Merge pull request #20 from DataDog/labs

Adding Labs

Author: sethsec

.github/workflows/deploy.yml

@@ -43,6 +43,30 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Generate labs JSON
+        run: |
+          python scripts/generate-labs-json.py
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Set up Node.js (for Playwright hero-image generator)
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Install Playwright
+        run: |
+          npm install
+          npx playwright install --with-deps chromium
+
+      - name: Generate per-lab social hero images
+        run: |
+          node scripts/generate-lab-hero-images.js
+
+      - name: Generate per-lab static HTML stubs
+        run: |
+          python scripts/generate-lab-stubs.py
+
       - name: Setup Pages
         uses: actions/configure-pages@1f0c5cde4bc74cd7e1254d0cb4de8d49e9068c7d # v4.0.0
 

.gitignore

@@ -40,6 +40,10 @@ ENV/
 docs/paths.json
 docs/metadata.json
 
+# Node / Playwright (used by scripts/generate-lab-hero-images.js)
+node_modules/
+package-lock.json
+
 # Logs
 *.log
 
@@ -58,4 +62,9 @@ PROJECT_SETUP_SUMMARY.md
 
 demos/
 ignored/
-local-scripts/
+local-scripts/
+research/
+
+.claude/launch.json
+docs/design-lab.html
+docs/slide-generator.html

CLAUDE.md

@@ -67,6 +67,33 @@ cd docs && python3 dev-server.py
 # Then visit http://localhost:8888
 ```
 
+### Per-Lab Social Sharing (OG/Twitter unfurls)
+
+Each lab gets a static stub at `docs/labs/{slug}/index.html` with lab-specific
+OG/Twitter meta tags, plus a hero image at `docs/labs/{slug}/hero.png`
+rendered from the lab's attack map. Required because social crawlers don't
+execute JavaScript, so the SPA's client-side meta tag updates are invisible
+to them.
+
+```bash
+# One-time setup (Playwright + Chromium for headless rendering)
+npm install
+npx playwright install chromium
+
+# Regenerate per-lab hero images (incremental: skips labs whose PNG is
+# newer than the lab JSON and the renderer JS/CSS files)
+node scripts/generate-lab-hero-images.js
+node scripts/generate-lab-hero-images.js --force          # force-regen all
+node scripts/generate-lab-hero-images.js --slug iam-002   # single lab
+
+# Regenerate per-lab HTML stubs (cheap, always runs all labs)
+python scripts/generate-lab-stubs.py
+```
+
+Run hero-image generation BEFORE stub generation so stubs that find a per-lab
+PNG can reference it. If a PNG is missing, the stub falls back to the generic
+`/images/pathfinding-cloud-labs.png`.
+
 ### GitHub Token for Better Contributor Info
 
 ```bash

SCHEMA.md

@@ -4,10 +4,17 @@ This document defines the YAML schema used for documenting AWS IAM privilege esc
 
 ## Schema Version
 
-Current version: `1.6.0`
+Current version: `1.7.0`
 
 ### Version History
 
+#### Version 1.7.0 (2026-04-18)
+- Added `supportsOnlineMode` optional boolean field to **lab data** (sourced from pathfinding-labs, consumed via `labs.json`): indicates the lab has a deployed online environment that can be played directly from the game map terminal
+- Added `onlineEndpoint` optional string field to **lab data**: the API Gateway URL that the in-browser terminal POSTs commands to (fronts the Lambda backend)
+- These are lab-level fields, not path YAML fields — they live in the pathfinding-labs scenario configuration and flow through `generate-json.py` into `labs.json`
+- The game map "Play Online" button reads both fields; labs missing `supportsOnlineMode: true` fall back to the "Coming Soon" UI automatically
+- See also: `PLAY_ONLINE_GLOBALLY_ENABLED` constant in `docs/js/map-game.js` (global kill-switch, currently `false`)
+
 #### Version 1.6.0 (2025-01-15)
 - **Breaking change**: `parent` field changed from string to nested object
 - Added `parent.id` (string, required if parent present): The parent path ID

docs/404.html

@@ -16,10 +16,21 @@
 
             var redirect;
 
+            // Known sub-pages that have their own index.html — redirect directly with trailing slash
+            var knownLabPages = ['/labs/getting-started'];
+            var isKnownLabPage = knownLabPages.some(function(p) {
+                return pathname === p || pathname === p + '/';
+            });
+
             // If path starts with /paths/, redirect to /paths/ (which will load /paths/index.html)
             if (pathname.startsWith('/paths/')) {
                 redirect = window.location.origin + '/paths/';
                 sessionStorage.setItem('redirectPath', pathname);
+            } else if (isKnownLabPage) {
+                redirect = window.location.origin + '/labs/getting-started/';
+            } else if (pathname.startsWith('/labs/')) {
+                redirect = window.location.origin + '/labs/';
+                sessionStorage.setItem('redirectPath', pathname);
             } else {
                 // Otherwise redirect to root
                 redirect = window.location.origin + '/';