coursecode 0.1.57 → 0.1.59

package/lib/manifest/scorm-proxy-manifest.js

@@ -10,37 +10,47 @@
  * Works for both SCORM 1.2 and 2004 - pipwerks auto-detects.
  */
 
+import { escapeXmlAttribute, escapeXmlText, makeXmlId } from './xml-utils.js';
+
+function proxyIdentifier(config) {
+    return makeXmlId(config.identifier || config.title, 'course');
+}
+
 /**
  * Generate SCORM 1.2 proxy manifest
  * @param {Object} config - Course configuration
  * @returns {string} imsmanifest.xml content
  */
 export function generateScorm12ProxyManifest(config) {
-    const identifier = config.identifier || 
-        config.title.replace(/[^a-zA-Z0-9]/g, '_').toLowerCase();
+    const identifier = proxyIdentifier(config);
+    const escapedIdentifier = escapeXmlAttribute(identifier);
 
     return `<?xml version="1.0" encoding="UTF-8"?>
 <!-- SCORM 1.2 Proxy Manifest - Generated by CourseCode -->
-<manifest identifier="${identifier}_proxy" version="1.0"
+<manifest identifier="${escapedIdentifier}_proxy" version="1.0"
     xmlns="http://www.imsproject.org/xsd/imscp_rootv1p1p2"
-    xmlns:adlcp="http://www.adlnet.org/xsd/adlcp_rootv1p2">
+    xmlns:adlcp="http://www.adlnet.org/xsd/adlcp_rootv1p2"
+    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+    xsi:schemaLocation="
+      http://www.imsproject.org/xsd/imscp_rootv1p1p2 imscp_rootv1p1p2.xsd
+      http://www.adlnet.org/xsd/adlcp_rootv1p2 adlcp_rootv1p2.xsd">
     
     <metadata>
         <schema>ADL SCORM</schema>
         <schemaversion>1.2</schemaversion>
     </metadata>
     
-    <organizations default="org_${identifier}">
-        <organization identifier="org_${identifier}">
-            <title>${escapeXml(config.title)}</title>
-            <item identifier="item_${identifier}" identifierref="res_${identifier}">
-                <title>${escapeXml(config.title)}</title>
+    <organizations default="org_${escapedIdentifier}">
+        <organization identifier="org_${escapedIdentifier}">
+            <title>${escapeXmlText(config.title)}</title>
+            <item identifier="item_${escapedIdentifier}" identifierref="res_${escapedIdentifier}">
+                <title>${escapeXmlText(config.title)}</title>
             </item>
         </organization>
     </organizations>
     
     <resources>
-        <resource identifier="res_${identifier}" type="webcontent" adlcp:scormtype="sco" href="proxy.html">
+        <resource identifier="res_${escapedIdentifier}" type="webcontent" adlcp:scormtype="sco" href="proxy.html">
             <file href="proxy.html"/>
             <file href="scorm-bridge.js"/>
             <file href="pipwerks.js"/>
@@ -55,34 +65,41 @@ export function generateScorm12ProxyManifest(config) {
  * @returns {string} imsmanifest.xml content
  */
 export function generateScorm2004ProxyManifest(config) {
-    const identifier = config.identifier || 
-        config.title.replace(/[^a-zA-Z0-9]/g, '_').toLowerCase();
+    const identifier = proxyIdentifier(config);
+    const escapedIdentifier = escapeXmlAttribute(identifier);
 
     return `<?xml version="1.0" encoding="UTF-8"?>
 <!-- SCORM 2004 Proxy Manifest - Generated by CourseCode -->
-<manifest identifier="${identifier}_proxy" version="1.0"
+<manifest identifier="${escapedIdentifier}_proxy" version="1.0"
     xmlns="http://www.imsglobal.org/xsd/imscp_v1p1"
     xmlns:adlcp="http://www.adlnet.org/xsd/adlcp_v1p3"
     xmlns:adlseq="http://www.adlnet.org/xsd/adlseq_v1p3"
     xmlns:adlnav="http://www.adlnet.org/xsd/adlnav_v1p3"
-    xmlns:imsss="http://www.imsglobal.org/xsd/imsss">
+    xmlns:imsss="http://www.imsglobal.org/xsd/imsss"
+    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+    xsi:schemaLocation="
+      http://www.imsglobal.org/xsd/imscp_v1p1 imscp_v1p1.xsd
+      http://www.imsglobal.org/xsd/imsss imsss_v1p0.xsd
+      http://www.adlnet.org/xsd/adlcp_v1p3 adlcp_v1p3.xsd
+      http://www.adlnet.org/xsd/adlseq_v1p3 adlseq_v1p3.xsd
+      http://www.adlnet.org/xsd/adlnav_v1p3 adlnav_v1p3.xsd">
     
     <metadata>
         <schema>ADL SCORM</schema>
         <schemaversion>2004 4th Edition</schemaversion>
     </metadata>
     
-    <organizations default="org_${identifier}">
-        <organization identifier="org_${identifier}">
-            <title>${escapeXml(config.title)}</title>
-            <item identifier="item_${identifier}" identifierref="res_${identifier}">
-                <title>${escapeXml(config.title)}</title>
+    <organizations default="org_${escapedIdentifier}">
+        <organization identifier="org_${escapedIdentifier}">
+            <title>${escapeXmlText(config.title)}</title>
+            <item identifier="item_${escapedIdentifier}" identifierref="res_${escapedIdentifier}">
+                <title>${escapeXmlText(config.title)}</title>
             </item>
         </organization>
     </organizations>
     
     <resources>
-        <resource identifier="res_${identifier}" type="webcontent" adlcp:scormType="sco" href="proxy.html">
+        <resource identifier="res_${escapedIdentifier}" type="webcontent" adlcp:scormType="sco" href="proxy.html">
             <file href="proxy.html"/>
             <file href="scorm-bridge.js"/>
             <file href="pipwerks.js"/>
@@ -90,15 +107,3 @@ export function generateScorm2004ProxyManifest(config) {
     </resources>
 </manifest>`;
 }
-
-/**
- * Escape special XML characters
- */
-function escapeXml(str) {
-    return String(str)
-        .replace(/&/g, '&amp;')
-        .replace(/</g, '&lt;')
-        .replace(/>/g, '&gt;')
-        .replace(/"/g, '&quot;')
-        .replace(/'/g, '&apos;');
-}

package/lib/manifest/xml-utils.js

@@ -12,3 +12,13 @@ export function escapeXmlAttribute(value) {
         .replace(/"/g, '"')
         .replace(/'/g, ''');
 }
+
+/** Create a conservative ASCII XML ID (xsd:ID) from authored text. */
+export function makeXmlId(value, fallback = 'course') {
+    const normalized = String(value ?? '')
+        .trim()
+        .replace(/[^A-Za-z0-9_.-]+/g, '-')
+        .replace(/^-+|-+$/g, '');
+    const candidate = normalized || fallback;
+    return /^[A-Za-z_]/.test(candidate) ? candidate : `${fallback}-${candidate}`;
+}

package/lib/narration.js

@@ -35,10 +35,10 @@ export async function narration(options = {}) {
   if (options.rebuildCache) args.push('--rebuild-cache');
   
   return new Promise((resolve, reject) => {
-    const child = spawn('node', args, {
+    const child = spawn(process.execPath, args, {
       cwd: process.cwd(),
       stdio: 'inherit',
-      shell: true
+      shell: false
     });
     
     child.on('close', (code) => {

package/lib/portable-html.js

@@ -0,0 +1,196 @@
+/**
+ * Portable HTML build support.
+ *
+ * The Vite plugin collapses generated JavaScript and CSS. The export command
+ * then embeds CourseCode's copied runtime assets and writes the final single
+ * HTML file outside the temporary build directory.
+ */
+
+import fs from 'fs';
+import path from 'path';
+import { spawn } from 'child_process';
+import { pathToFileURL } from 'url';
+import { viteSingleFile } from 'vite-plugin-singlefile';
+import { getMimeType, validateProject } from './project-utils.js';
+
+const PORTABLE_BUILD_PREFIX = '.coursecode-portable-build-';
+
+export function createPortableHtmlPlugin() {
+    return viteSingleFile({
+        removeViteModuleLoader: true,
+        useRecommendedBuildConfig: true
+    });
+}
+
+function runCommand(command, args, options = {}) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(command, args, {
+            cwd: process.cwd(),
+            stdio: 'inherit',
+            shell: process.platform === 'win32',
+            ...options
+        });
+        child.on('error', reject);
+        child.on('close', code => {
+            if (code === 0) resolve();
+            else reject(new Error(`${command} ${args.join(' ')} failed with code ${code}`));
+        });
+    });
+}
+
+function walkFiles(rootDir) {
+    const files = [];
+    if (!fs.existsSync(rootDir)) return files;
+
+    for (const entry of fs.readdirSync(rootDir, { withFileTypes: true })) {
+        const absolute = path.join(rootDir, entry.name);
+        if (entry.isDirectory()) files.push(...walkFiles(absolute));
+        else if (entry.isFile()) files.push(absolute);
+    }
+    return files;
+}
+
+function toDataUrl(filePath) {
+    const mimeType = getMimeType(filePath);
+    const base64 = fs.readFileSync(filePath).toString('base64');
+    return `data:${mimeType};base64,${base64}`;
+}
+
+function addAssetAliases(map, canonicalPath, dataUrl) {
+    const canonical = canonicalPath.replace(/\\/g, '/').replace(/^\.\//, '');
+    map[canonical] = dataUrl;
+}
+
+export function collectPortableAssets(buildDir) {
+    const map = {};
+    const courseAssetsDir = path.join(buildDir, 'course', 'assets');
+    for (const filePath of walkFiles(courseAssetsDir)) {
+        const canonical = path.relative(buildDir, filePath).replace(/\\/g, '/');
+        addAssetAliases(map, canonical, toDataUrl(filePath));
+    }
+
+    for (const filename of ['_gallery-manifest.json']) {
+        const filePath = path.join(buildDir, filename);
+        if (fs.existsSync(filePath)) addAssetAliases(map, filename, toDataUrl(filePath));
+    }
+    return map;
+}
+
+function replaceDirectAssetReferences(html, assetMap) {
+    const aliases = [];
+    for (const canonical of Object.keys(assetMap)) {
+        aliases.push([`./${canonical}`, assetMap[canonical]], [canonical, assetMap[canonical]]);
+        if (canonical.startsWith('course/assets/')) {
+            const relative = canonical.slice('course/assets/'.length);
+            aliases.push([`./assets/${relative}`, assetMap[canonical]], [`assets/${relative}`, assetMap[canonical]]);
+        }
+    }
+    aliases.sort((a, b) => b[0].length - a[0].length);
+
+    let result = html;
+    for (const [alias, dataUrl] of aliases) {
+        result = result.split(alias).join(dataUrl);
+    }
+    return result;
+}
+
+export function assemblePortableHtml(indexHtml, assetMap) {
+    const serializedMap = JSON.stringify(assetMap).replace(/</g, '\\u003c');
+    const bootstrap = `<script>window.__COURSECODE_PORTABLE_ASSETS__=${serializedMap};</script>`;
+    let html = replaceDirectAssetReferences(indexHtml, assetMap);
+
+    const firstModule = html.search(/<script\b[^>]*type=["']module["']/i);
+    if (firstModule >= 0) {
+        html = `${html.slice(0, firstModule)}${bootstrap}\n${html.slice(firstModule)}`;
+    } else if (html.includes('</head>')) {
+        html = html.replace('</head>', `${bootstrap}\n</head>`);
+    } else {
+        throw new Error('Portable build is missing a document head or module entry point');
+    }
+
+    return html
+        .replace(/<title([^>]*)>(.*?)<\/title>/i, '<title$1>$2</title>')
+        .replace(/<html([^>]*)>/i, '<html$1 data-coursecode-portable="true">');
+}
+
+export function validatePortableHtml(html) {
+    const problems = [];
+    if (!html.includes('data-coursecode-portable="true"')) problems.push('portable marker missing');
+    if (!html.includes('__COURSECODE_PORTABLE_ASSETS__')) problems.push('embedded asset map missing');
+    if (/<script\b[^>]+src=["'](?!data:|https?:|\/\/)/i.test(html)) problems.push('external local script remains');
+    if (/<link\b[^>]+href=["'](?!data:|https?:|\/\/|#)/i.test(html)) problems.push('external local stylesheet remains');
+    if (/\b(?:src|href|poster)=["'](?:\.\/)?course\/assets\//i.test(html)) problems.push('unembedded course asset remains');
+    if (problems.length > 0) throw new Error(`Portable HTML validation failed: ${problems.join('; ')}`);
+}
+
+function safeFilename(value) {
+    return String(value || 'course')
+        .trim()
+        .replace(/[<>:"/\\|?*]/g, '-')
+        .replace(/\s+/g, '_') || 'course';
+}
+
+async function loadCourseConfig(coursePath) {
+    const url = `${pathToFileURL(path.join(coursePath, 'course-config.js')).href}?portable=${Date.now()}`;
+    const module = await import(url);
+    return module.courseConfig || module.default || {};
+}
+
+function assertPortableBuildSupport(rootDir) {
+    const configPath = path.join(rootDir, 'vite.config.js');
+    const configSource = fs.existsSync(configPath) ? fs.readFileSync(configPath, 'utf8') : '';
+    if (configSource.includes('COURSECODE_PORTABLE_HTML') && configSource.includes('COURSECODE_OUT_DIR')) return;
+
+    throw new Error(
+        'This project\'s vite.config.js predates portable HTML export. ' +
+        'Run "coursecode upgrade --configs", review the generated config backup, and try again.'
+    );
+}
+
+export async function exportPortableHtml(options = {}) {
+    const { coursePath } = validateProject();
+    const rootDir = process.cwd();
+    assertPortableBuildSupport(rootDir);
+    const config = await loadCourseConfig(coursePath);
+    const title = config.metadata?.title || 'Course';
+    const outputPath = path.resolve(options.output || `${safeFilename(title)}.html`);
+    const buildDirName = `${PORTABLE_BUILD_PREFIX}${process.pid}`;
+    const buildDir = path.join(rootDir, buildDirName);
+
+    if (fs.existsSync(buildDir)) fs.rmSync(buildDir, { recursive: true, force: true });
+
+    console.log('\n📄 Building portable HTML course...\n');
+    try {
+        const env = {
+            ...process.env,
+            COURSECODE_PORTABLE_HTML: 'true',
+            COURSECODE_OUT_DIR: buildDirName,
+            LMS_FORMAT: 'standalone'
+        };
+
+        if (options.lint === false) {
+            await runCommand('npx', ['vite', 'build'], { env });
+        } else {
+            await runCommand('npm', ['run', 'build'], { env });
+        }
+
+        const indexPath = path.join(buildDir, 'index.html');
+        if (!fs.existsSync(indexPath)) throw new Error('Portable build did not produce index.html');
+
+        const assetMap = collectPortableAssets(buildDir);
+        const html = assemblePortableHtml(fs.readFileSync(indexPath, 'utf8'), assetMap);
+        validatePortableHtml(html);
+
+        fs.mkdirSync(path.dirname(outputPath), { recursive: true });
+        fs.writeFileSync(outputPath, html, 'utf8');
+
+        const sizeMB = fs.statSync(outputPath).size / 1024 / 1024;
+        const sizeWarning = sizeMB >= 50
+            ? '\n   ⚠ Large portable file: test sharing limits and browser startup time.'
+            : '';
+        console.log(`\n✅ Portable HTML exported\n\n   Output: ${outputPath}\n   Size: ${sizeMB.toFixed(2)} MB${sizeWarning}\n\n   Open the file directly in a modern browser; no LMS or server is required.\n`);
+        return { outputPath, sizeBytes: fs.statSync(outputPath).size, assetCount: Object.keys(assetMap).length };
+    } finally {
+        if (fs.existsSync(buildDir)) fs.rmSync(buildDir, { recursive: true, force: true });
+    }
+}

package/lib/preview-export.js

@@ -32,7 +32,7 @@ function runCommand(cmd, args, options = {}) {
         const child = spawn(cmd, args, {
             cwd: process.cwd(),
             stdio: 'inherit',
-            shell: true,
+            shell: process.platform === 'win32',
             ...options
         });
 

package/lib/preview-server.js

@@ -206,6 +206,14 @@ export function hasValidPreviewMutationToken(headers, expectedToken) {
     return Boolean(expectedToken) && headers?.['x-coursecode-preview-token'] === expectedToken;
 }
 
+export function parsePreviewPort(value = 4173) {
+    const port = Number(value);
+    if (!Number.isInteger(port) || port < 1 || port > 65535) {
+        throw new Error(`Preview port must be an integer between 1 and 65535, got "${value}"`);
+    }
+    return port;
+}
+
 
 
 // ============================================================================
@@ -216,7 +224,7 @@ export async function previewServer(options = {}) {
     const frameworkDev = options.frameworkDev || false;
     const paths = validateProject({ frameworkDev });
     const title = options.title || getCourseTitle(paths.coursePath);
-    const previewPort = parseInt(options.port || '4173', 10);
+    const previewPort = parsePreviewPort(options.port ?? 4173);
     const previewHost = options.host || '127.0.0.1';
     const previewToken = crypto.randomBytes(32).toString('base64url');
     const distDir = path.join(process.cwd(), 'dist');
@@ -277,6 +285,17 @@ export async function previewServer(options = {}) {
     });
 
     let initialBuildDone = false;
+    let viteSpawnError = null;
+
+    viteProcess.on('error', (error) => {
+        viteSpawnError = error;
+        buildState.lastBuildSuccess = false;
+        buildState.errors.push({
+            type: 'build',
+            message: `Failed to start Vite: ${error.message}`,
+            time: new Date().toISOString()
+        });
+    });
 
     viteProcess.stdout.on('data', (data) => {
         const output = data.toString();
@@ -320,22 +339,24 @@ export async function previewServer(options = {}) {
     });
 
     // Wait for initial build
-    await new Promise((resolve) => {
+    await new Promise((resolve, reject) => {
         const indexPath = path.join(distDir, 'index.html');
         let attempts = 0;
         const maxAttempts = 120;
 
         const checkReady = setInterval(() => {
             attempts++;
-            if (fs.existsSync(indexPath)) {
+            if (viteSpawnError) {
+                clearInterval(checkReady);
+                reject(new Error(`Preview build could not start: ${viteSpawnError.message}`));
+            } else if (buildState.lastBuildSuccess && fs.existsSync(indexPath)) {
                 clearInterval(checkReady);
                 initialBuildDone = true;
                 resolve();
             } else if (attempts >= maxAttempts) {
                 clearInterval(checkReady);
-                console.error('⚠️  Build timeout - index.html not found');
-                initialBuildDone = true;
-                resolve();
+                viteProcess.kill();
+                reject(new Error('Preview build timed out before a fresh index.html was produced'));
             }
         }, 500);
     });

package/lib/project-utils.js

@@ -159,14 +159,22 @@ const mimeTypes = {
     '.ttf': 'font/ttf',
     '.eot': 'application/vnd.ms-fontobject',
     '.mp3': 'audio/mpeg',
+    '.m4a': 'audio/mp4',
     '.mp4': 'video/mp4',
     '.webm': 'video/webm',
     '.ogg': 'audio/ogg',
     '.wav': 'audio/wav',
+    '.vtt': 'text/vtt',
+    '.md': 'text/markdown',
+    '.txt': 'text/plain',
+    '.csv': 'text/csv',
     '.xml': 'application/xml',
     '.xsd': 'application/xml',
     '.pdf': 'application/pdf',
-    '.zip': 'application/zip'
+    '.zip': 'application/zip',
+    '.wasm': 'application/wasm',
+    '.gltf': 'model/gltf+json',
+    '.glb': 'model/gltf-binary'
 };
 
 /**

package/lib/proxy-templates/proxy.html

@@ -48,7 +48,10 @@
     <script src="pipwerks.js"></script>
     <script>
         // Injected as a JSON string by the build system before the bridge loads.
-        window.COURSECODE_PROXY_CONFIG = { courseUrl: {{EXTERNAL_URL_JSON}} };
+        window.COURSECODE_PROXY_CONFIG = {
+            courseUrl: {{EXTERNAL_URL_JSON}},
+            baseFormat: {{BASE_FORMAT_JSON}}
+        };
     </script>
     <script src="scorm-bridge.js"></script>
     <script>

package/lib/proxy-templates/scorm-bridge.js

@@ -2,7 +2,7 @@
  * SCORM Bridge - Connects postMessage from iframe to LMS API
  * Generated by CourseCode - Do not edit manually
  * 
- * Uses pipwerks wrapper which auto-detects SCORM 1.2 or 2004 API.
+ * Uses pipwerks with the package-declared SCORM version.
  */
 
 // Import pipwerks (bundled with proxy package)
@@ -21,15 +21,22 @@
     const scorm = pipwerks.SCORM;
     const iframe = document.getElementById('course');
     let initialized = false;
+    let sessionStartedAt = 0;
+    let courseOrigin = null;
 
-    // Derive the exact expected course origin from build-time configuration.
-    // Fail closed: wildcard origins would allow unrelated frames to operate the LMS API.
-    let courseOrigin;
+    const baseFormat = window.COURSECODE_PROXY_CONFIG?.baseFormat;
+    if (baseFormat !== 'scorm1.2' && baseFormat !== 'scorm2004') {
+        console.error('SCORM Bridge: Invalid or missing base format; bridge disabled');
+        return;
+    }
+    scorm.version = baseFormat === 'scorm1.2' ? '1.2' : '2004';
+
+    // Validate the configured launch URL itself. The actual post-redirect course
+    // origin is securely bound by a nonce handshake with iframe.contentWindow.
     try {
         const courseUrl = window.COURSECODE_PROXY_CONFIG?.courseUrl;
         if (!courseUrl) throw new Error('Missing proxy course URL');
-        courseOrigin = new URL(courseUrl).origin;
-        console.log('SCORM Bridge: Expected course origin:', courseOrigin);
+        console.log('SCORM Bridge: Configured course origin:', new URL(courseUrl).origin);
     } catch (e) {
         console.error('SCORM Bridge: Invalid course URL; bridge disabled:', e.message);
         return;
@@ -39,12 +46,47 @@
     scorm.handleCompletionStatus = false;
     scorm.handleExitMode = false;
 
+    function formatSessionTime() {
+        const totalSeconds = Math.max(0, Math.floor((Date.now() - sessionStartedAt) / 1000));
+        const hours = Math.floor(totalSeconds / 3600);
+        const minutes = Math.floor((totalSeconds % 3600) / 60);
+        const seconds = totalSeconds % 60;
+        if (baseFormat === 'scorm1.2') {
+            return `${String(hours).padStart(4, '0')}:${String(minutes).padStart(2, '0')}:${String(seconds).padStart(2, '0')}`;
+        }
+        return `PT${hours ? `${hours}H` : ''}${minutes ? `${minutes}M` : ''}${seconds || (!hours && !minutes) ? `${seconds}S` : ''}`;
+    }
+
+    function stageEmergencySessionData() {
+        if (!initialized) return;
+        const exitKey = baseFormat === 'scorm1.2' ? 'cmi.core.exit' : 'cmi.exit';
+        const sessionTimeKey = baseFormat === 'scorm1.2' ? 'cmi.core.session_time' : 'cmi.session_time';
+        scorm.set(exitKey, 'suspend');
+        scorm.set(sessionTimeKey, formatSessionTime());
+    }
+
     /**
      * Handle messages from course iframe
      */
     window.addEventListener('message', function(event) {
         const { data } = event;
 
+        if (data?.type === 'scorm-proxy-handshake') {
+            if (!iframe || event.source !== iframe.contentWindow || !data.nonce) return;
+            if (data.baseFormat !== baseFormat) {
+                console.warn('SCORM Bridge: Rejected course with mismatched SCORM format');
+                return;
+            }
+
+            courseOrigin = event.origin;
+            event.source.postMessage({
+                type: 'scorm-proxy-handshake-response',
+                nonce: data.nonce,
+                baseFormat
+            }, courseOrigin);
+            return;
+        }
+
         // Ignore non-proxy messages
         if (!data || data.type !== 'scorm-proxy-request') {
             return;
@@ -55,8 +97,9 @@
             return;
         }
 
-        // Validate origin when we have a known course origin
-        if (event.origin !== courseOrigin) {
+        // Requests are accepted only after the handshake and only from the
+        // exact origin that owns the configured iframe window.
+        if (!courseOrigin || event.origin !== courseOrigin) {
             console.warn('SCORM Bridge: Rejected message from unexpected origin:', event.origin);
             return;
         }
@@ -71,6 +114,7 @@
                     if (!initialized) {
                         result = scorm.init();
                         initialized = result;
+                        if (initialized) sessionStartedAt = Date.now();
                     } else {
                         result = true;
                     }
@@ -93,6 +137,11 @@
                     initialized = false;
                     break;
 
+                case 'EmergencySave':
+                    if (initialized) stageEmergencySessionData();
+                    result = initialized ? scorm.save() : false;
+                    break;
+
                 default:
                     error = `Unknown method: ${method}`;
             }
@@ -101,8 +150,16 @@
             console.error('SCORM Bridge error:', method, e);
         }
 
+        const shouldInspectLmsError = method === 'GetValue' || result === false || result === 'false';
+        if (!error && shouldInspectLmsError) {
+            const code = Number(scorm.debug?.getCode?.() || 0);
+            if (code !== 0) {
+                error = `SCORM ${method} failed (${code}): ${scorm.debug?.getInfo?.(code) || 'Unknown LMS error'}`;
+            }
+        }
+
         // Send response back to iframe (targeted to known origin)
-        if (iframe && iframe.contentWindow) {
+        if (id !== null && id !== undefined && iframe && iframe.contentWindow) {
             iframe.contentWindow.postMessage({
                 type: 'scorm-proxy-response',
                 id,
@@ -112,7 +169,22 @@
         }
     });
 
+    // The LMS-side page is the only context guaranteed to still have direct,
+    // synchronous API access when a browser tears down the external iframe.
+    window.addEventListener('pagehide', function() {
+        if (!initialized) return;
+        try {
+            stageEmergencySessionData();
+            scorm.save();
+            scorm.quit();
+        } catch (error) {
+            console.error('SCORM Bridge: Emergency pagehide finalization failed:', error);
+        } finally {
+            initialized = false;
+        }
+    });
+
     // Log bridge ready
-    console.log('SCORM Bridge: Ready (pipwerks v' + (pipwerks.version || '1.x') + ')');
+    console.log('SCORM Bridge: Ready for ' + baseFormat + ' (pipwerks v' + (pipwerks.version || '1.x') + ')');
 
 })();

package/lib/scaffold.js

@@ -67,7 +67,7 @@ function slideTemplate(id) {
  * Minimal assessment template
  */
 function assessmentTemplate(id) {
-    return `const { AssessmentManager, createMultipleChoiceQuestion } = CourseCode;
+    return `const { AssessmentManager } = CourseCode;
 
 export const config = {
     id: '${id}',
@@ -80,8 +80,9 @@ export const config = {
 };
 
 const questions = [
-    createMultipleChoiceQuestion({
+    {
         id: '${id}-q1',
+        type: 'multiple-choice',
         prompt: 'Question text?',
         choices: [
             { value: 'a', text: 'Option A' },
@@ -89,11 +90,15 @@ const questions = [
             { value: 'c', text: 'Option C' }
         ],
         correctAnswer: 'a',
-        controlled: true
-    })
+        feedback: {
+            correct: 'Correct. Explain why this answer is right.',
+            incorrect: 'Not quite. Explain the governing concept and point to the correct answer.'
+        }
+    }
 ];
 
 export const slide = {
+    assessmentId: config.id,
     render(_root, context = {}) {
         const container = document.createElement('div');
         const assessment = AssessmentManager.createAssessment({ ...config, questions });