playcademy 0.30.1 → 0.31.0

package/dist/cli.js

@@ -3045,7 +3045,7 @@ import { existsSync as existsSync11, mkdirSync as mkdirSync5, readFileSync as re
 import { join as join12 } from "node:path";
 
 // src/version.ts
-var cliVersion = false ? "0.0.0-dev" : "0.30.1";
+var cliVersion = false ? "0.0.0-dev" : "0.31.0";
 
 // src/lib/init/database.ts
 var drizzleConfigTemplate = loadTemplateString("database/drizzle-config.ts");

package/dist/index.js

@@ -6486,7 +6486,7 @@ import { existsSync as existsSync11, mkdirSync as mkdirSync2, readFileSync as re
 import { join as join12 } from "node:path";
 
 // src/version.ts
-var cliVersion = false ? "0.0.0-dev" : "0.30.1";
+var cliVersion = false ? "0.0.0-dev" : "0.31.0";
 
 // src/lib/init/database.ts
 var drizzleConfigTemplate = loadTemplateString("database/drizzle-config.ts");

package/dist/runtime/dashboard-runtime/manifest.json

@@ -1,7 +1,7 @@
 {
-  "cliVersion": "0.30.1",
+  "cliVersion": "0.31.0",
   "sdkVersion": "0.19.0",
-  "runtimeBuildId": "c6f2b41dfc45",
-  "inputFingerprint": "c6f2b41dfc4596541e93b76f62d40676c3e5207958d63b331b31ca54fe3abb1b",
+  "runtimeBuildId": "2837149d70ac",
+  "inputFingerprint": "2837149d70acaaca9eff5567aae156188827aa8ac0e9977e1ecbfdd299868e16",
   "entry": "index.js"
 }

package/dist/runtime/game-runtime/index.js

@@ -384,6 +384,15 @@ var init_constants2 = __esm({
   }
 });
 
+// ../utils/src/fns.ts
+function isRecord(value) {
+  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+var init_fns = __esm({
+  "../utils/src/fns.ts"() {
+  }
+});
+
 // ../sdk/src/messaging.ts
 function isFromParentWindow(event) {
   return globalThis.window.parent !== globalThis.window && event.source === globalThis.window.parent;
@@ -1394,15 +1403,6 @@ var init_src3 = __esm({
   }
 });
 
-// ../utils/src/fns.ts
-function isRecord(value) {
-  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}
-var init_fns = __esm({
-  "../utils/src/fns.ts"() {
-  }
-});
-
 // ../utils/src/timeback.ts
 function withinQtiCapacity(capacities, usage, identifier) {
   const used = (usage.get(identifier) ?? 0) + 1;
@@ -14202,9 +14202,9 @@ var init_list = __esm({
 // ../edge-play/src/game/lib/metadata.ts
 function getRuntimeMetadata() {
   return {
-    cliVersion: true ? "0.30.1" : "0.0.0-dev",
+    cliVersion: true ? "0.31.0" : "0.0.0-dev",
     sdkVersion: true ? "0.19.0" : "0.0.0-dev",
-    buildId: true ? "c6f2b41dfc45" : "dev-source"
+    buildId: true ? "2837149d70ac" : "dev-source"
   };
 }
 var init_metadata = __esm({
@@ -17180,6 +17180,99 @@ function setupProcessGlobal() {
   };
 }
 
+// ../edge-play/src/game/middleware/playcademy-user.ts
+init_fns();
+var MAX_VERIFIED_TOKENS = 256;
+var verifiedTokens = /* @__PURE__ */ new Map();
+function isUserInfo(user) {
+  return isRecord(user) && typeof user.sub === "string" && user.sub.length > 0 && typeof user.email === "string" && (typeof user.name === "string" || user.name === null) && (user.email_verified === void 0 || typeof user.email_verified === "boolean") && ["given_name", "family_name", "issuer", "timeback_id"].every(
+    (key) => user[key] === void 0 || typeof user[key] === "string"
+  );
+}
+function isFiniteExpiry(exp) {
+  return typeof exp === "number" && Number.isFinite(exp);
+}
+function isUnexpired(exp) {
+  return isFiniteExpiry(exp) && exp > Date.now() / 1e3;
+}
+function readCachedToken(token) {
+  const entry = verifiedTokens.get(token);
+  if (!entry) {
+    return void 0;
+  }
+  verifiedTokens.delete(token);
+  if (!isUnexpired(entry.expiresAt)) {
+    return void 0;
+  }
+  verifiedTokens.set(token, entry);
+  return entry;
+}
+function cacheVerifiedToken(token, entry) {
+  verifiedTokens.delete(token);
+  verifiedTokens.set(token, entry);
+  if (verifiedTokens.size > MAX_VERIFIED_TOKENS) {
+    verifiedTokens.delete(verifiedTokens.keys().next().value);
+  }
+}
+async function verifyWithHub(token, c) {
+  let result;
+  try {
+    result = await verifyGameToken(token, {
+      baseUrl: c.env.PLAYCADEMY_BASE_URL,
+      gameOrigin: new URL(c.req.url).origin,
+      launchId: c.req.header("x-playcademy-launch-id")
+    });
+  } catch {
+    return { outcome: "verification_failed" };
+  }
+  if (!isRecord(result) || !isUserInfo(result.user) || !isRecord(result.claims)) {
+    return { outcome: "invalid_response" };
+  }
+  const { exp } = result.claims;
+  if (!isFiniteExpiry(exp)) {
+    return { user: result.user, outcome: "uncacheable" };
+  }
+  if (!isUnexpired(exp)) {
+    return { outcome: "expired" };
+  }
+  cacheVerifiedToken(token, { user: result.user, expiresAt: exp });
+  return { user: result.user, outcome: "success" };
+}
+function registerPlaycademyUser(app) {
+  app.use("/api/*", async (c, next) => {
+    const authHeader = c.req.header("Authorization");
+    if (!authHeader?.startsWith("Bearer ")) {
+      await next();
+      return;
+    }
+    const token = authHeader.slice(7);
+    const startedAt = performance.now();
+    const cached = readCachedToken(token);
+    const { user, outcome } = cached ? { user: cached.user, outcome: "success" } : await verifyWithHub(token, c);
+    if (user) {
+      c.set("playcademyUser", structuredClone(user));
+    }
+    const verificationDurationMs = performance.now() - startedAt;
+    try {
+      await next();
+    } finally {
+      console.info(
+        JSON.stringify({
+          event: "game_token_verification",
+          source: cached ? "cache" : "hub",
+          outcome,
+          game_id: c.env.GAME_ID,
+          build_version: c.env.BUILD_VERSION,
+          request_id: c.req.header("cf-ray"),
+          status_code: c.res.status,
+          verification_duration_ms: verificationDurationMs,
+          middleware_duration_ms: performance.now() - startedAt
+        })
+      );
+    }
+  });
+}
+
 // ../edge-play/src/game/middleware/index.ts
 function registerBodyDisposal(app) {
   app.use("*", async (c, next) => {
@@ -17233,24 +17326,6 @@ function registerSdkInit(app, config) {
     await next();
   });
 }
-function registerPlaycademyUser(app) {
-  app.use("/api/*", async (c, next) => {
-    const authHeader = c.req.header("Authorization");
-    if (authHeader?.startsWith("Bearer ")) {
-      const token = authHeader.slice(7);
-      try {
-        const result = await verifyGameToken(token, {
-          baseUrl: c.env.PLAYCADEMY_BASE_URL,
-          gameOrigin: new URL(c.req.url).origin,
-          launchId: c.req.header("x-playcademy-launch-id")
-        });
-        c.set("playcademyUser", result.user);
-      } catch {
-      }
-    }
-    await next();
-  });
-}
 function registerBuiltinAssetRoute(app) {
   app.get(GAME_ROUTES.ASSETS, GET);
 }

package/dist/runtime/game-runtime/manifest.json

@@ -1,7 +1,7 @@
 {
-  "cliVersion": "0.30.1",
+  "cliVersion": "0.31.0",
   "sdkVersion": "0.19.0",
-  "runtimeBuildId": "c6f2b41dfc45",
-  "inputFingerprint": "c6f2b41dfc4596541e93b76f62d40676c3e5207958d63b331b31ca54fe3abb1b",
+  "runtimeBuildId": "2837149d70ac",
+  "inputFingerprint": "2837149d70acaaca9eff5567aae156188827aa8ac0e9977e1ecbfdd299868e16",
   "entry": "index.js"
 }

package/dist/utils.js

@@ -2849,7 +2849,7 @@ import { existsSync as existsSync9, mkdirSync as mkdirSync2, writeFileSync as wr
 import { dirname as dirname4, join as join13 } from "node:path";
 
 // src/version.ts
-var cliVersion = false ? "0.0.0-dev" : "0.30.1";
+var cliVersion = false ? "0.0.0-dev" : "0.31.0";
 
 // src/lib/build/binary-resource.ts
 function writeFileTree(baseDir, files) {

package/dist/version.js

@@ -1,7 +1,7 @@
 import { createRequire as __pcCreateRequire } from 'node:module'; const require = __pcCreateRequire(import.meta.url);
 
 // src/version.ts
-var cliVersion = false ? "0.0.0-dev" : "0.30.1";
+var cliVersion = false ? "0.0.0-dev" : "0.31.0";
 export {
   cliVersion
 };

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "playcademy",
-    "version": "0.30.1",
+    "version": "0.31.0",
     "type": "module",
     "exports": {
         ".": {