@longsightgroup/qti3-core 0.3.0 → 0.4.0

package/dist/xml.js

@@ -3,53 +3,88 @@ export function parseXmlTree(xml) {
     const parser = new StaxXmlParserSync(xml, {
         autoDecodeEntities: true,
     });
+    const tagTokens = scanXmlTagTokens(xml);
     const stack = [];
     const errors = [];
     let root;
-    let searchOffset = 0;
-    for (const event of parser) {
-        if (event.type === XmlEventType.ERROR) {
-            errors.push(event.error);
-            continue;
-        }
-        if (event.type === XmlEventType.START_ELEMENT) {
-            const parent = stack.at(-1);
-            const offset = findStartElementOffset(xml, event.name, searchOffset);
-            searchOffset = offset >= 0 ? offset + 1 : searchOffset;
-            const node = {
-                name: event.name,
-                localName: event.localName ?? event.name,
-                prefix: event.prefix,
-                uri: event.uri,
-                attributes: event.attributes,
-                children: [],
-                content: [],
-                text: "",
-                source: sourceLocation(xml, offset, nodePath(parent, event.localName ?? event.name)),
-            };
-            if (parent) {
-                node.parent = parent;
-                parent.children.push(node);
-                parent.content.push(node);
+    let tagTokenIndex = 0;
+    try {
+        for (const event of parser) {
+            if (event.type === XmlEventType.ERROR) {
+                errors.push(event.error);
+                continue;
             }
-            else {
-                root = node;
+            if (event.type === XmlEventType.START_ELEMENT) {
+                const parent = stack.at(-1);
+                const path = nodePath(parent, event.localName ?? event.name);
+                const sourceRange = { startOffset: -1, startTagEndOffset: -1 };
+                const token = tagTokens[tagTokenIndex];
+                if (token?.kind === "start" && token.name === event.name) {
+                    tagTokenIndex += 1;
+                    sourceRange.startOffset = token.startOffset;
+                    sourceRange.startTagEndOffset = token.startTagEndOffset;
+                    if (token.endOffset !== undefined) {
+                        sourceRange.endOffset = token.endOffset;
+                    }
+                }
+                else {
+                    errors.push(new Error(`XML source range alignment failed for <${event.name}>.`));
+                }
+                const node = {
+                    name: event.name,
+                    localName: event.localName ?? event.name,
+                    prefix: event.prefix,
+                    uri: event.uri,
+                    attributes: event.attributes,
+                    children: [],
+                    content: [],
+                    text: "",
+                    source: sourceLocation(xml, sourceRange.startOffset, path),
+                    sourceRange,
+                };
+                if (parent) {
+                    node.parent = parent;
+                    parent.children.push(node);
+                    parent.content.push(node);
+                }
+                else {
+                    root = node;
+                }
+                stack.push(node);
+                continue;
             }
-            stack.push(node);
-            continue;
-        }
-        if (event.type === XmlEventType.END_ELEMENT) {
-            stack.pop();
-            continue;
-        }
-        if (event.type === XmlEventType.CHARACTERS || event.type === XmlEventType.CDATA) {
-            const node = stack.at(-1);
-            if (node) {
-                node.text += event.value;
-                node.content.push(event.value);
+            if (event.type === XmlEventType.END_ELEMENT) {
+                const node = stack.pop();
+                if (node) {
+                    if (node.sourceRange.endOffset === undefined) {
+                        const token = tagTokens[tagTokenIndex];
+                        if (token?.kind === "end" && token.name === event.name) {
+                            tagTokenIndex += 1;
+                            node.sourceRange.endOffset = token.endOffset;
+                            node.endSource = sourceLocation(xml, token.startOffset, node.source.path);
+                        }
+                        else {
+                            errors.push(new Error(`XML source range alignment failed for </${event.name}>.`));
+                        }
+                    }
+                }
+                continue;
+            }
+            if (event.type === XmlEventType.CHARACTERS || event.type === XmlEventType.CDATA) {
+                const node = stack.at(-1);
+                if (node) {
+                    node.text += event.value;
+                    node.content.push(event.value);
+                }
             }
         }
     }
+    catch (error) {
+        errors.push(error instanceof Error ? error : new Error(String(error)));
+    }
+    for (const node of [...stack].reverse()) {
+        errors.push(new Error(`Unexpected end of document. Missing closing tag for <${node.name}>.`));
+    }
     return { root, errors };
 }
 export function childElements(node, localName) {
@@ -68,26 +103,139 @@ export function textContent(node) {
     const parts = node.content.map((entry) => typeof entry === "string" ? entry : textContent(entry));
     return parts.join(" ").replace(/\s+/g, " ").trim();
 }
-function findStartElementOffset(xml, name, from) {
-    let offset = from;
+function scanXmlTagTokens(xml) {
+    const tokens = [];
+    let offset = 0;
     while (offset < xml.length) {
-        const start = xml.indexOf("<", offset);
-        if (start === -1)
-            return -1;
-        const next = xml.charAt(start + 1);
-        if (next === "/" || next === "!" || next === "?") {
-            offset = start + 1;
+        const startOffset = xml.indexOf("<", offset);
+        if (startOffset === -1 || startOffset + 1 >= xml.length)
+            return tokens;
+        if (xml.startsWith("<!--", startOffset)) {
+            offset = skipPastSequence(xml, "-->", startOffset + 4);
             continue;
         }
-        const afterName = start + 1 + name.length;
-        if (xml.slice(start + 1, afterName) === name &&
-            (afterName >= xml.length || /[\s/>]/.test(xml.charAt(afterName)))) {
-            return start;
+        if (xml.startsWith("<![CDATA[", startOffset)) {
+            offset = skipPastSequence(xml, "]]>", startOffset + 9);
+            continue;
         }
-        offset = start + 1;
+        const next = xml.charAt(startOffset + 1);
+        if (next === "?") {
+            offset = skipPastSequence(xml, "?>", startOffset + 2);
+            continue;
+        }
+        if (next === "!") {
+            const declarationEndOffset = findMarkupDeclarationEndOffset(xml, startOffset + 2);
+            offset = declarationEndOffset >= 0 ? declarationEndOffset + 1 : xml.length;
+            continue;
+        }
+        if (next === "/") {
+            const tagEndOffset = findTagEndOffset(xml, startOffset + 2);
+            if (tagEndOffset < 0)
+                return tokens;
+            const name = readTagName(xml, startOffset + 2, tagEndOffset);
+            if (name) {
+                tokens.push({
+                    kind: "end",
+                    name,
+                    startOffset,
+                    startTagEndOffset: tagEndOffset,
+                    endOffset: tagEndOffset + 1,
+                    selfClosing: false,
+                });
+            }
+            offset = tagEndOffset + 1;
+            continue;
+        }
+        const tagEndOffset = findTagEndOffset(xml, startOffset + 1);
+        if (tagEndOffset < 0)
+            return tokens;
+        const name = readTagName(xml, startOffset + 1, tagEndOffset);
+        if (name) {
+            const selfClosing = isSelfClosingStartTag(xml, tagEndOffset);
+            tokens.push({
+                kind: "start",
+                name,
+                startOffset,
+                startTagEndOffset: tagEndOffset,
+                endOffset: selfClosing ? tagEndOffset + 1 : undefined,
+                selfClosing,
+            });
+        }
+        offset = tagEndOffset + 1;
+    }
+    return tokens;
+}
+function skipPastSequence(xml, sequence, from) {
+    const endOffset = xml.indexOf(sequence, from);
+    return endOffset >= 0 ? endOffset + sequence.length : xml.length;
+}
+function findMarkupDeclarationEndOffset(xml, from) {
+    let quote = null;
+    let internalSubsetDepth = 0;
+    for (let index = from; index < xml.length; index += 1) {
+        const char = xml.charAt(index);
+        if (quote) {
+            if (char === quote)
+                quote = null;
+            continue;
+        }
+        if (char === '"' || char === "'") {
+            quote = char;
+            continue;
+        }
+        if (char === "[") {
+            internalSubsetDepth += 1;
+            continue;
+        }
+        if (char === "]" && internalSubsetDepth > 0) {
+            internalSubsetDepth -= 1;
+            continue;
+        }
+        if (char === ">" && internalSubsetDepth === 0)
+            return index;
+    }
+    return -1;
+}
+function readTagName(xml, from, to) {
+    let start = from;
+    while (start < to && /\s/.test(xml.charAt(start)))
+        start += 1;
+    let end = start;
+    while (end < to) {
+        const char = xml.charAt(end);
+        if (/\s/.test(char) || char === "/" || char === ">")
+            break;
+        end += 1;
+    }
+    return xml.slice(start, end);
+}
+function findTagEndOffset(xml, from) {
+    let quote = null;
+    for (let index = from; index < xml.length; index += 1) {
+        const char = xml.charAt(index);
+        if (quote) {
+            if (char === quote)
+                quote = null;
+            continue;
+        }
+        if (char === '"' || char === "'") {
+            quote = char;
+            continue;
+        }
+        if (char === ">")
+            return index;
     }
     return -1;
 }
+function isSelfClosingStartTag(xml, tagEndOffset) {
+    for (let index = tagEndOffset - 1; index >= 0; index -= 1) {
+        const char = xml.charAt(index);
+        if (/\s/.test(char))
+            continue;
+        return char === "/";
+    }
+    return false;
+}
 function sourceLocation(xml, offset, path) {
     if (offset < 0)
         return { line: 1, column: 1, offset: 0, path };

package/dist/xml.js.map

@@ -1 +1 @@
-{"version":3,"file":"xml.js","sourceRoot":"","sources":["../src/xml.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAsB3D,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC,GAAG,EAAE;QACxC,kBAAkB,EAAE,IAAI;KACzB,CAAC,CAAC;IACH,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,IAAI,IAAyB,CAAC;IAC9B,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,KAAK,EAAE,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,aAAa,EAAE,CAAC;YAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;YACrE,YAAY,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;YACvD,MAAM,IAAI,GAAY;gBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI;gBACxC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,QAAQ,EAAE,EAAE;gBACZ,OAAO,EAAE,EAAE;gBACX,IAAI,EAAE,EAAE;gBACR,MAAM,EAAE,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;aACrF,CAAC;YAEF,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;gBACrB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC3B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,IAAI,CAAC;YACd,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,WAAW,EAAE,CAAC;YAC5C,KAAK,CAAC,GAAG,EAAE,CAAC;YACZ,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,KAAK,EAAE,CAAC;YAChF,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC;gBACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAa,EAAE,SAAkB;IAC7D,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAa,EAAE,SAAqC;IAC9E,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClC,IAAI,SAAS,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CACvD,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAW,EAAE,IAAY,EAAE,IAAY;IACrE,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,OAAO,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACvC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjD,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1C,IACE,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,SAAS,CAAC,KAAK,IAAI;YACxC,CAAC,SAAS,IAAI,GAAG,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EACjE,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,MAAc,EAAE,IAAY;IAC/D,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;IAC/D,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,CAAC;YACV,MAAM,GAAG,CAAC,CAAC;QACb,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,MAA2B,EAAE,SAAiB;IAC9D,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,SAAS,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1F,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,SAAS,IAAI,KAAK,GAAG,CAAC;AACxD,CAAC"}
+{"version":3,"file":"xml.js","sourceRoot":"","sources":["../src/xml.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAiC3D,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC,GAAG,EAAE;QACxC,kBAAkB,EAAE,IAAI;KACzB,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,IAAI,IAAyB,CAAC;IAC9B,IAAI,aAAa,GAAG,CAAC,CAAC;IAEtB,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,KAAK,EAAE,CAAC;gBACtC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACzB,SAAS;YACX,CAAC;YAED,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,aAAa,EAAE,CAAC;gBAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5B,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC7D,MAAM,WAAW,GAAmB,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC/E,MAAM,KAAK,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;gBACvC,IAAI,KAAK,EAAE,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;oBACzD,aAAa,IAAI,CAAC,CAAC;oBACnB,WAAW,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;oBAC5C,WAAW,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;oBACxD,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;wBAClC,WAAW,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;oBAC1C,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,0CAA0C,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;gBACnF,CAAC;gBACD,MAAM,IAAI,GAAY;oBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI;oBACxC,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,QAAQ,EAAE,EAAE;oBACZ,OAAO,EAAE,EAAE;oBACX,IAAI,EAAE,EAAE;oBACR,MAAM,EAAE,cAAc,CAAC,GAAG,EAAE,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC;oBAC1D,WAAW;iBACZ,CAAC;gBAEF,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;oBACrB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC3B,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5B,CAAC;qBAAM,CAAC;oBACN,IAAI,GAAG,IAAI,CAAC;gBACd,CAAC;gBACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,SAAS;YACX,CAAC;YAED,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,WAAW,EAAE,CAAC;gBAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;gBACzB,IAAI,IAAI,EAAE,CAAC;oBACT,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;wBAC7C,MAAM,KAAK,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;wBACvC,IAAI,KAAK,EAAE,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;4BACvD,aAAa,IAAI,CAAC,CAAC;4BACnB,IAAI,CAAC,WAAW,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;4BAC7C,IAAI,CAAC,SAAS,GAAG,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;wBAC5E,CAAC;6BAAM,CAAC;4BACN,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,2CAA2C,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;wBACpF,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,KAAK,EAAE,CAAC;gBAChF,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1B,IAAI,IAAI,EAAE,CAAC;oBACT,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC;oBACzB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,wDAAwD,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;IAChG,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAa,EAAE,SAAkB;IAC7D,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAa,EAAE,SAAqC;IAC9E,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClC,IAAI,SAAS,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CACvD,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACrD,CAAC;AAWD,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,OAAO,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QAC3B,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7C,IAAI,WAAW,KAAK,CAAC,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC;QAEvE,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;YACxC,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QAED,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,CAAC;YAC7C,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC;YACvD,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,GAAG,gBAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC;YACtD,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,oBAAoB,GAAG,8BAA8B,CAAC,GAAG,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC;YAClF,MAAM,GAAG,oBAAoB,IAAI,CAAC,CAAC,CAAC,CAAC,oBAAoB,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;YAC3E,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC;YAC5D,IAAI,YAAY,GAAG,CAAC;gBAAE,OAAO,MAAM,CAAC;YACpC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,WAAW,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;YAC7D,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,KAAK;oBACX,IAAI;oBACJ,WAAW;oBACX,iBAAiB,EAAE,YAAY;oBAC/B,SAAS,EAAE,YAAY,GAAG,CAAC;oBAC3B,WAAW,EAAE,KAAK;iBACnB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,GAAG,YAAY,GAAG,CAAC,CAAC;YAC1B,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,GAAG,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC;QAC5D,IAAI,YAAY,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC;QACpC,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,EAAE,WAAW,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;QAC7D,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,WAAW,GAAG,qBAAqB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,OAAO;gBACb,IAAI;gBACJ,WAAW;gBACX,iBAAiB,EAAE,YAAY;gBAC/B,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;gBACrD,WAAW;aACZ,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,YAAY,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,QAAgB,EAAE,IAAY;IACnE,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC9C,OAAO,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;AACnE,CAAC;AAED,SAAS,8BAA8B,CAAC,GAAW,EAAE,IAAY;IAC/D,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,KAAK,IAAI,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,IAAI,KAAK,KAAK;gBAAE,KAAK,GAAG,IAAI,CAAC;YACjC,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,KAAK,GAAG,IAAI,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,mBAAmB,IAAI,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,mBAAmB,GAAG,CAAC,EAAE,CAAC;YAC5C,mBAAmB,IAAI,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,mBAAmB,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,IAAY,EAAE,EAAU;IACxD,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,OAAO,KAAK,GAAG,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAE,KAAK,IAAI,CAAC,CAAC;IAC9D,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,GAAG,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;YAAE,MAAM;QAC3D,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,IAAY;IACjD,IAAI,KAAK,GAAkB,IAAI,CAAC;IAChC,KAAK,IAAI,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,IAAI,KAAK,KAAK;gBAAE,KAAK,GAAG,IAAI,CAAC;YACjC,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,KAAK,GAAG,IAAI,CAAC;YACb,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;IACjC,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW,EAAE,YAAoB;IAC9D,KAAK,IAAI,KAAK,GAAG,YAAY,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC9B,OAAO,IAAI,KAAK,GAAG,CAAC;IACtB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,MAAc,EAAE,IAAY;IAC/D,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;IAC/D,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,CAAC;YACV,MAAM,GAAG,CAAC,CAAC;QACb,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,QAAQ,CAAC,MAA2B,EAAE,SAAiB;IAC9D,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,SAAS,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC1F,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,SAAS,IAAI,KAAK,GAAG,CAAC;AACxD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@longsightgroup/qti3-core",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Framework-neutral TypeScript core for parsing, validating, scoring, and serializing QTI 3 assessment items.",
   "keywords": [
     "assessment",

package/src/delivery-security.ts

@@ -0,0 +1,283 @@
+import type { QtiDiagnostic, QtiSourceLocation } from "./types.js";
+import { descendants, parseXmlTree, type XmlNode } from "./xml.js";
+
+const FORBIDDEN_DELIVERY_ELEMENT_NAMES = new Set([
+  "correct-response",
+  "mapping",
+  "area-mapping",
+  "match-table",
+  "interpolation-table",
+  "response-processing",
+  "feedback-inline",
+  "feedback-block",
+  "modal-feedback",
+]);
+
+const UNSUPPORTED_SECURE_DELIVERY_ELEMENT_NAMES = new Set([
+  "template-processing",
+  "set-correct-response",
+]);
+
+const DEFAULT_VALUE_DECLARATION_ELEMENT_NAMES = new Set([
+  "response-declaration",
+  "outcome-declaration",
+  "template-declaration",
+]);
+
+export type QtiDeliverySecurityFindingKind =
+  | "forbidden-delivery-element"
+  | "unsupported-secure-delivery-element"
+  | "unsupported-adaptive-response-processing";
+
+export interface QtiDeliverySecurityFinding {
+  kind: QtiDeliverySecurityFindingKind;
+  qtiName: string;
+  localName: string;
+  message: string;
+  source?: QtiSourceLocation | undefined;
+}
+
+export interface QtiDeliverySecurityAnalysis {
+  diagnostics: QtiDiagnostic[];
+  findings: QtiDeliverySecurityFinding[];
+  /** True when this exact XML contains no known answer/scoring/feedback delivery leaks. */
+  deliverySafe: boolean;
+  /** True when secure-delivery redaction can be attempted for this XML. */
+  secureDeliverySupported: boolean;
+}
+
+export interface QtiDeliverySafeXmlResult {
+  ok: boolean;
+  diagnostics: QtiDiagnostic[];
+  analysis: QtiDeliverySecurityAnalysis;
+  xml?: string | undefined;
+}
+
+export function analyzeQtiDeliverySecurity(xml: string): QtiDeliverySecurityAnalysis {
+  const parsed = parseDeliveryXml(xml);
+  return analyzeParsedDeliveryXml(parsed);
+}
+
+function analyzeParsedDeliveryXml(parsed: {
+  root: XmlNode | undefined;
+  diagnostics: QtiDiagnostic[];
+}): QtiDeliverySecurityAnalysis {
+  const diagnostics = [...parsed.diagnostics];
+  const findings: QtiDeliverySecurityFinding[] = [];
+
+  if (parsed.root) {
+    const nodes = [parsed.root, ...descendants(parsed.root, () => true)];
+    for (const node of nodes) {
+      const normalizedName = normalizedQtiElementName(node.localName);
+      if (isForbiddenDeliveryElement(node, normalizedName)) {
+        findings.push({
+          kind: "forbidden-delivery-element",
+          qtiName: node.name,
+          localName: node.localName,
+          message: `${node.name} exposes answer keys, scoring, mapping, feedback, or solution information during delivery.`,
+          source: node.source,
+        });
+      }
+      if (UNSUPPORTED_SECURE_DELIVERY_ELEMENT_NAMES.has(normalizedName)) {
+        findings.push({
+          kind: "unsupported-secure-delivery-element",
+          qtiName: node.name,
+          localName: node.localName,
+          message: `${node.name} is not supported by secure delivery redaction v1.`,
+          source: node.source,
+        });
+      }
+    }
+
+    if (
+      parseXmlBoolean(parsed.root.attributes.adaptive) === true &&
+      nodes.some((node) => normalizedQtiElementName(node.localName) === "response-processing")
+    ) {
+      findings.push({
+        kind: "unsupported-adaptive-response-processing",
+        qtiName: parsed.root.name,
+        localName: parsed.root.localName,
+        message:
+          "Adaptive response processing requires server-side item materialization before secure delivery.",
+        source: parsed.root.source,
+      });
+    }
+  }
+
+  diagnostics.push(...findings.map(findingToDiagnostic));
+  const parseOk = parsed.diagnostics.every((diagnostic) => diagnostic.severity !== "error");
+
+  return {
+    diagnostics,
+    findings,
+    deliverySafe:
+      parseOk && !findings.some((finding) => finding.kind === "forbidden-delivery-element"),
+    secureDeliverySupported:
+      parseOk &&
+      !findings.some(
+        (finding) =>
+          finding.kind === "unsupported-secure-delivery-element" ||
+          finding.kind === "unsupported-adaptive-response-processing",
+      ),
+  };
+}
+
+export function buildQtiDeliverySafeXml(xml: string): QtiDeliverySafeXmlResult {
+  const parsed = parseDeliveryXml(xml);
+  const analysis = analyzeParsedDeliveryXml(parsed);
+  if (!analysis.secureDeliverySupported) {
+    return {
+      ok: false,
+      diagnostics: analysis.diagnostics,
+      analysis,
+    };
+  }
+
+  if (!parsed.root) {
+    return {
+      ok: false,
+      diagnostics: parsed.diagnostics,
+      analysis,
+    };
+  }
+
+  const redactionRanges = readRedactionRanges([
+    parsed.root,
+    ...descendants(parsed.root, () => true),
+  ]);
+  const redactedXml = removeSourceRanges(xml, redactionRanges);
+  const redactedAnalysis = analyzeQtiDeliverySecurity(redactedXml);
+  if (!redactedAnalysis.deliverySafe) {
+    return {
+      ok: false,
+      diagnostics: [...analysis.diagnostics, ...redactedAnalysis.diagnostics],
+      analysis: redactedAnalysis,
+    };
+  }
+
+  return {
+    ok: true,
+    xml: redactedXml,
+    diagnostics: redactedAnalysis.diagnostics,
+    analysis: redactedAnalysis,
+  };
+}
+
+function parseDeliveryXml(xml: string): {
+  root: XmlNode | undefined;
+  diagnostics: QtiDiagnostic[];
+} {
+  let parsed: ReturnType<typeof parseXmlTree>;
+  try {
+    parsed = parseXmlTree(xml);
+  } catch (error) {
+    return {
+      root: undefined,
+      diagnostics: [
+        {
+          code: "xml.parse",
+          severity: "error",
+          message: error instanceof Error ? error.message : String(error),
+        },
+      ],
+    };
+  }
+
+  const diagnostics: QtiDiagnostic[] = parsed.errors.map((error) => ({
+    code: "xml.parse",
+    severity: "error",
+    message: error.message,
+  }));
+  if (!parsed.root) {
+    diagnostics.push({
+      code: "xml.empty",
+      severity: "error",
+      message: "No XML root element was found.",
+    });
+  }
+  return { root: parsed.root, diagnostics };
+}
+
+function normalizedQtiElementName(localName: string): string {
+  const lower = localName.toLowerCase();
+  return lower.startsWith("qti-") ? lower.slice("qti-".length) : lower;
+}
+
+function parseXmlBoolean(value: string | undefined): boolean | undefined {
+  if (value === undefined) return undefined;
+  const normalized = value.trim().toLowerCase();
+  if (normalized === "true" || normalized === "1") return true;
+  if (normalized === "false" || normalized === "0") return false;
+  return undefined;
+}
+
+function isForbiddenDeliveryElement(
+  node: XmlNode,
+  normalizedName = normalizedQtiElementName(node.localName),
+): boolean {
+  if (FORBIDDEN_DELIVERY_ELEMENT_NAMES.has(normalizedName)) return true;
+  return (
+    normalizedName === "default-value" &&
+    DEFAULT_VALUE_DECLARATION_ELEMENT_NAMES.has(
+      normalizedQtiElementName(node.parent?.localName ?? ""),
+    )
+  );
+}
+
+function findingToDiagnostic(finding: QtiDeliverySecurityFinding): QtiDiagnostic {
+  const code = diagnosticCodeForFinding(finding.kind);
+  return {
+    code,
+    severity: "error",
+    message: finding.message,
+    path: finding.source?.path,
+    source: finding.source,
+  };
+}
+
+function diagnosticCodeForFinding(kind: QtiDeliverySecurityFindingKind): string {
+  if (kind === "forbidden-delivery-element") return "delivery.forbiddenElement";
+  if (kind === "unsupported-adaptive-response-processing") {
+    return "delivery.unsupportedAdaptiveResponseProcessing";
+  }
+  return "delivery.unsupportedSecureDelivery";
+}
+
+interface RedactionRange {
+  startOffset: number;
+  endOffset: number;
+}
+
+function readRedactionRanges(nodes: XmlNode[]): RedactionRange[] {
+  const ranges = nodes.flatMap((node) => {
+    if (!isForbiddenDeliveryElement(node)) return [];
+    const endOffset = node.sourceRange.endOffset;
+    if (node.sourceRange.startOffset < 0 || endOffset === undefined) return [];
+    return [{ startOffset: node.sourceRange.startOffset, endOffset }];
+  });
+  return mergeSourceRanges(ranges);
+}
+
+function mergeSourceRanges(ranges: RedactionRange[]): RedactionRange[] {
+  const sorted = [...ranges].sort((left, right) => left.startOffset - right.startOffset);
+  const merged: RedactionRange[] = [];
+  for (const range of sorted) {
+    const last = merged.at(-1);
+    if (last && range.startOffset <= last.endOffset) {
+      last.endOffset = Math.max(last.endOffset, range.endOffset);
+      continue;
+    }
+    merged.push({ ...range });
+  }
+  return merged;
+}
+
+function removeSourceRanges(xml: string, ranges: RedactionRange[]): string {
+  let output = "";
+  let cursor = 0;
+  for (const range of ranges) {
+    output += xml.slice(cursor, range.startOffset);
+    cursor = range.endOffset;
+  }
+  return output + xml.slice(cursor);
+}

package/src/index.ts

@@ -5,7 +5,21 @@ export {
   type QtiResolvedCatalogReference,
   type QtiResolvedCatalogSupport,
 } from "./catalog.js";
+export {
+  analyzeQtiDeliverySecurity,
+  buildQtiDeliverySafeXml,
+  type QtiDeliverySafeXmlResult,
+  type QtiDeliverySecurityAnalysis,
+  type QtiDeliverySecurityFinding,
+  type QtiDeliverySecurityFindingKind,
+} from "./delivery-security.js";
 export { parseQtiXml } from "./parser.js";
+export {
+  scoreQtiItemServerSide,
+  type QtiServerScoringInput,
+  type QtiServerScoringResponseInput,
+  type QtiServerScoringResult,
+} from "./server-scoring.js";
 export {
   createTextToSpeechTraversal,
   parseQtiDataSsml,
@@ -84,9 +98,13 @@ export type {
   QtiValue,
 } from "./types.js";
 export {
+  isQtiPortableCustomStateValue,
+  isQtiValue,
   qtiScalarToString,
   qtiValueToIdentifierList,
   qtiValueToString,
   qtiValueToStringList,
+  readQtiPortableCustomStateValue,
+  readQtiJsonValue,
   unknownToDisplayString,
 } from "./value-format.js";

package/src/parser.ts

@@ -70,6 +70,10 @@ export function parseQtiXml(xml: string): QtiParseResult {
     });
   }
 
+  if (tree.errors.length > 0) {
+    return { ok: false, diagnostics };
+  }
+
   if (!tree.root) {
     diagnostics.push({
       code: "xml.empty",