update validation schema to support tokens in instruqtTrack URLs

- Move tokens from config/base.json into sandbox.json instruqtTrack URLs
- Remove token definitions from base configuration
- Update sandbox configuration schema to validate tokens in URLs
- Update lab configuration interface to remove separate token field
- Simplify buildLabId to use complete instruqtTrack URL
- Update documentation to reflect new configuration pattern
- Remove separate token field from validateSandboxLab schema
- Update instruqtTrack URL pattern validation to include token parameter
- Align lab validation schema with unified token approach
- Fix test cases to validate correct URL format

This change completes the migration to embedding tokens directly in instruqtTrack
URLs, ensuring consistent validation across the sandbox configuration.

Author: Younique98

config/base.json

@@ -30,15 +30,7 @@
 		},
 		"product_slugs_with_integrations": ["vault", "nomad", "packer"],
 		"sandbox": {
-			"instruqt_base_url": "https://play.instruqt.com/embed",
-			"default_tokens": {
-				"terraform-sandbox": "em_3vgTsBqCLq2blqtQ",
-				"vault-sandbox": "em_CUFCBU0nSfCl2VHi",
-				"boundary-sandbox": "em_YHsmJu4K1Wk3hwht",
-				"consul-sandbox": "em_I5XI2XjO-ZMeH1_w",
-				"consul-sandbox-sd": "em_MdAn4Od_foU6oybz",
-				"nomad-sandbox": "em_0wOuIAyyjAQllLkc"
-			}
+			"instruqt_base_url": "https://play.instruqt.com/embed"
 		}
 	},
 	"learn": {

src/content/sandbox/sandbox.json

@@ -6,31 +6,31 @@
 			"description": "Get started quickly with Terraform. This sandbox includes Docker and LocalStack preinstalled to test your Terraform configuration.",
 			"products": ["terraform"],
 			"labId": "terraform-sandbox",
-			"instruqtTrack": "hashicorp-learn/tracks/terraform-sandbox",
+			"instruqtTrack": "hashicorp-learn/tracks/terraform-sandbox?token=em_3vgTsBqCLq2blqtQ",
 			"documentation": "terraform.mdx"
 		},
 		{
 			"title": "Vault Sandbox",
 			"description": "Learn how to manage your secrets with Vault",
 			"products": ["vault"],
 			"labId": "vault-sandbox",
-			"instruqtTrack": "hashicorp-learn/tracks/vault-sandbox",
+			"instruqtTrack": "hashicorp-learn/tracks/vault-sandbox?token=em_CUFCBU0nSfCl2VHi",
 			"documentation": "vault.mdx"
 		},
 		{
 			"title": "Boundary Sandbox",
 			"description": "Learn how to manage a Boundary cluster, configure and connect to targets, and set up target credentials.",
 			"products": ["boundary"],
 			"labId": "boundary-sandbox",
-			"instruqtTrack": "hashicorp-learn/tracks/boundary-sandbox",
+			"instruqtTrack": "hashicorp-learn/tracks/boundary-sandbox?token=em_YHsmJu4K1Wk3hwht",
 			"documentation": "boundary.mdx"
 		},
 		{
 			"title": "Consul Sandbox (Service discovery)",
 			"description": "Learn about the process to register new services when you cannot run a client agent on a node, including how to manage access for external services using access control lists (ACLs).",
 			"products": ["consul"],
 			"labId": "consul-service-discovery-sandbox",
-			"instruqtTrack": "hashicorp-learn/tracks/consul-sandbox-sd",
+			"instruqtTrack": "hashicorp-learn/tracks/consul-sandbox-sd?token=em_MdAn4Od_foU6oybz",
 			"scenario": "SD",
 			"documentation": "consul-sd.mdx"
 		},
@@ -39,16 +39,16 @@
 			"description": "Learn about the process to register new services when you cannot run a client agent on a node, including how to manage access for external services using access control lists (ACLs).",
 			"products": ["consul"],
 			"labId": "consul-service-mesh-sandbox",
-			"instruqtTrack": "hashicorp-learn/tracks/consul-sandbox",
+			"instruqtTrack": "hashicorp-learn/tracks/consul-sandbox?token=em_I5XI2XjO-ZMeH1_w",
 			"scenario": "SM",
 			"documentation": "consul-sm.mdx"
 		},
 		{
 			"title": "Nomad Sandbox",
-			"description": "A Nomad cluster with three server nodes and one client node, Consul installed and configured, and Access Control Lists (ACLs) enabled for both Nomad and Consul.",
-			"products": ["nomad", "consul", "vault"],
+			"description": "Learn how to manage your infrastructure with Nomad",
+			"products": ["nomad"],
 			"labId": "nomad-sandbox",
-			"instruqtTrack": "hashicorp-learn/tracks/nomad-sandbox",
+			"instruqtTrack": "hashicorp-learn/tracks/nomad-sandbox?token=em_0wOuIAyyjAQllLkc",
 			"documentation": "nomad.mdx"
 		}
 	]

src/contexts/instruqt-lab/__tests__/instruqt-lab.test.tsx

@@ -58,23 +58,23 @@ vi.mock('content/sandbox/sandbox.json', () => ({
 				description:
 					'Test lab description that is long enough to pass validation',
 				products: ['test-product'],
-				instruqtTrack: 'hashicorp-learn/tracks/test-lab',
+				instruqtTrack: 'hashicorp-learn/tracks/test-lab?token=em_test555',
 			},
 			{
 				labId: 'test-product/stored-lab/stored-lab-id',
 				title: 'Stored Lab',
 				description:
 					'Stored lab description that is long enough to pass validation',
 				products: ['test-product'],
-				instruqtTrack: 'hashicorp-learn/tracks/stored-lab',
+				instruqtTrack: 'hashicorp-learn/tracks/stored-lab?token=em_test666',
 			},
 			{
 				labId: 'test-product/close-test-lab/close-test-lab-id',
 				title: 'Close Test Lab',
 				description:
 					'Close test lab description that is long enough to pass validation',
 				products: ['test-product'],
-				instruqtTrack: 'hashicorp-learn/tracks/close-test-lab',
+				instruqtTrack: 'hashicorp-learn/tracks/close-test-lab?token=em_test777',
 			},
 		],
 	},
@@ -123,23 +123,23 @@ function TestInstruqtProvider({ children }: { children: ReactNode }) {
 					description:
 						'Test lab description that is long enough to pass validation',
 					products: ['test-product'],
-					instruqtTrack: 'hashicorp-learn/tracks/test-lab',
+					instruqtTrack: 'hashicorp-learn/tracks/test-lab?token=em_test555',
 				},
 				{
 					labId: 'stored-lab-id',
 					title: 'Stored Lab',
 					description:
 						'Stored lab description that is long enough to pass validation',
 					products: ['test-product'],
-					instruqtTrack: 'hashicorp-learn/tracks/stored-lab',
+					instruqtTrack: 'hashicorp-learn/tracks/stored-lab?token=em_test666',
 				},
 				{
 					labId: 'close-test-lab-id',
 					title: 'Close Test Lab',
 					description:
 						'Close test lab description that is long enough to pass validation',
 					products: ['test-product'],
-					instruqtTrack: 'hashicorp-learn/tracks/close-test-lab',
+					instruqtTrack: 'hashicorp-learn/tracks/close-test-lab?token=em_test777',
 				},
 			],
 		}),

src/lib/__tests__/validate-sandbox-config.test.ts

@@ -5,24 +5,23 @@
 
 import { validateSandboxConfigWithDetailedErrors, validateSandboxConfig, validateSandboxLab } from '../validate-sandbox-config'
 
-describe('validateSandboxConfig', () => {
-	const validConfig = {
+describe('validateSandboxConfig', () => {		const validConfig = {
 		products: ['terraform', 'vault'],
 		labs: [
 			{
 				title: 'Terraform Sandbox',
 				description: 'A comprehensive Terraform sandbox environment for learning',
 				products: ['terraform'],
 				labId: 'terraform-sandbox',
-				instruqtTrack: 'hashicorp-learn/tracks/terraform-sandbox',
+				instruqtTrack: 'hashicorp-learn/tracks/terraform-sandbox?token=em_test123',
 				documentation: 'terraform.mdx'
 			},
 			{
 				title: 'Vault Sandbox',
 				description: 'Learn Vault secrets management',
 				products: ['vault'],
 				labId: 'vault-sandbox',
-				instruqtTrack: 'hashicorp-learn/tracks/vault-sandbox'
+				instruqtTrack: 'hashicorp-learn/tracks/vault-sandbox?token=em_test456'
 			}
 		]
 	}
@@ -80,7 +79,7 @@ describe('validateSandboxConfig', () => {
 					description: 'Test description that is long enough to pass validation',
 					products: ['invalid-product'], // This product is not in the global products array
 					labId: 'test-track-id',
-					instruqtTrack: 'hashicorp-learn/tracks/test-track'
+					instruqtTrack: 'hashicorp-learn/tracks/test-track?token=em_test789'
 				}]
 			}
 			const result = validateSandboxConfigWithDetailedErrors(config)
@@ -99,14 +98,14 @@ describe('validateSandboxConfig', () => {
 						description: 'Test description that is long enough',
 						products: ['terraform'],
 						labId: 'duplicate-track-id',
-						instruqtTrack: 'hashicorp-learn/tracks/duplicate-track-1'
+						instruqtTrack: 'hashicorp-learn/tracks/duplicate-track-1?token=em_test111'
 					},
 					{
 						title: 'Test 2',
 						description: 'Test description that is long enough',
 						products: ['terraform'],
 						labId: 'duplicate-track-id',
-						instruqtTrack: 'hashicorp-learn/tracks/duplicate-track-2'
+						instruqtTrack: 'hashicorp-learn/tracks/duplicate-track-2?token=em_test222'
 					}
 				]
 			}
@@ -162,7 +161,8 @@ describe('validateSandboxConfig', () => {
 				title: 'Test Lab',
 				description: 'A test lab for validation',
 				products: ['invalid-product'],
-				labId: 'test/org/lab-id'
+				labId: 'test-lab-id',
+				instruqtTrack: 'hashicorp-learn/tracks/test-lab?token=em_test444'
 			}
 
 			const result = validateSandboxLab(lab, availableProducts)
@@ -175,8 +175,8 @@ describe('validateSandboxConfig', () => {
 				title: 'Valid Lab',
 				description: 'A lab with valid products',
 				products: ['terraform', 'vault'],
-				labId: 'hashicorp/org/valid-lab',
-				instruqtTrack: 'hashicorp/org/valid-lab'
+				labId: 'valid-lab',
+				instruqtTrack: 'hashicorp-learn/tracks/valid-lab?token=em_test333'
 			}
 
 			const result = validateSandboxLab(lab, availableProducts)

src/lib/build-instruqt-url.ts

@@ -39,21 +39,10 @@ const trackInstruqtUrlError = (
 	}
 }
 
-// Get default tokens from environment variables with fallbacks
-const getDefaultTokens = (): InstruqtTokens => ({
-	'terraform-sandbox': 'em_3vgTsBqCLq2blqtQ',
-	'vault-sandbox': 'em_CUFCBU0nSfCl2VHi',
-	'boundary-sandbox': 'em_YHsmJu4K1Wk3hwht',
-	'consul-sandbox-sd': 'em_MdAn4Od_foU6oybz',
-	'consul-sandbox': 'em_I5XI2XjO-ZMeH1_w',
-	'nomad-sandbox': 'em_0wOuIAyyjAQllLkc',
-})
-
 /**
  * Builds the lab ID that will be used by the Instruqt embed
  * This combines the track path with query parameters
  * @param lab - The sandbox lab configuration (can be basic or full SandboxLab)
- * @param customTokens - Optional custom token mapping
  * @returns The complete lab ID for Instruqt embedding
  */
 export function buildLabId(
@@ -65,9 +54,7 @@ export function buildLabId(
 			trackInstruqtUrlError(
 				'null_lab_config',
 				'Lab configuration is null or undefined',
-				{
-					custom_tokens_provided: !!customTokens,
-				}
+				{ custom_tokens_provided: !!customTokens }
 			)
 			return ''
 		}
@@ -79,32 +66,16 @@ export function buildLabId(
 				{
 					lab_id: lab.labId,
 					lab_has_scenario: !!lab.scenario,
-					custom_tokens_provided: !!customTokens,
 				}
 			)
 			return lab.labId || ''
 		}
 
-		const tokens = { ...getDefaultTokens(), ...customTokens }
-
-		// Build the track URL with parameters
 		let labId = lab.instruqtTrack
 
-		// Add token parameter
-		const trackName = lab.instruqtTrack.split('/').pop() || ''
-		const token =
-			process.env.INSTRUQT_TOKEN ||
-			tokens[trackName] ||
-			tokens[lab.labId] ||
-			null
-
-		if (token) {
-			labId += `?token=${token}`
-		}
-
 		// Add scenario parameter if specified
 		if (lab.scenario) {
-			const separator = token ? '&' : '?'
+			const separator = labId.includes('?') ? '&' : '?'
 			labId += `${separator}rtp_SCENARIO=${lab.scenario}`
 		}
 
@@ -119,7 +90,6 @@ export function buildLabId(
 				lab_id: lab?.labId,
 				instruqt_track: lab?.instruqtTrack,
 				has_scenario: !!lab?.scenario,
-				custom_tokens_provided: !!customTokens,
 			}
 		)
 		return lab?.labId || ''
@@ -128,7 +98,6 @@ export function buildLabId(
 
 /**
  * Server-side function to build lab ID with config
- *
  */
 export function buildLabIdWithConfig(lab: BasicLab | SandboxLab): string {
 	try {

src/lib/docs/SANDBOX_AUTHORING_GUIDE.md

@@ -1,44 +1,52 @@
 # Sandbox Authoring Guide
 
-This guide explains how to update HashiCorp sandbox configuration and tokens for the dev-portal project.
+This guide explains how to update HashiCorp sandbox configuration for the dev-portal project.
 
-## Where to Update Sandbox Track Paths and Scenarios
+## Where to Update Sandbox Configuration
 
-- Edit `src/content/sandbox/sandbox.json`
-- Update the `instruqtTrack` field for each sandbox to change the track path.
-- Update the `scenario` field if you need to change the scenario for a sandbox.
-- If you add a new sandbox, make sure to update both sandbox.json and `getDefaultTokens`.
+All sandbox configuration is managed in a single file: `src/content/sandbox/sandbox.json`
+
+For each sandbox lab, you can configure:
+- The `instruqtTrack` field with both the track path and token
+- The `scenario` field if you need a specific scenario
 
 Example:
 
 ```json
 {
-	"labs": [
-		{
-			"title": "Terraform Sandbox",
-			"instruqtTrack": "hashicorp-learn/tracks/terraform-sandbox",
-			"scenario": "default"
-		}
-		// ...other labs
-	]
+  "labs": [
+    {
+      "title": "Terraform Sandbox",
+      "description": "A comprehensive Terraform sandbox environment for learning",
+      "products": ["terraform"],
+      "labId": "terraform-sandbox",
+      "instruqtTrack": "hashicorp-learn/tracks/terraform-sandbox?token=em_3vgTsBqCLq2blqtQ",
+      "documentation": "terraform.mdx"
+    },
+    {
+      "title": "Consul Sandbox (Service discovery)",
+      "products": ["consul"],
+      "labId": "consul-service-discovery-sandbox",
+      "instruqtTrack": "hashicorp-learn/tracks/consul-sandbox-sd?token=em_MdAn4Od_foU6oybz",
+      "scenario": "SD",
+      "documentation": "consul-sd.mdx"
+    }
+  ]
 }
 ```
 
-## Where to Update Sandbox Tokens
-
-- Edit the `getDefaultTokens` function in `src/lib/build-instruqt-url.ts`
-- Tokens are public and scoped to each sandbox scenario. You can update them directly in this function.
+## Field Descriptions
 
-Example:
-
-```typescript
-const getDefaultTokens = (): InstruqtTokens => ({
-	'terraform-sandbox': 'em_3vgTsBqCLq2blqtQ',
-	// ...other tokens
-})
-```
+- `title`: Display name for the lab
+- `description`: Brief description of what the lab provides
+- `products`: Array of product slugs this lab supports (must be listed in the global products array)
+- `labId`: Unique identifier for the lab
+- `instruqtTrack`: Full Instruqt track path including the token (e.g., `hashicorp-learn/tracks/terraform-sandbox?token=em_xyz`)
+- `scenario`: (Optional) Specific scenario to load for this lab
+- `documentation`: (Optional) Path to MDX documentation file
 
-## Summary
+## Notes
 
-- Track paths and scenarios: `sandbox.json`
-- Tokens: `build-instruqt-url.ts`
+- Tokens are public and scoped to each sandbox scenario
+- Include the token directly in the `instruqtTrack` URL using the `?token=` parameter
+- If a scenario is specified, it will be automatically appended to the URL