coursecode 0.1.46 → 0.1.48

package/README.md

@@ -175,12 +175,27 @@ The preview server provides:
 
 When ready, deploy:
 
-**With [CourseCode Cloud](https://coursecodecloud.com)**: Push your course and get a live link. Cloud handles hosting, generates any LMS format on demand, and gives you sharable preview links with optional password protection. No ZIP files, no manual uploads.
+**With [CourseCode Cloud](https://coursecodecloud.com)**: Push your course and get a live link. Cloud handles hosting, generates any LMS format on demand, and gives you a shareable preview link with optional password protection. No ZIP files, no manual uploads.
 
 ```bash
 coursecode deploy
 ```
 
+For stakeholder review, deploy a preview-only version and password-protect the preview link:
+
+```bash
+coursecode deploy --preview --password
+```
+
+You can inspect recent deployments and move pointers without rebuilding:
+
+```bash
+coursecode deployments
+coursecode promote --preview
+coursecode promote --production
+coursecode preview-link --password
+```
+
 If the cloud course was deleted but the project still has the old local binding, redeploy with:
 
 ```bash
@@ -212,6 +227,9 @@ coursecode preview --export
 | `coursecode lint` | Validate course structure and content |
 | `coursecode build` | Build a package for LMS upload |
 | `coursecode deploy` | Build and deploy to CourseCode Cloud |
+| `coursecode deployments` | List recent Cloud deployments |
+| `coursecode promote` | Move the Production or Preview pointer |
+| `coursecode preview-link` | Manage the Cloud preview link |
 | `coursecode narration` | Generate audio narration from text |
 
 For the full command list and deployment options, see the [User Guide](framework/docs/USER_GUIDE.md#sharing-and-deploying) or run `coursecode --help`.

package/bin/cli.js

@@ -365,7 +365,7 @@ program
   .option('--promote', 'Force-promote: always move production pointer regardless of deploy_mode setting. Mutually exclusive with --stage.')
   .option('--stage', 'Force-stage: never move production pointer regardless of deploy_mode setting. Mutually exclusive with --promote.')
   .option('--repair-binding', 'Clear a stale local Cloud binding if the remote course was deleted, then continue')
-  .option('--password', 'Password-protect preview (interactive prompt, requires --preview)')
+  .option('--password [password]', 'Password-protect preview. Prompts if no value is provided.')
   .option('-m, --message <message>', 'Deploy reason (e.g. "Fixed accessibility issues")')
   .option('--local', 'Use local Cloud instance (http://localhost:3000)')
   .option('--json', 'Emit machine-readable JSON result')
@@ -404,6 +404,17 @@ program
     await status({ json: options.json, repairBinding: options.repairBinding });
   });
 
+program
+  .command('deployments')
+  .description('List recent Cloud deployments for current course')
+  .option('--local', 'Use local Cloud instance (http://localhost:3000)')
+  .option('--json', 'Output raw JSON')
+  .action(async (options) => {
+    const { deployments, setLocalMode } = await import('../lib/cloud.js');
+    if (options.local) setLocalMode();
+    await deployments({ json: options.json });
+  });
+
 program
   .command('preview-link')
   .description('Show or update the Cloud preview link for the current course')

package/framework/docs/USER_GUIDE.md

@@ -741,18 +741,42 @@ Open the URL in any browser, log in with your CourseCode account, and enter the
 - **Preview pointer** — the version served on the cloud preview link (for stakeholder review).
 - **deploy_mode** — a per-course or org setting in the Cloud dashboard. Default is auto-promote (new uploads immediately go live). Can be set to staged (new uploads require a manual promote step).
 - `--promote` and `--stage` are mutually exclusive.
+- `--password` can be combined with `--preview` to create or update the main preview link password. If you omit the password value in an interactive terminal, the CLI prompts for it. In `--json` mode you must pass the value explicitly.
 - **GitHub-linked courses:** If your course is connected to a GitHub repo in the Cloud dashboard, production deploys happen via `git push` — the CLI blocks direct production uploads. Use `coursecode deploy --preview` to push a preview build for stakeholder review.
 - If a cloud deployment was deleted outside the CLI and this project still has the old local binding, rerun with `coursecode deploy --repair-binding`. To clear the stale binding without deploying yet, run `coursecode status --repair-binding`.
 
+**Managing previews and pointers after deploy:**
+
+Use these commands when you want to change Cloud state without rebuilding the course:
+
+```bash
+coursecode status
+coursecode deployments
+coursecode promote --preview
+coursecode promote --production
+coursecode preview-link --enable
+coursecode preview-link --password
+coursecode preview-link --remove-password
+coursecode preview-link --expires-in-days 7
+coursecode preview-link --disable
+```
+
+- `coursecode deployments` lists recent immutable deployments and marks the current Production and Preview pointers.
+- `coursecode promote --preview` moves the Preview pointer to an existing deployment. If you do not pass `--deployment <id>`, the CLI prompts you to pick from recent deployments.
+- `coursecode promote --production` moves the Production pointer. Preview-only deployments cannot be promoted to Production.
+- `coursecode preview-link` manages the main preview link. That link follows the Preview pointer, so the URL can stay the same while you choose which deployment reviewers see.
+- Cloud can also create additional pinned preview links for specific deployments in the web app. The main CLI preview link is the pointer-following link.
+
 **Typical Cloud workflow:**
 1. Run `coursecode login` once, open the URL shown, and enter the code.
-2. Run `coursecode deploy` from your project folder.
+2. Run `coursecode deploy` from your project folder, or `coursecode deploy --preview --password` for a password-protected review build.
 3. Open the CourseCode Cloud dashboard link shown after deploy.
-4. Use Cloud preview links for review.
-5. Download the LMS format you need from Cloud when you're ready to deliver.
+4. Use the main preview link for review.
+5. Move the Preview or Production pointer when needed.
+6. Download the LMS format you need from Cloud when you're ready to deliver.
 
 **Prefer a GUI instead of the terminal?**
-- Use **CourseCode Desktop** for the same project workflow with buttons for Preview / Export / Deploy.
+- Use **CourseCode Desktop** for the same project workflow with buttons for Preview / Export / Deploy, plus a focused Cloud Deployments panel for preview-link password/expiry management, recent deployments, and Production/Preview pointer changes.
 - Desktop docs: `coursecode-desktop/USER_GUIDE.md`
 
 **When to use Cloud vs local export:**
@@ -762,7 +786,7 @@ Open the URL in any browser, log in with your CourseCode account, and enter the
 **Benefits:**
 - **No format decisions** — download the right ZIP for any LMS directly from the cloud
 - **Instant updates** — redeploy and all future launches get the new version
-- **Preview sharing** — cloud provides a shareable preview link automatically
+- **Preview sharing** — cloud provides a shareable preview link that can be password-protected and pointed at the review deployment you choose
 
 ### Exporting Content for Review
 

package/lib/cloud.js

@@ -1036,6 +1036,28 @@ export async function deploy(options = {}) {
   const promoteMode = options.promote ? 'promote' : options.stage ? 'stage' : 'auto';
   const previewForce = !!options.preview;
   const previewOnly = previewForce && promoteMode === 'auto';
+  let previewPassword;
+  if (options.password !== undefined) {
+    if (!previewForce) {
+      logErr('\n❌ --password requires --preview.\n');
+      if (options.json) process.stdout.write(JSON.stringify({ success: false, error: '--password requires --preview' }) + '\n');
+      process.exit(1);
+    }
+    previewPassword = options.password;
+    if (previewPassword === true || previewPassword === '') {
+      if (options.json) {
+        logErr('\n❌ --password requires a value when using --json.\n');
+        process.stdout.write(JSON.stringify({ success: false, error: '--password requires a value when using --json' }) + '\n');
+        process.exit(1);
+      }
+      previewPassword = await prompt('  Preview password: ');
+    }
+    if (!previewPassword) {
+      logErr('\n❌ Preview password cannot be empty.\n');
+      if (options.json) process.stdout.write(JSON.stringify({ success: false, error: 'Preview password cannot be empty' }) + '\n');
+      process.exit(1);
+    }
+  }
 
   log('\n📦 Building...\n');
   emitProgress('building');
@@ -1196,6 +1218,7 @@ export async function deploy(options = {}) {
     previewForce,
     previewOnly,
   };
+  if (previewPassword) finalizeBody.previewPassword = previewPassword;
   if (options.message) finalizeBody.message = options.message;
 
   const finalizeRes = await cloudFetch(
@@ -1544,6 +1567,51 @@ export async function status(options = {}) {
   console.log('');
 }
 
+/**
+ * coursecode deployments — list recent deployments for the current course
+ */
+export async function deployments(options = {}) {
+  await ensureAuthenticated();
+  const slug = resolveSlug();
+  const rcConfig = readRcConfig();
+  const orgQuery = rcConfig?.orgId ? `?orgId=${rcConfig.orgId}` : '';
+
+  const makeRequest = async (_isRetry = false) => {
+    const token = readCredentials()?.token;
+    const res = await cloudFetch(
+      `/api/cli/courses/${encodeURIComponent(slug)}/versions${orgQuery}`,
+      {},
+      token
+    );
+    return handleResponse(res, { retryFn: makeRequest, _isRetry });
+  };
+
+  const data = await makeRequest();
+
+  if (options.json) {
+    process.stdout.write(JSON.stringify(data) + '\n');
+    return;
+  }
+
+  const rows = data.deployments ?? [];
+  if (rows.length === 0) {
+    console.log('\nNo deployments found for this course.\n');
+    return;
+  }
+
+  console.log(`\n${slug} — Recent Deployments\n`);
+  rows.forEach((deployment, index) => {
+    const marker = deployment.id === data.production_deployment_id
+      ? ' [production]'
+      : deployment.id === data.preview_deployment_id
+        ? ' [preview]'
+        : '';
+    const flags = deployment.preview_only ? 'preview-only' : deployment.source;
+    console.log(`  ${index + 1}. ${formatDate(deployment.created_at)} — ${deployment.file_count} files, ${formatBytes(deployment.total_size)} — ${flags}${marker}`);
+  });
+  console.log('');
+}
+
 /**
  * coursecode preview-link — show or update the current preview link
  */
@@ -1794,4 +1862,3 @@ export async function deleteCourse(options = {}) {
   }
   console.log('');
 }
-

package/lib/create.js

@@ -10,6 +10,44 @@ import { spawn } from 'child_process';
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const PACKAGE_ROOT = path.join(__dirname, '..');
 
+export function toProjectDirectoryName(name) {
+  return String(name || '')
+    .trim()
+    .normalize('NFKD')
+    .replace(/[\u0300-\u036f]/g, '')
+    .toLowerCase()
+    .replace(/['’]/g, '')
+    .replace(/[^a-z0-9]+/g, '_')
+    .replace(/^_+|_+$/g, '');
+}
+
+function escapeSingleQuotedValue(value) {
+  return String(value).replace(/\\/g, '\\\\').replace(/'/g, "\\'");
+}
+
+export function stampCourseTitle(configContent, title) {
+  const titleValue = escapeSingleQuotedValue(title);
+  let nextContent = configContent.replace(
+    /^(\s*)title\s*:\s*['"`][^'"`]*['"`](\s*,?)/m,
+    `$1title: '${titleValue}'$2`
+  );
+
+  nextContent = nextContent.replace(
+    /^(\s*)courseTitle\s*:\s*['"`][^'"`]*['"`](\s*,?)/m,
+    `$1courseTitle: '${titleValue}'$2`
+  );
+
+  return nextContent;
+}
+
+function writeCourseTitle(projectDir, title) {
+  const configPath = path.join(projectDir, 'course', 'course-config.js');
+  if (!fs.existsSync(configPath)) return;
+
+  const current = fs.readFileSync(configPath, 'utf-8');
+  fs.writeFileSync(configPath, stampCourseTitle(current, title), 'utf-8');
+}
+
 /**
  * Copy directory recursively
  */
@@ -85,15 +123,31 @@ function gitInit(cwd) {
 }
 
 export async function create(name, options = {}) {
-  const targetDir = path.resolve(process.cwd(), name);
+  const displayName = String(name || '').trim();
+  const directoryName = toProjectDirectoryName(displayName);
+
+  if (!displayName) {
+    console.error('\n❌ Course name is required.\n');
+    process.exit(1);
+  }
+
+  if (!directoryName) {
+    console.error('\n❌ Course name must include letters or numbers.\n');
+    process.exit(1);
+  }
+
+  const targetDir = path.resolve(process.cwd(), directoryName);
 
   // Check if directory already exists
   if (fs.existsSync(targetDir)) {
-    console.error(`\n❌ Directory "${name}" already exists.\n`);
+    console.error(`\n❌ Directory "${directoryName}" already exists.\n`);
     process.exit(1);
   }
 
-  console.log(`\n🚀 Creating CourseCode project: ${name}\n`);
+  console.log(`\n🚀 Creating CourseCode project: ${displayName}\n`);
+  if (directoryName !== displayName) {
+    console.log(`   Project folder: ${directoryName}`);
+  }
 
   // Create project directory
   fs.mkdirSync(targetDir, { recursive: true });
@@ -138,7 +192,7 @@ export async function create(name, options = {}) {
   // Read and customize package.json
   const pkgPath = path.join(targetDir, 'package.json');
   const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
-  pkg.name = name;
+  pkg.name = directoryName;
   fs.writeFileSync(pkgPath, JSON.stringify(pkg, null, 2));
 
   // Create .coursecoderc.json to track framework version
@@ -161,6 +215,8 @@ export async function create(name, options = {}) {
     clean({ basePath: targetDir });
   }
 
+  writeCourseTitle(targetDir, displayName);
+
   // Install dependencies
   if (options.install !== false) {
     console.log('\n   Installing dependencies...\n');
@@ -184,7 +240,7 @@ export async function create(name, options = {}) {
   // Print success message
   if (options.blank) {
     console.log(`
-✅ CourseCode project "${name}" created (blank starter)!
+✅ CourseCode project "${displayName}" created (blank starter)!
 
    Course files:
    - course/course-config.js  - Course metadata & structure (minimal)
@@ -199,7 +255,7 @@ export async function create(name, options = {}) {
 `);
   } else {
     console.log(`
-✅ CourseCode project "${name}" created successfully!
+✅ CourseCode project "${displayName}" created successfully!
 
    Course files:
    - course/course-config.js  - Course metadata & structure
@@ -228,9 +284,15 @@ export async function create(name, options = {}) {
 
     child.on('error', () => {
       console.warn('   ⚠️  Failed to start dev server. Run manually:');
-      console.log(`      cd ${name} && coursecode dev\n`);
+      console.log(`      cd ${directoryName} && coursecode dev\n`);
     });
   } else {
-    console.log(`\n   To start developing:\n\n      cd ${name}\n      coursecode dev\n`);
+    console.log(`\n   To start developing:\n\n      cd ${directoryName}\n      coursecode dev\n`);
   }
+
+  return {
+    displayName,
+    directoryName,
+    targetDir
+  };
 }

package/lib/import.js

@@ -179,9 +179,9 @@ export async function importPresentation(source, options = {}) {
 
     // Create blank project (no example slides — they'd just be deleted)
     console.log('   ⏳ Creating course project...\n');
-    await create(name, { blank: true, install: options.install });
+    const createdProject = await create(name, { blank: true, install: options.install });
 
-    const targetDir = path.resolve(process.cwd(), name);
+    const targetDir = createdProject?.targetDir || path.resolve(process.cwd(), name);
     const courseDir = path.join(targetDir, 'course');
 
     // Import presentation in-place

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coursecode",
-  "version": "0.1.46",
+  "version": "0.1.48",
   "description": "Multi-format course authoring framework with CLI tools (SCORM 2004, SCORM 1.2, cmi5, LTI 1.3)",
   "type": "module",
   "bin": {