coursecode 0.1.57 → 0.1.59

package/lib/build.js

@@ -9,6 +9,69 @@ import { fileURLToPath } from 'url';
 import { validateProject } from './project-utils.js';
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
+
+export function snapshotZipFiles(directory) {
+  const snapshot = new Map();
+  if (!fs.existsSync(directory)) return snapshot;
+
+  for (const filename of fs.readdirSync(directory)) {
+    if (!filename.endsWith('.zip')) continue;
+    const stats = fs.statSync(path.join(directory, filename));
+    snapshot.set(filename, { mtimeMs: stats.mtimeMs, size: stats.size });
+  }
+
+  return snapshot;
+}
+
+export function findProducedZipFiles(directory, before = new Map()) {
+  if (!fs.existsSync(directory)) return [];
+
+  return fs.readdirSync(directory)
+    .filter(filename => filename.endsWith('.zip'))
+    .map(filename => {
+      const stats = fs.statSync(path.join(directory, filename));
+      return { filename, mtimeMs: stats.mtimeMs, size: stats.size };
+    })
+    .filter(file => {
+      const previous = before.get(file.filename);
+      return !previous || previous.mtimeMs !== file.mtimeMs || previous.size !== file.size;
+    })
+    .sort((a, b) => a.mtimeMs - b.mtimeMs || a.filename.localeCompare(b.filename))
+    .map(file => file.filename);
+}
+
+export function detectBuiltFormat(distDirectory, requestedFormat) {
+  const indexPath = path.join(distDirectory, 'index.html');
+
+  if (fs.existsSync(indexPath)) {
+    const html = fs.readFileSync(indexPath, 'utf8');
+    const match = html.match(/<meta\s+name=["']lms-format["']\s+content=["']([^"']+)["']/i);
+    if (match?.[1]) return match[1];
+  }
+
+  if (fs.existsSync(path.join(distDirectory, 'cmi5.xml'))) return 'cmi5';
+  if (fs.existsSync(path.join(distDirectory, 'lti-tool-config.json'))) return 'lti';
+
+  return requestedFormat || 'scorm2004';
+}
+
+export function formatBuildOutput(format, zipFiles = []) {
+  const normalizedFormat = format || 'scorm2004';
+  const displayNames = {
+    scorm2004: 'SCORM 2004',
+    'scorm1.2': 'SCORM 1.2',
+    cmi5: 'cmi5',
+    lti: 'LTI 1.3',
+    'scorm2004-proxy': 'SCORM 2004 proxy',
+    'scorm1.2-proxy': 'SCORM 1.2 proxy',
+    'cmi5-remote': 'cmi5 remote'
+  };
+  const displayName = displayNames[normalizedFormat] || normalizedFormat;
+  const archives = zipFiles.map(filename => `   - ${filename}   Ready for LMS upload`).join('\n');
+
+  return `   Output:\n   - dist/           ${displayName} package files${archives ? `\n${archives}` : ''}\n\n   To test locally, launch dist/ or the archive in a ${displayName}-compatible LMS or conformance tool.`;
+}
+
 /**
  * Run a command and return a promise
  */
@@ -17,7 +80,7 @@ function runCommand(cmd, args, options = {}) {
     const child = spawn(cmd, args, {
       cwd: process.cwd(),
       stdio: 'inherit',
-      shell: true,
+      shell: process.platform === 'win32',
       env: options.env || process.env,
       ...options
     });
@@ -42,6 +105,7 @@ export async function build(options = {}) {
 `);
 
   const startTime = Date.now();
+  const zipSnapshot = snapshotZipFiles(process.cwd());
 
   try {
     // Build environment — pass lib dir so vite.config.js can resolve coursecode utilities
@@ -64,17 +128,14 @@ export async function build(options = {}) {
 
     const elapsed = ((Date.now() - startTime) / 1000).toFixed(2);
 
-    // Check for output
-    const zipFiles = fs.readdirSync(process.cwd()).filter(f => f.endsWith('.zip'));
+    const zipFiles = findProducedZipFiles(process.cwd(), zipSnapshot);
+    const builtFormat = detectBuiltFormat(path.join(process.cwd(), 'dist'), options.format);
+    const output = formatBuildOutput(builtFormat, zipFiles);
 
     console.log(`
 ✅ Build completed in ${elapsed}s
 
-   Output:
-   - dist/           SCORM package files
-   ${zipFiles.length > 0 ? `- ${zipFiles[zipFiles.length - 1]}   Ready for LMS upload` : ''}
-
-   To test locally, load dist/ directory in a SCORM testing tool.
+${output}
 `);
 
   } catch (error) {

package/lib/cloud.js

@@ -11,7 +11,7 @@ import crypto from 'crypto';
 import fs from 'fs';
 import path from 'path';
 import os from 'os';
-import { exec } from 'child_process';
+import { execFile } from 'child_process';
 import readline from 'readline';
 import { fileURLToPath } from 'url';
 
@@ -427,10 +427,23 @@ function handleResponseError(status, body) {
  */
 function openBrowser(url) {
   const platform = process.platform;
-  const cmd = platform === 'darwin' ? 'open'
-    : platform === 'win32' ? 'start'
-      : 'xdg-open';
-  exec(`${cmd} "${url}"`);
+  let command;
+  let args;
+  if (platform === 'darwin') {
+    command = 'open';
+    args = [url];
+  } else if (platform === 'win32') {
+    command = 'rundll32';
+    args = ['url.dll,FileProtocolHandler', url];
+  } else {
+    command = 'xdg-open';
+    args = [url];
+  }
+
+  const child = execFile(command, args);
+  child.on('error', (error) => {
+    console.warn(`  ⚠ Could not open the browser automatically: ${error.message}`);
+  });
 }
 
 /**
@@ -987,9 +1000,17 @@ export async function deploy(options = {}) {
       // Reconcile local sourceType with cloud truth (handles unlink-via-dashboard)
       try {
         const statusData = JSON.parse(await statusRes.text());
-        const serverSourceType = statusData.source?.type || statusData.source_type;
+        const serverGithubRepo = statusData.source?.githubRepo || statusData.github_repo;
         const localRc = readRcConfig();
-        if (localRc?.sourceType === 'github' && serverSourceType !== 'github') {
+        if (serverGithubRepo && (
+          localRc?.sourceType !== 'github' || localRc?.githubRepo !== serverGithubRepo
+        )) {
+          updateRcConfig((rc) => {
+            rc.sourceType = 'github';
+            rc.githubRepo = serverGithubRepo;
+            return rc;
+          });
+        } else if (localRc?.sourceType === 'github' && !serverGithubRepo) {
           updateRcConfig((rc) => {
             delete rc.sourceType;
             delete rc.githubRepo;
@@ -1508,8 +1529,16 @@ export async function status(options = {}) {
 
   // Reconcile local sourceType with cloud truth (handles unlink-via-dashboard)
   const localRc = readRcConfig();
-  const serverSourceType = data.source?.type || data.source_type;
-  if (localRc?.sourceType === 'github' && serverSourceType !== 'github') {
+  const serverGithubRepo = data.source?.githubRepo || data.github_repo;
+  if (serverGithubRepo && (
+    localRc?.sourceType !== 'github' || localRc?.githubRepo !== serverGithubRepo
+  )) {
+    updateRcConfig((rc) => {
+      rc.sourceType = 'github';
+      rc.githubRepo = serverGithubRepo;
+      return rc;
+    });
+  } else if (localRc?.sourceType === 'github' && !serverGithubRepo) {
     updateRcConfig((rc) => {
       delete rc.sourceType;
       delete rc.githubRepo;
@@ -1527,9 +1556,9 @@ export async function status(options = {}) {
 
   console.log(`\n${data.slug} — ${data.name} (${data.orgName})\n`);
 
-  const sourceType = data.source?.type || data.source_type;
   const githubRepo = data.source?.githubRepo || data.github_repo;
-  if (sourceType === 'github' && githubRepo) {
+  const sourceType = data.source?.type || data.source_type;
+  if (githubRepo) {
     console.log(`Source:         GitHub — ${githubRepo}`);
     console.log('                production=github | preview=cli+github');
   } else if (sourceType) {

package/lib/convert.js

@@ -238,13 +238,41 @@ async function convertFile(filePath) {
 async function convertDocx(filePath) {
     const mammoth = await import('mammoth');
     const result = await mammoth.convertToMarkdown({ path: filePath });
+    const sanitized = replaceEmbeddedDataImages(result.value);
+    const warnings = result.messages.filter(m => m.type === 'warning');
+
+    if (sanitized.omittedImageCount > 0) {
+        warnings.push({
+            type: 'warning',
+            message: `Omitted ${sanitized.omittedImageCount} embedded image payload(s). Review the source document for visual content.`
+        });
+    }
     
     return {
-        markdown: result.value,
-        warnings: result.messages.filter(m => m.type === 'warning')
+        markdown: sanitized.markdown,
+        warnings
     };
 }
 
+/**
+ * Replace mammoth's inline base64 image output with compact review markers.
+ * Reference Markdown is consumed by AI authoring tools, where multi-megabyte
+ * data URIs waste context and do not preserve useful visual meaning.
+ */
+export function replaceEmbeddedDataImages(markdown) {
+    let omittedImageCount = 0;
+    const sanitized = markdown.replace(
+        /!\[([^\]]*)\]\(data:image\/[^;]+;base64,[^)]+\)/gi,
+        (_match, altText) => {
+            omittedImageCount++;
+            const label = altText?.trim() ? `: ${altText.trim()}` : '';
+            return `*[Embedded image omitted${label}. Review the source document for visual content.]*`;
+        }
+    );
+
+    return { markdown: sanitized, omittedImageCount };
+}
+
 /**
  * Convert PPTX to markdown using node-pptx-parser
  */

package/lib/create.js

@@ -172,7 +172,7 @@ function npmInstall(cwd) {
     const child = spawn(command, args, {
       cwd,
       stdio: 'inherit',
-      shell: !npmCli
+      shell: !npmCli && process.platform === 'win32'
     });
 
     child.on('close', (code) => {
@@ -182,6 +182,7 @@ function npmInstall(cwd) {
         reject(new Error(`npm install failed with code ${code}`));
       }
     });
+    child.on('error', reject);
   });
 }
 
@@ -193,7 +194,7 @@ function gitInit(cwd) {
     const child = spawn('git', ['init'], {
       cwd,
       stdio: 'pipe',
-      shell: true
+      shell: false
     });
 
     child.on('close', (code) => {
@@ -203,6 +204,7 @@ function gitInit(cwd) {
         reject(new Error(`git init failed with code ${code}`));
       }
     });
+    child.on('error', reject);
   });
 }
 
@@ -384,7 +386,7 @@ export async function create(name, options = {}) {
     const child = spawn(command, args, {
       cwd: targetDir,
       stdio: 'inherit',
-      shell: !npxCli
+      shell: !npxCli && process.platform === 'win32'
     });
 
     child.on('error', () => {

package/lib/dev.js

@@ -33,7 +33,7 @@ export async function dev(options = {}) {
   const viteBuild = spawn('npx', ['vite', 'build', '--mode', 'development', '--watch'], {
     cwd: process.cwd(),
     stdio: 'inherit',
-    shell: true,
+    shell: process.platform === 'win32',
     env
   });
 

package/lib/headless-browser.js

@@ -69,6 +69,10 @@ class HeadlessBrowser {
         this.chromePath = null;
         this._sseReloadListener = null;
         this._reconnectTimer = null;
+        this._reloadDebounceTimer = null;
+        this._reloadInProgress = false;
+        this._reloadQueued = false;
+        this._resolveReload = null;
         this._stopped = false;
         this._consoleLogs = [];
         this._viewport = { width: 1280, height: 720 };
@@ -195,19 +199,7 @@ class HeadlessBrowser {
                 res.on('data', async (chunk) => {
                     if (this._stopped) return;
                     const data = chunk.toString();
-                    if (data.includes('data: reload')) {
-                        // Track the reload so concurrent tool calls wait for it
-                        let resolveReload;
-                        this._reloadPromise = new Promise(r => { resolveReload = r; });
-                        try {
-                            await this._navigateToPreview();
-                        } catch (_e) {
-                            // Preview may be mid-rebuild, retry will happen on next SSE
-                        } finally {
-                            this._reloadPromise = null;
-                            resolveReload();
-                        }
-                    }
+                    if (data.includes('data: reload')) this._scheduleReload();
                 });
 
                 res.on('end', () => {
@@ -227,6 +219,55 @@ class HeadlessBrowser {
         connect();
     }
 
+    /**
+     * Coalesce rapid preview rebuild notifications into one browser reload.
+     * If another event arrives while navigation is running, perform one more
+     * debounced reload before releasing tool calls waiting on _reloadPromise.
+     * @private
+     */
+    _scheduleReload() {
+        if (this._stopped) return;
+
+        if (!this._reloadPromise) {
+            this._reloadPromise = new Promise(resolve => {
+                this._resolveReload = resolve;
+            });
+        }
+
+        if (this._reloadInProgress) {
+            this._reloadQueued = true;
+            return;
+        }
+
+        if (this._reloadDebounceTimer) clearTimeout(this._reloadDebounceTimer);
+        this._reloadDebounceTimer = setTimeout(() => this._performScheduledReload(), 300);
+    }
+
+    /** @private */
+    async _performScheduledReload() {
+        this._reloadDebounceTimer = null;
+        this._reloadInProgress = true;
+        this._reloadQueued = false;
+
+        try {
+            await this._navigateToPreview();
+        } catch (_e) {
+            // A later SSE event will retry after the preview finishes rebuilding.
+        } finally {
+            this._reloadInProgress = false;
+        }
+
+        if (this._reloadQueued) {
+            this._scheduleReload();
+            return;
+        }
+
+        const resolveReload = this._resolveReload;
+        this._reloadPromise = null;
+        this._resolveReload = null;
+        resolveReload?.();
+    }
+
     /**
      * Execute a function in the course iframe's context.
      * This is how runtime tools call CourseCodeAutomation methods.
@@ -481,6 +522,17 @@ class HeadlessBrowser {
             this._reconnectTimer = null;
         }
 
+        if (this._reloadDebounceTimer) {
+            clearTimeout(this._reloadDebounceTimer);
+            this._reloadDebounceTimer = null;
+        }
+
+        this._reloadQueued = false;
+        this._reloadInProgress = false;
+        this._resolveReload?.();
+        this._resolveReload = null;
+        this._reloadPromise = null;
+
         if (this._sseReloadListener) {
             this._sseReloadListener.destroy();
             this._sseReloadListener = null;
@@ -498,4 +550,4 @@ class HeadlessBrowser {
 // Singleton instance
 const headless = new HeadlessBrowser();
 export default headless;
-export { findChrome };
+export { HeadlessBrowser, findChrome };

package/lib/manifest/cmi5-manifest.js

@@ -22,20 +22,42 @@ import { escapeXmlAttribute, escapeXmlText } from './xml-utils.js';
  */
 export function generateCmi5Manifest(config, _files, options = {}) {
   // cmi5 course identifier - use configured identifier or generate from title
-  const courseId = config.identifier ||
-    `urn:coursecode:${config.title.replace(/[^a-zA-Z0-9]/g, '-').toLowerCase()}`;
+  const titleSlug = String(config.title || 'course')
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, '-')
+    .replace(/^-+|-+$/g, '') || 'course';
+  const courseId = config.identifier || `urn:coursecode:${titleSlug}`;
+  try {
+    new URL(courseId);
+  } catch {
+    throw new Error(`cmi5 course identifier must be an absolute IRI: ${courseId}`);
+  }
 
   // Package-level mastery is optional. Do not invent a value from one
   // assessment because a course can contain multiple thresholds.
   const masteryAttribute = Number.isFinite(config.masteryScore)
     ? ` masteryScore="${(config.masteryScore / 100).toFixed(2)}"`
     : '';
+  const allowedMoveOn = new Set([
+    'Passed', 'Completed', 'CompletedAndPassed', 'CompletedOrPassed', 'NotApplicable'
+  ]);
+  const moveOn = config.moveOn || (Number.isFinite(config.masteryScore) ? 'CompletedAndPassed' : 'Completed');
+  if (!allowedMoveOn.has(moveOn)) {
+    throw new Error(`Invalid cmi5 moveOn value: ${moveOn}`);
+  }
 
   // AU identifier - derive from course ID
   const auId = `${courseId}/au/1`;
 
   // URL: absolute for cmi5-remote (use as-is), relative for standard cmi5
-  const auUrl = options.externalUrl || 'index.html';
+  let auUrl = options.externalUrl || 'index.html';
+  if (options.externalUrl) {
+    const parsedUrl = new URL(options.externalUrl);
+    if (!/\.[A-Za-z0-9]+$/.test(parsedUrl.pathname)) {
+      parsedUrl.pathname = `${parsedUrl.pathname.replace(/\/$/, '')}/index.html`;
+    }
+    auUrl = parsedUrl.toString();
+  }
   const escapedCourseId = escapeXmlAttribute(courseId);
   const escapedAuId = escapeXmlAttribute(auId);
   const escapedLanguage = escapeXmlAttribute(config.language);
@@ -55,7 +77,7 @@ export function generateCmi5Manifest(config, _files, options = {}) {
     </description>
   </course>
 
-  <au id="${escapedAuId}" moveOn="Completed"${masteryAttribute} launchMethod="OwnWindow">
+  <au id="${escapedAuId}" moveOn="${escapeXmlAttribute(moveOn)}"${masteryAttribute} launchMethod="OwnWindow">
     <title>
       <langstring lang="${escapedLanguage}">${title}</langstring>
     </title>

package/lib/manifest/lti-tool-config.js

@@ -23,8 +23,13 @@ export function generateLtiToolConfig(config, options = {}) {
     } catch {
         throw new Error(`Invalid LTI externalUrl: ${configuredUrl}`);
     }
-    if (!['https:', 'http:'].includes(parsedBaseUrl.protocol)) {
-        throw new Error('LTI externalUrl must use https (or http for local development)');
+    const localHttp = parsedBaseUrl.protocol === 'http:' &&
+        ['localhost', '127.0.0.1', '::1'].includes(parsedBaseUrl.hostname);
+    if (parsedBaseUrl.protocol !== 'https:' && !localHttp) {
+        throw new Error('LTI externalUrl must use HTTPS (HTTP is allowed only for local development)');
+    }
+    if (parsedBaseUrl.search || parsedBaseUrl.hash || parsedBaseUrl.username || parsedBaseUrl.password) {
+        throw new Error('LTI externalUrl must not contain a query, fragment, or embedded HTTP credentials');
     }
     const baseUrl = parsedBaseUrl.toString().replace(/\/$/, '');
     const title = config.title || 'CourseCode Course';

package/lib/manifest/manifest-factory.d.ts

@@ -6,5 +6,5 @@ export function generateManifest(
 ): { filename: string; content: string }
 
 export function getSchemaFiles(
-  format: 'scorm2004' | 'scorm1.2' | 'cmi5' | 'lti'
+  format: 'scorm2004' | 'scorm1.2' | 'scorm1.2-proxy' | 'scorm2004-proxy' | 'cmi5' | 'lti'
 ): string[]

package/lib/manifest/manifest-factory.js

@@ -77,6 +77,7 @@ export function getSchemaFiles(format) {
             return [];
 
         case 'scorm1.2':
+        case 'scorm1.2-proxy':
             // SCORM 1.2 schema files
             return [
                 'imscp_rootv1p1p2.xsd',
@@ -84,6 +85,7 @@ export function getSchemaFiles(format) {
                 'ims_xml.xsd'
             ];
 
+        case 'scorm2004-proxy':
         case 'scorm2004':
         default:
             // SCORM 2004 4th Edition schema files
@@ -92,8 +94,7 @@ export function getSchemaFiles(format) {
                 'adlcp_v1p3.xsd',
                 'imsss_v1p0.xsd',
                 'adlseq_v1p3.xsd',
-                'adlnav_v1p3.xsd',
-                'lom.xsd'
+                'adlnav_v1p3.xsd'
             ];
     }
 }

package/lib/manifest/scorm-12-manifest.js

@@ -8,7 +8,7 @@
  * - 4th Edition schema references
  */
 
-import { escapeXmlAttribute, escapeXmlText } from './xml-utils.js';
+import { escapeXmlAttribute, escapeXmlText, makeXmlId } from './xml-utils.js';
 
 /**
  * Generates the SCORM 1.2 manifest.
@@ -34,7 +34,7 @@ export function generateScorm12Manifest(config, files) {
     // SCORM 1.2 uses ADLCP 1.2 schema and doesn't include sequencing
     return `<?xml version="1.0" encoding="UTF-8"?>
 <!-- SCORM 1.2 manifest - GENERATED FILE - DO NOT EDIT MANUALLY -->
-<manifest identifier="${config.title.replace(/[^a-zA-Z0-9]/g, '-')}"
+<manifest identifier="${makeXmlId(config.identifier || config.title)}"
           version="${version}"
           xmlns="http://www.imsproject.org/xsd/imscp_rootv1p1p2"
           xmlns:adlcp="http://www.adlnet.org/xsd/adlcp_rootv1p2"

package/lib/manifest/scorm-2004-manifest.js

@@ -3,7 +3,7 @@
  * @description Generates imsmanifest.xml for SCORM 2004 4th Edition packages.
  */
 
-import { escapeXmlAttribute, escapeXmlText } from './xml-utils.js';
+import { escapeXmlAttribute, escapeXmlText, makeXmlId } from './xml-utils.js';
 
 /**
  * Generates the SCORM 2004 4th Edition manifest.
@@ -21,14 +21,11 @@ export function generateScorm2004Manifest(config, files) {
 
     const fileEntries = resourceFiles.map(f => `      <file href="${escapeXmlAttribute(f)}"/>`).join('\n');
     const version = escapeXmlAttribute(config.version);
-    const language = escapeXmlAttribute(config.language);
     const title = escapeXmlText(config.title);
-    const description = escapeXmlText(config.description);
-    const author = escapeXmlText(config.author);
 
     return `<?xml version="1.0" encoding="UTF-8"?>
 <!-- SCORM 2004 4th Edition manifest - GENERATED FILE - DO NOT EDIT MANUALLY -->
-<manifest identifier="${config.title.replace(/[^a-zA-Z0-9]/g, '-')}"
+<manifest identifier="${makeXmlId(config.identifier || config.title)}"
             version="${version}"
             xmlns="http://www.imsglobal.org/xsd/imscp_v1p1"
             xmlns:imscp="http://www.imsglobal.org/xsd/imscp_v1p1"
@@ -36,40 +33,18 @@ export function generateScorm2004Manifest(config, files) {
             xmlns:adlcp="http://www.adlnet.org/xsd/adlcp_v1p3"
             xmlns:adlseq="http://www.adlnet.org/xsd/adlseq_v1p3"
             xmlns:adlnav="http://www.adlnet.org/xsd/adlnav_v1p3"
-            xmlns:lom="http://ltsc.ieee.org/xsd/LOM"
             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
             xsi:schemaLocation="
               http://www.imsglobal.org/xsd/imscp_v1p1 imscp_v1p1.xsd
               http://www.imsglobal.org/xsd/imsss imsss_v1p0.xsd
               http://www.adlnet.org/xsd/adlcp_v1p3 adlcp_v1p3.xsd
               http://www.adlnet.org/xsd/adlseq_v1p3 adlseq_v1p3.xsd
-              http://www.adlnet.org/xsd/adlnav_v1p3 adlnav_v1p3.xsd
-              http://ltsc.ieee.org/xsd/LOM lom.xsd"
+              http://www.adlnet.org/xsd/adlnav_v1p3 adlnav_v1p3.xsd"
             xml:base="./">
 
   <metadata>
     <schema>ADL SCORM</schema>
     <schemaversion>2004 4th Edition</schemaversion>
-    <lom:lom>
-      <lom:general>
-        <lom:title><lom:string language="${language}">${title}</lom:string></lom:title>
-        <lom:description><lom:string language="${language}">${description}</lom:string></lom:description>
-        <lom:language>${escapeXmlText(config.language)}</lom:language>
-      </lom:general>
-      <lom:lifecycle>
-        <lom:version><lom:string>${escapeXmlText(config.version)}</lom:string></lom:version>
-        <lom:contribute>
-          <lom:role>
-            <lom:source><lom:string>LOMv1.0</lom:string></lom:source>
-            <lom:value><lom:string>author</lom:string></lom:value>
-          </lom:role>
-          <lom:entity>${author}</lom:entity>
-        </lom:contribute>
-      </lom:lifecycle>
-      <lom:technical>
-        <lom:format>text/html</lom:format>
-      </lom:technical>
-    </lom:lom>
   </metadata>
 
   <organizations default="org-1">