

package/dist/constants.d.ts

@@ -59,15 +59,18 @@ declare const AUTH_CONFIG_FILE = "auth.ts";
  * Bucket-related constants
  */
 /**
- * Files and directories that are always excluded from bucket sync uploads
+ * Files and directories that are always excluded from bucket uploads
  *
- * These are automatically skipped regardless of .gitignore patterns:
+ * These exact names are skipped regardless of .gitignore patterns:
  * - .git - Git repository data
  * - .DS_Store - macOS filesystem metadata
  * - .gitignore - Git ignore configuration (shouldn't be uploaded to storage)
- * - .env* - Environment files (should never be uploaded to storage)
+ *
+ * Environment files are excluded separately by the `.env*` name pattern in
+ * the collector, so every variant (`.env.production`, `.envrc`, ...) is
+ * covered, not just the ones the CLI loads.
  */
-declare const BUCKET_ALWAYS_SKIP: readonly [".git", ".DS_Store", ".gitignore", ".env", ".env.development", ".env.local"];
+declare const BUCKET_ALWAYS_SKIP: readonly ['.git', '.DS_Store', '.gitignore'];
 declare const PRESIGNED_UPLOAD_THRESHOLD: number;
 /**
  * Default directory synced to the bucket by `playcademy bucket sync`.
@@ -277,8 +280,8 @@ declare const GODOT_EXECUTABLE_PATTERNS: {
 declare const CALLBACK_PORT = 6175;
 /** Path for the OAuth callback endpoint */
 declare const CALLBACK_PATH = "/callback";
-/** Timeout for SSO authentication in milliseconds (30 seconds) */
-declare const SSO_AUTH_TIMEOUT_MS = 30000;
+/** Timeout for the whole browser SSO flow (login page + provider auth + MFA) */
+declare const SSO_AUTH_TIMEOUT_MS = 90000;
 
 /**
  * Path constants for CLI directories and files
@@ -289,6 +292,7 @@ declare const CLI_DIRECTORIES: {
     readonly DATABASE: string;
     readonly KV: string;
     readonly BUCKET: string;
+    readonly TIMEBACK: string;
 };
 declare const CLI_USER_DIRECTORIES: {
     readonly CONFIG: string;
@@ -310,6 +314,7 @@ declare const CLI_FILES: {
     readonly AUTH_STORE: 'auth.json';
     readonly GAMES_STORE: 'games.json';
     readonly INITIAL_DATABASE: 'initial.sqlite';
+    readonly ASSESSMENT_FIXTURES: 'assessment-fixtures.json';
 };
 
 /**

package/dist/constants.js

@@ -21,7 +21,7 @@ var SAMPLE_BUCKET_FILENAME = "bucket.ts";
 // ../better-auth/package.json
 var package_default = {
   name: "@playcademy/better-auth",
-  version: "0.0.20",
+  version: "0.0.21-beta.10",
   type: "module",
   exports: {
     "./server": {
@@ -73,6 +73,24 @@ var OAUTH_CALLBACK_URL_PATTERN = "{appUrl}/api/auth/callback/{provider}";
 var PLACEHOLDER_APP_URL = "https://your-app.playcademy.gg";
 var AUTH_CONFIG_FILE = "auth.ts";
 
+// src/constants/bucket.ts
+var BUCKET_ALWAYS_SKIP = [".git", ".DS_Store", ".gitignore"];
+var PRESIGNED_UPLOAD_THRESHOLD = 4 * 1024 * 1024;
+var DEFAULT_BUCKET_DIRECTORY = "bucket";
+
+// src/constants/cloudflare.ts
+var CLOUDFLARE_BINDINGS = {
+  /** R2 bucket binding name */
+  BUCKET: "BUCKET",
+  /** KV namespace binding name */
+  KV: "KV",
+  /** D1 database binding name */
+  DB: "DB"
+};
+var MINIFLARE_D1_DIRECTORY = "miniflare-D1DatabaseObject";
+var QUEUE_NAME_PREFIX = "playcademy";
+var SELF_WORKER_NAME_BINDING = "__PLAYCADEMY_WORKER_NAME";
+
 // src/constants/config.ts
 var ENV_FILES = [
   ".env",
@@ -98,24 +116,6 @@ var TSCONFIG_REQUIRED_INCLUDES = [
   // Server-side code
 ];
 
-// src/constants/bucket.ts
-var BUCKET_ALWAYS_SKIP = [".git", ".DS_Store", ".gitignore", ...ENV_FILES];
-var PRESIGNED_UPLOAD_THRESHOLD = 4 * 1024 * 1024;
-var DEFAULT_BUCKET_DIRECTORY = "bucket";
-
-// src/constants/cloudflare.ts
-var CLOUDFLARE_BINDINGS = {
-  /** R2 bucket binding name */
-  BUCKET: "BUCKET",
-  /** KV namespace binding name */
-  KV: "KV",
-  /** D1 database binding name */
-  DB: "DB"
-};
-var MINIFLARE_D1_DIRECTORY = "miniflare-D1DatabaseObject";
-var QUEUE_NAME_PREFIX = "playcademy";
-var SELF_WORKER_NAME_BINDING = "__PLAYCADEMY_WORKER_NAME";
-
 // src/constants/database.ts
 import { join as join3 } from "path";
 var DEFAULT_DATABASE_DIRECTORY = join3("server", "db");
@@ -182,7 +182,7 @@ var GODOT_EXECUTABLE_PATTERNS = {
 // src/constants/http-server.ts
 var CALLBACK_PORT = 6175;
 var CALLBACK_PATH = "/callback";
-var SSO_AUTH_TIMEOUT_MS = 3e4;
+var SSO_AUTH_TIMEOUT_MS = 9e4;
 
 // src/constants/paths.ts
 import { homedir } from "node:os";
@@ -192,7 +192,8 @@ var CLI_DIRECTORIES = {
   WORKSPACE: WORKSPACE_NAME,
   DATABASE: join5(WORKSPACE_NAME, "db"),
   KV: join5(WORKSPACE_NAME, "kv"),
-  BUCKET: join5(WORKSPACE_NAME, "bucket")
+  BUCKET: join5(WORKSPACE_NAME, "bucket"),
+  TIMEBACK: join5(WORKSPACE_NAME, "timeback")
 };
 var PLAYCADEMY_HOME = join5(homedir(), ".playcademy");
 var CLI_USER_DIRECTORIES = {
@@ -216,7 +217,8 @@ var CLI_DEFAULT_OUTPUTS = {
 var CLI_FILES = {
   AUTH_STORE: "auth.json",
   GAMES_STORE: "games.json",
-  INITIAL_DATABASE: "initial.sqlite"
+  INITIAL_DATABASE: "initial.sqlite",
+  ASSESSMENT_FIXTURES: "assessment-fixtures.json"
 };
 
 // src/constants/ports.ts

package/dist/db.js

@@ -2335,7 +2335,7 @@ var GAME_API_ROUTES_DIRECTORY = join2(GAME_SERVER_ROOT_DIRECTORY, "api");
 // ../better-auth/package.json
 var package_default = {
   name: "@playcademy/better-auth",
-  version: "0.0.20",
+  version: "0.0.21-beta.10",
   type: "module",
   exports: {
     "./server": {
@@ -2378,18 +2378,7 @@ var package_default = {
 // src/constants/auth.ts
 var BETTER_AUTH_VERSION = package_default.dependencies["better-auth"];
 
-// src/constants/config.ts
-var ENV_FILES = [
-  ".env",
-  // Loaded first
-  ".env.development",
-  // Overrides .env
-  ".env.local"
-  // Overrides all (highest priority)
-];
-
 // src/constants/bucket.ts
-var BUCKET_ALWAYS_SKIP = [".git", ".DS_Store", ".gitignore", ...ENV_FILES];
 var PRESIGNED_UPLOAD_THRESHOLD = 4 * 1024 * 1024;
 
 // src/constants/cloudflare.ts
@@ -2451,7 +2440,8 @@ var CLI_DIRECTORIES = {
   WORKSPACE: WORKSPACE_NAME,
   DATABASE: join5(WORKSPACE_NAME, "db"),
   KV: join5(WORKSPACE_NAME, "kv"),
-  BUCKET: join5(WORKSPACE_NAME, "bucket")
+  BUCKET: join5(WORKSPACE_NAME, "bucket"),
+  TIMEBACK: join5(WORKSPACE_NAME, "timeback")
 };
 var PLAYCADEMY_HOME = join5(homedir(), ".playcademy");
 var CLI_USER_DIRECTORIES = {
@@ -2468,7 +2458,8 @@ var CLI_DEFAULT_OUTPUTS = {
 var CLI_FILES = {
   AUTH_STORE: "auth.json",
   GAMES_STORE: "games.json",
-  INITIAL_DATABASE: "initial.sqlite"
+  INITIAL_DATABASE: "initial.sqlite",
+  ASSESSMENT_FIXTURES: "assessment-fixtures.json"
 };
 
 // src/constants/timeback.ts
@@ -3394,6 +3385,17 @@ async function requireAuthenticatedClient() {
 
 // src/lib/core/errors.ts
 import { ApiError as ApiError2 } from "@playcademy/sdk/internal";
+
+// src/lib/core/exit.ts
+function exitAfterStdoutDrain(code) {
+  return new Promise(() => {
+    process.stdout.write("", () => {
+      process.exit(code);
+    });
+  });
+}
+
+// src/lib/core/errors.ts
 function getErrorMessage(error) {
   if (error instanceof ApiError2) {
     if (error.message) {
@@ -3418,15 +3420,6 @@ function getErrorMessage(error) {
   return "Unknown error";
 }
 
-// src/lib/core/exit.ts
-function exitAfterStdoutDrain(code) {
-  return new Promise(() => {
-    process.stdout.write("", () => {
-      process.exit(code);
-    });
-  });
-}
-
 // ../utils/src/uuid.ts
 var UUID_REGEX = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$/;
 function isValidUUID(value) {
@@ -4207,11 +4200,44 @@ var PLAYCADEMY_SUPPORTED_QTI_INTERACTION_TYPES = [
   "text-entry",
   "order",
   "match",
-  "hottext"
+  "hottext",
+  "hotspot",
+  "gap-match",
+  "graphic-gap-match",
+  "select-point",
+  "graphic-associate",
+  "position-object"
 ];
 var PLAYCADEMY_SUPPORTED_QTI_INTERACTION_TYPE_SET = new Set(
   PLAYCADEMY_SUPPORTED_QTI_INTERACTION_TYPES
 );
+var PLAYCADEMY_AUTHORABLE_QTI_INTERACTION_TYPES = [
+  "choice",
+  "inline-choice",
+  "text-entry",
+  "order",
+  "match",
+  "hottext",
+  "gap-match",
+  "hotspot",
+  "graphic-associate",
+  "graphic-gap-match"
+];
+var PLAYCADEMY_AUTHORABLE_QTI_INTERACTION_TYPE_SET = new Set(
+  PLAYCADEMY_AUTHORABLE_QTI_INTERACTION_TYPES
+);
+var QTI_RASTER_IMAGE_MIME_TYPES = [
+  "image/png",
+  "image/jpeg",
+  // Some browsers and operating systems still report the legacy jpg spelling.
+  "image/jpg",
+  "image/gif",
+  "image/webp",
+  "image/bmp"
+];
+var QTI_RASTER_IMAGE_SUBTYPE_PATTERN = QTI_RASTER_IMAGE_MIME_TYPES.map(
+  (type) => type.slice("image/".length)
+).join("|");
 var TIMEBACK_DISCREPANCY_QUEUE_WINDOW_VALUES = new Set(TIMEBACK_DISCREPANCY_QUEUE_WINDOWS);
 var TIMEBACK_DISCREPANCY_QUEUE_METRIC_VALUES = new Set(TIMEBACK_DISCREPANCY_QUEUE_METRICS);