// The title integration reuses the game's existing reconnect token. No new WebSocket messages or session fields.
export const SESSION_BINDING_PREFIX = '@session/';

export function createSessionPlayerResolver(registry) {
  return (req) => {
    const match = /^Bearer ([a-f0-9]{32})$/i.exec(req.headers.authorization || '');
    const session = match ? registry.byToken(match[1]) : null;
    return session ? SESSION_BINDING_PREFIX + session.playerId : null;
  };
}