Continued with the next enforcement chunk.

Implemented:
- Tightened Workspace-only game launch validation:
  - [games/shared/workspaceGameLaunchGuard.js](C:\Users\davidq\Documents\GitHub\HTML-JavaScript-Gaming\games\shared\workspaceGameLaunchGuard.js)
  - Now requires:
    - `hosted=1`
    - `hostToolId=workspace-manager`
    - valid `hostContextId`
    - shared context with `hostMode="game"` and matching `gameId`
  - On success, stores validated context on `window.__WORKSPACE_GAME_CONTEXT__`.
- Enriched Workspace-generated game context payload:
  - [tools/Workspace Manager/main.js](C:\Users\davidq\Documents\GitHub\HTML-JavaScript-Gaming\tools\Workspace Manager\main.js)
  - Hosted game context now includes: `level`, `status`, `description`, `classValues`, `tags`, flags, and `hostedAt`.
- Added shared runtime context reader for games:
  - [games/shared/workspaceGameRuntimeContext.js](C:\Users\davidq\Documents\GitHub\HTML-JavaScript-Gaming\games\shared\workspaceGameRuntimeContext.js)
  - Exposes `getWorkspaceGameRuntimeContext()` with normalized payload.
- Kept Games Hub primary launch workspace-only:
  - [games/index.render.js](C:\Users\davidq\Documents\GitHub\HTML-JavaScript-Gaming\games\index.render.js)

Validation reports:
- [samples2tools_batch_42_validation.txt](C:\Users\davidq\Documents\GitHub\HTML-JavaScript-Gaming\docs\dev\reports\samples2tools_batch_42_validation.txt) (`PASS`)
- [samples2tools_batch_42_summary.txt](C:\Users\davidq\Documents\GitHub\HTML-JavaScript-Gaming\docs\dev\reports\samples2tools_batch_42_summary.txt)
- [samples2tools_batch_43_validation.txt](C:\Users\davidq\Documents\GitHub\HTML-JavaScript-Gaming\docs\dev\reports\samples2tools_batch_43_validation.txt) (`PASS`)
- [samples2tools_batch_43_summary.txt](C:\Users\davidq\Documents\GitHub\HTML-JavaScript-Gaming\docs\dev\reports\samples2tools_batch_43_summary.txt)

Commit comment:
`Enforce strict Workspace-originated game execution by requiring valid hostContextId + game-mode context in launch guard, enrich Workspace game host payload with full metadata/timestamp, and add shared runtime context reader for hosted games (batches 42–43 PASS).`

Author: DavidQ

docs/dev/reports/samples2tools_batch_42_summary.txt

@@ -0,0 +1,12 @@
+Samples2Tools batch 42 summary
+Generated: 2026-04-24T22:34:32.900Z
+Purpose: require valid Workspace host context for game execution and remove remaining card-level standalone launch fallback.
+
+Completed this batch:
+- Added strict hostContext validation in shared game launch guard
+- Bound hosted game run approval to hostMode=game plus matching gameId from shared context
+- Exposed validated workspace game context to runtime via window.__WORKSPACE_GAME_CONTEXT__
+- Removed Games Hub launch fallback to direct href and kept Workspace-only launch URLs
+
+Primary validation artifact:
+- docs/dev/reports/samples2tools_batch_42_validation.txt (PASS)

docs/dev/reports/samples2tools_batch_42_validation.txt

@@ -0,0 +1,15 @@
+Samples2Tools batch 42 validation
+Generated: 2026-04-24T22:34:32.900Z
+Scope: enforce Workspace-originated game runtime context for launchable games.
+
+- [PASS] Guard imports tool-host shared-context reader :: games/shared/workspaceGameLaunchGuard.js
+- [PASS] Guard requires hosted workspace + hostContextId before allowing run :: games/shared/workspaceGameLaunchGuard.js
+- [PASS] Guard validates hostMode=game and matching gameId :: games/shared/workspaceGameLaunchGuard.js
+- [PASS] Guard exposes workspace context to game runtime :: games/shared/workspaceGameLaunchGuard.js
+- [PASS] Games Hub launch href is workspace-only (no row.href fallback) :: games/index.render.js
+- [PASS] Workspace manager writes game host context state :: tools/Workspace Manager/main.js
+- [PASS] All launchable game pages include guard module :: launchable=11, issues=0
+
+Checks: 7
+Failures: 0
+Result: PASS

docs/dev/reports/samples2tools_batch_43_summary.txt

@@ -0,0 +1,10 @@
+Samples2Tools batch 43 summary
+Generated: 2026-04-24T22:35:41.329Z
+Purpose: move game runtime metadata ownership into Workspace-generated host context.
+
+Completed this batch:
+- Expanded Workspace Manager game host context state with game metadata and lifecycle timestamp
+- Added shared game runtime context utility for consuming validated hosted context payloads
+
+Primary validation artifact:
+- docs/dev/reports/samples2tools_batch_43_validation.txt (PASS)

docs/dev/reports/samples2tools_batch_43_validation.txt

@@ -0,0 +1,12 @@
+Samples2Tools batch 43 validation
+Generated: 2026-04-24T22:35:41.329Z
+Scope: expand Workspace-generated game runtime context payload and expose shared runtime context reader.
+
+- [PASS] Workspace game context state includes metadata fields (level/status/description/classValues/tags) :: tools/Workspace Manager/main.js
+- [PASS] Workspace game context state includes lifecycle timestamp hostedAt :: tools/Workspace Manager/main.js
+- [PASS] Runtime context helper exists for games :: games/shared/workspaceGameRuntimeContext.js
+- [PASS] Runtime context helper returns normalized game payload :: games/shared/workspaceGameRuntimeContext.js
+
+Checks: 4
+Failures: 0
+Result: PASS

games/index.render.js

@@ -164,7 +164,7 @@ function renderCard(row, instanceKey = "main") {
   article.className = "card-link game-card";
   article.dataset.gameId = row.id;
 
-  const launchHref = row.workspaceHref || row.href || "";
+  const launchHref = row.workspaceHref || "";
   const previewHtml = row.preview
     ? `<a class="game-preview-link" href="${escapeHtml(launchHref || "#")}" ${launchHref ? "" : "aria-disabled=\"true\""}><img class="game-thumb" loading="lazy" decoding="async" alt="${escapeHtml(row.title)} thumbnail" src="${escapeHtml(row.preview)}"></a>`
     : `<span class="game-preview-link game-preview-missing">No Preview</span>`;

games/shared/workspaceGameLaunchGuard.js

@@ -1,3 +1,5 @@
+import { readToolHostSharedContextFromLocation } from "/tools/shared/toolHostSharedContext.js";
+
 function normalizeGameId(value) {
   return typeof value === "string" ? value.trim() : "";
 }
@@ -15,8 +17,15 @@ export function enforceWorkspaceGameLaunch(gameId) {
   const params = url.searchParams;
   const hosted = params.get("hosted") === "1";
   const hostToolId = (params.get("hostToolId") || "").trim().toLowerCase();
-  if (hosted && hostToolId === "workspace-manager") {
-    return;
+  const hostContextId = (params.get("hostContextId") || "").trim();
+  if (hosted && hostToolId === "workspace-manager" && hostContextId) {
+    const hostContext = readToolHostSharedContextFromLocation(window.location);
+    const contextGameId = normalizeGameId(hostContext?.sharedContext?.gameId);
+    const hostMode = normalizeGameId(hostContext?.sharedContext?.hostMode).toLowerCase();
+    if (hostMode === "game" && contextGameId.toLowerCase() === normalizedGameId.toLowerCase()) {
+      window.__WORKSPACE_GAME_CONTEXT__ = hostContext;
+      return;
+    }
   }
 
   const redirectUrl = new URL("/tools/Workspace%20Manager/index.html", window.location.origin);

games/shared/workspaceGameRuntimeContext.js

@@ -0,0 +1,37 @@
+function readContextFromWindow() {
+  if (typeof window === "undefined") {
+    return null;
+  }
+  const context = window.__WORKSPACE_GAME_CONTEXT__;
+  return context && typeof context === "object" ? context : null;
+}
+
+export function getWorkspaceGameRuntimeContext() {
+  const context = readContextFromWindow();
+  if (!context) {
+    return null;
+  }
+  const game = context?.state?.game;
+  if (!game || typeof game !== "object") {
+    return null;
+  }
+  return {
+    contextId: typeof context.contextId === "string" ? context.contextId : "",
+    requestedAt: typeof context.requestedAt === "string" ? context.requestedAt : "",
+    source: typeof context.source === "string" ? context.source : "",
+    game: {
+      id: typeof game.id === "string" ? game.id : "",
+      title: typeof game.title === "string" ? game.title : "",
+      href: typeof game.href === "string" ? game.href : "",
+      level: typeof game.level === "string" ? game.level : "",
+      status: typeof game.status === "string" ? game.status : "",
+      description: typeof game.description === "string" ? game.description : "",
+      classValues: Array.isArray(game.classValues) ? game.classValues.slice() : [],
+      tags: Array.isArray(game.tags) ? game.tags.slice() : [],
+      sampleTrack: game.sampleTrack === true,
+      debugShowcase: game.debugShowcase === true,
+      requiresService: game.requiresService === true,
+      hostedAt: typeof game.hostedAt === "string" ? game.hostedAt : ""
+    }
+  };
+}

tools/Workspace Manager/main.js

@@ -177,10 +177,24 @@ async function readGameEntryById(gameId) {
     if (!href) {
       return null;
     }
+    const classValues = Array.isArray(entry.classValues)
+      ? entry.classValues.map((value) => String(value || "").trim()).filter(Boolean)
+      : [];
+    const tags = Array.isArray(entry.tags)
+      ? entry.tags.map((value) => String(value || "").trim()).filter(Boolean)
+      : [];
     return {
       id: String(entry.id || "").trim(),
       title: String(entry.title || entry.id || "Game").trim(),
-      href
+      href,
+      level: String(entry.level || "").trim(),
+      status: String(entry.status || "").trim(),
+      description: String(entry.description || "").trim(),
+      classValues,
+      tags,
+      sampleTrack: entry.sampleTrack === true,
+      debugShowcase: entry.debugShowcase === true,
+      requiresService: entry.requiresService === true
     };
   } catch {
     return null;
@@ -227,7 +241,16 @@ function mountGameFrame(gameEntry) {
       game: {
         id: gameEntry.id,
         title: gameEntry.title,
-        href: gameEntry.href
+        href: gameEntry.href,
+        level: gameEntry.level,
+        status: gameEntry.status,
+        description: gameEntry.description,
+        classValues: gameEntry.classValues,
+        tags: gameEntry.tags,
+        sampleTrack: gameEntry.sampleTrack,
+        debugShowcase: gameEntry.debugShowcase,
+        requiresService: gameEntry.requiresService,
+        hostedAt: new Date().toISOString()
       }
     }
   });