moodle-cli 0.9.2 → 0.9.4

package/dist/worker/worker.js

@@ -3582,7 +3582,7 @@ var require_parse = __commonJS({
     var whitespace = /* @__PURE__ */ new Set([9, 10, 12, 13, 32]);
     var ZERO = "0".charCodeAt(0);
     var NINE = "9".charCodeAt(0);
-    function parse8(formula) {
+    function parse9(formula) {
       formula = formula.trim().toLowerCase();
       if (formula === "even") {
         return [2, 0];
@@ -3634,7 +3634,7 @@ var require_parse = __commonJS({
         }
       }
     }
-    exports.parse = parse8;
+    exports.parse = parse9;
   }
 });
 
@@ -5084,7 +5084,7 @@ var require_html = __commonJS({
         }).join("");
       }
       set innerHTML(content) {
-        const r = parse8(content, this._parseOptions);
+        const r = parse9(content, this._parseOptions);
         const nodes = r.childNodes.length ? r.childNodes : [new text_1.default(content, this)];
         resetParent(nodes, this);
         resetParent(this.childNodes, null);
@@ -5095,7 +5095,7 @@ var require_html = __commonJS({
           content = [content];
         } else if (typeof content == "string") {
           options = Object.assign(Object.assign({}, this._parseOptions), options);
-          const r = parse8(content, options);
+          const r = parse9(content, options);
           content = r.childNodes.length ? r.childNodes : [new text_1.default(r.innerHTML, this)];
         }
         resetParent(this.childNodes, null);
@@ -5109,7 +5109,7 @@ var require_html = __commonJS({
           if (node2 instanceof node_1.default) {
             return [node2];
           } else if (typeof node2 == "string") {
-            const r = parse8(node2, this._parseOptions);
+            const r = parse9(node2, this._parseOptions);
             return r.childNodes.length ? r.childNodes : [new text_1.default(node2, this)];
           }
           return [];
@@ -5493,7 +5493,7 @@ var require_html = __commonJS({
         if (arguments.length < 2) {
           throw new Error("2 arguments required");
         }
-        const p = parse8(html, this._parseOptions);
+        const p = parse9(html, this._parseOptions);
         if (where === "afterend") {
           this.after(...p.childNodes);
         } else if (where === "afterbegin") {
@@ -5639,7 +5639,7 @@ var require_html = __commonJS({
       }
       /** Clone this Node */
       clone() {
-        return parse8(this.toString(), this._parseOptions).firstChild;
+        return parse9(this.toString(), this._parseOptions).firstChild;
       }
     };
     exports.default = HTMLElement2;
@@ -5841,7 +5841,7 @@ var require_html = __commonJS({
       return stack;
     }
     exports.base_parse = base_parse;
-    function parse8(data, options = {}) {
+    function parse9(data, options = {}) {
       const stack = base_parse(data, options);
       const [root] = stack;
       while (stack.length > 1) {
@@ -5869,7 +5869,7 @@ var require_html = __commonJS({
       }
       return root;
     }
-    exports.parse = parse8;
+    exports.parse = parse9;
     function resolveInsertable(insertable) {
       return insertable.map((val) => {
         if (typeof val === "string") {
@@ -5937,18 +5937,18 @@ var require_dist = __commonJS({
     var parse_1 = __importDefault(require_parse2());
     var valid_1 = __importDefault(require_valid());
     exports.valid = valid_1.default;
-    function parse8(data, options = {}) {
+    function parse9(data, options = {}) {
       return (0, parse_1.default)(data, options);
     }
-    exports.default = parse8;
-    exports.parse = parse8;
-    parse8.parse = parse_1.default;
-    parse8.HTMLElement = html_1.default;
-    parse8.CommentNode = comment_1.default;
-    parse8.valid = valid_1.default;
-    parse8.Node = node_1.default;
-    parse8.TextNode = text_1.default;
-    parse8.NodeType = type_1.default;
+    exports.default = parse9;
+    exports.parse = parse9;
+    parse9.parse = parse_1.default;
+    parse9.HTMLElement = html_1.default;
+    parse9.CommentNode = comment_1.default;
+    parse9.valid = valid_1.default;
+    parse9.Node = node_1.default;
+    parse9.TextNode = text_1.default;
+    parse9.NodeType = type_1.default;
   }
 });
 
@@ -6237,16 +6237,13 @@ function createOAuthRouter(options) {
     }
     const authorizeRequest = resolved.request;
     const pairing = await readPairing();
+    const pairingWindow = pairing ? { minutesLeft: Math.max(1, Math.ceil((pairing.expiresAt - now()) / 6e4)), attemptsLeft: PAIRING_CODE_MAX_ATTEMPTS - pairing.attempts } : void 0;
     if (request.method === "GET") {
-      return htmlResponse(approvalPage(authorizeRequest, params, {
-        pairingOpen: Boolean(pairing),
-        ...pairing ? {} : { message: "No pairing window is open. Run `moodle mcp pair` on your computer, then reload this page." }
-      }), 200, authorizeRequest.redirectUri);
+      return htmlResponse(approvalPage(authorizeRequest, params, { window: pairingWindow }), 200, authorizeRequest.redirectUri);
     }
-    if (!pairing) {
+    if (!pairing || !pairingWindow) {
       return htmlResponse(approvalPage(authorizeRequest, params, {
-        pairingOpen: false,
-        message: "No pairing window is open. Run `moodle mcp pair` on your computer, then submit the code it prints."
+        message: "That pairing window has closed. Run `moodle mcp pair` again and enter the new code."
       }), 403, authorizeRequest.redirectUri);
     }
     const approvedClients = [...(await storage.list({ prefix: CLIENT_PREFIX })).values()].filter((client) => client.approvedAt !== void 0);
@@ -6256,8 +6253,8 @@ function createOAuthRouter(options) {
     if (!await consumePairingAttempt(pairing, params.get("pairing_code") ?? "")) {
       const remaining = PAIRING_CODE_MAX_ATTEMPTS - pairing.attempts - 1;
       return htmlResponse(approvalPage(authorizeRequest, params, {
-        pairingOpen: remaining > 0,
-        message: remaining > 0 ? `That pairing code is not correct. ${remaining} ${remaining === 1 ? "attempt remains" : "attempts remain"}.` : "Too many incorrect attempts. Run `moodle mcp pair` again to open a new pairing window."
+        window: remaining > 0 ? { ...pairingWindow, attemptsLeft: remaining } : void 0,
+        message: remaining > 0 ? `That code is not correct. ${remaining} ${remaining === 1 ? "attempt" : "attempts"} left.` : "Too many incorrect codes, so the window closed. Run `moodle mcp pair` again for a new one."
       }), 403, authorizeRequest.redirectUri);
     }
     await storage.put(`${CLIENT_PREFIX}${authorizeRequest.clientId}`, { ...authorizeRequest.client, approvedAt: now() });
@@ -6516,39 +6513,59 @@ function htmlResponse(body, status = 200, redirectUri) {
     }
   });
 }
-var PAGE_STYLE = `body{font:16px/1.5 system-ui,sans-serif;margin:0;padding:3rem 1.25rem;background:#f6f7f9;color:#16181d}
-main{max-width:26rem;margin:0 auto;background:#fff;border:1px solid #dfe2e8;border-radius:12px;padding:1.75rem}
-h1{font-size:1.15rem;margin:0 0 .75rem}dl{margin:0 0 1.25rem;font-size:.9rem}dt{color:#5b6472;margin-top:.5rem}
-dd{margin:0;word-break:break-all}input{width:100%;box-sizing:border-box;font:1.25rem/1 ui-monospace,monospace;
-letter-spacing:.18em;text-align:center;padding:.7rem;border:1px solid #c3c8d1;border-radius:8px;text-transform:uppercase}
-button{width:100%;margin-top:1rem;padding:.7rem;font-size:1rem;border:0;border-radius:8px;background:#16181d;color:#fff}
-.note{font-size:.85rem;color:#5b6472;margin-top:1rem}.error{color:#a3111c;font-size:.9rem;margin:0 0 1rem}`;
-function approvalPage(request, params, options) {
-  const hidden = ["response_type", "client_id", "redirect_uri", "scope", "state", "code_challenge", "code_challenge_method", "resource"].map((name) => {
+var PAGE_STYLE = `:root{color-scheme:light dark;--bg:#f6f7f9;--card:#fff;--line:#dfe2e8;--text:#16181d;--muted:#5b6472;--accent:#16181d;--accent-text:#fff;--danger:#a3111c;--ok:#0f6b3a;--mono:ui-monospace,SFMono-Regular,Menlo,monospace}
+@media(prefers-color-scheme:dark){:root{--bg:#121417;--card:#1b1e23;--line:#2c313a;--text:#e8eaee;--muted:#9aa3b0;--accent:#e8eaee;--accent-text:#121417;--danger:#ff8a8a;--ok:#6fd39a}}
+body{font:16px/1.5 system-ui,sans-serif;margin:0;padding:3rem 1.25rem;background:var(--bg);color:var(--text)}
+main{max-width:26rem;margin:0 auto;background:var(--card);border:1px solid var(--line);border-radius:12px;padding:1.75rem}
+h1{font-size:1.15rem;margin:0 0 .75rem}p{margin:.5rem 0}dl{margin:0 0 1.25rem;font-size:.9rem}dt{color:var(--muted);margin-top:.5rem}
+dd{margin:0;word-break:break-all}label{display:block;font-size:.9rem;color:var(--muted);margin-bottom:.35rem}
+input{width:100%;box-sizing:border-box;font:1.35rem/1 var(--mono);letter-spacing:.2em;text-align:center;padding:.7rem;
+border:1px solid var(--line);border-radius:8px;background:var(--bg);color:var(--text);text-transform:uppercase}
+input:focus{outline:2px solid var(--accent);outline-offset:1px}
+button{width:100%;margin-top:1rem;padding:.7rem;font-size:1rem;border:0;border-radius:8px;background:var(--accent);color:var(--accent-text);cursor:pointer}
+button.quiet{background:transparent;color:var(--text);border:1px solid var(--line)}
+code{font:.9em var(--mono);background:var(--bg);border:1px solid var(--line);border-radius:4px;padding:.05em .35em}
+ol{padding-left:1.25rem;margin:.5rem 0 1rem;font-size:.95rem}li{margin:.25rem 0}
+.note{font-size:.85rem;color:var(--muted);margin-top:1rem}.error{color:var(--danger);font-size:.9rem;margin:0 0 1rem}
+.open{color:var(--ok);font-size:.9rem;margin:0 0 .75rem}`;
+function hiddenFields(request, params) {
+  return ["response_type", "client_id", "redirect_uri", "scope", "state", "code_challenge", "code_challenge_method", "resource"].map((name) => {
     const value = name === "redirect_uri" ? request.redirectUri : params.get(name);
     return value ? `<input type="hidden" name="${name}" value="${escapeHtml(value)}">` : "";
   }).join("");
-  const form = options.pairingOpen ? `<form method="post" action="${AUTHORIZE_PATH}">${hidden}
-<label for="pairing_code">Pairing code</label>
-<input id="pairing_code" name="pairing_code" autocomplete="off" autocapitalize="characters" spellcheck="false" autofocus>
-<button type="submit">Approve access</button></form>` : "";
+}
+function approvalPage(request, params, options) {
+  const hidden = hiddenFields(request, params);
+  const body = options.window ? `<p class="open">A pairing window is open for ${options.window.minutesLeft} more ${options.window.minutesLeft === 1 ? "minute" : "minutes"}.</p>
+${options.message ? `<p class="error">${escapeHtml(options.message)}</p>` : ""}
+<form method="post" action="${AUTHORIZE_PATH}">${hidden}
+<label for="pairing_code">Enter the code that <code>moodle mcp pair</code> printed</label>
+<input id="pairing_code" name="pairing_code" placeholder="XXXX-XXXX" maxlength="9" required autocomplete="one-time-code" autocapitalize="characters" autocorrect="off" spellcheck="false" autofocus>
+<button type="submit">Approve access</button></form>
+<p class="note">${options.message ? "" : `${options.window.attemptsLeft} attempts allowed. `}The code works once and only while the window is open.</p>` : `${options.message ? `<p class="error">${escapeHtml(options.message)}</p>` : "<p>Nothing can be approved until you open a pairing window from your own computer.</p>"}
+<ol>
+  <li>Open a terminal on the computer where you installed moodle-cli.</li>
+  <li>Run <code>moodle mcp pair</code>. It prints an eight-character code.</li>
+  <li>Come back here, reload, and enter the code.</li>
+</ol>
+<form method="get" action="${AUTHORIZE_PATH}">${hidden}<button type="submit" class="quiet">Reload this page</button></form>
+<p class="note">Anyone who reaches this page without your code is refused, which is what keeps this server private.</p>`;
   return page("Approve MCP access", `
 <h1>Approve access to your Moodle</h1>
 <dl>
-  <dt>Client</dt><dd>${escapeHtml(request.client.clientName)}</dd>
-  <dt>Redirect</dt><dd>${escapeHtml(new URL(request.redirectUri).origin)}</dd>
-  <dt>Access</dt><dd>Read-only Moodle data (${OAUTH_SCOPE})</dd>
+  <dt>Asking</dt><dd>${escapeHtml(request.client.clientName)}</dd>
+  <dt>Returns to</dt><dd>${escapeHtml(new URL(request.redirectUri).origin)}</dd>
+  <dt>Grants</dt><dd>Read-only access to your Moodle units, deadlines, grades, forums and files (<code>${OAUTH_SCOPE}</code>). Nothing is written to Moodle.</dd>
 </dl>
-${options.message ? `<p class="error">${escapeHtml(options.message)}</p>` : ""}
-${form}
-<p class="note">Run <code>moodle mcp pair</code> on your computer to get a code. It is valid for 10 minutes and one approval.</p>`);
+${body}`);
 }
 function errorPage(message) {
-  return page("Request rejected", `<h1>Request rejected</h1><p class="error">${escapeHtml(message)}</p>`);
+  return page("Request rejected", `<h1>Request rejected</h1><p class="error">${escapeHtml(message)}</p>
+<p class="note">Close this tab and start the connection again from your MCP client. If it keeps failing, run <code>moodle mcp status</code> on your computer.</p>`);
 }
 function page(title, body) {
   return `<!doctype html><html lang="en"><head><meta charset="utf-8">
-<meta name="viewport" content="width=device-width,initial-scale=1"><title>${escapeHtml(title)}</title>
+<meta name="viewport" content="width=device-width,initial-scale=1"><meta name="robots" content="noindex"><title>${escapeHtml(title)}</title>
 <style>${PAGE_STYLE}</style></head><body><main>${body}</main></body></html>`;
 }
 function escapeHtml(value) {
@@ -8529,18 +8546,18 @@ var validateAsync = async (schema2, value, _ctx) => {
   return result.issues.length === 0;
 };
 var _encode = (_Err) => {
-  const parse8 = _parse(_Err);
+  const parse9 = _parse(_Err);
   const fn = (schema2, value, _ctx, _params) => {
     const ctx = _ctx ? { ..._ctx, direction: "backward" } : { direction: "backward" };
-    return parse8(schema2, value, ctx, finalizeParams(fn, _params));
+    return parse9(schema2, value, ctx, finalizeParams(fn, _params));
   };
   return fn;
 };
 var encode = /* @__PURE__ */ _encode($ZodRealError);
 var _decode = (_Err) => {
-  const parse8 = _parse(_Err);
+  const parse9 = _parse(_Err);
   const fn = (schema2, value, _ctx, _params) => {
-    return parse8(schema2, value, _ctx, finalizeParams(fn, _params));
+    return parse9(schema2, value, _ctx, finalizeParams(fn, _params));
   };
   return fn;
 };
@@ -10356,7 +10373,7 @@ var $ZodUnion = /* @__PURE__ */ $constructor("$ZodUnion", (inst, def) => {
   defineLazyInternal(inst, "optout", (zod) => zod.def.options.some((o) => o._zod.optout === "optional") ? "optional" : void 0);
   defineLazyInternal(inst, "values", (zod) => {
     if (zod.def.options.every((o) => o._zod.values)) {
-      return new Set(zod.def.options.flatMap((option) => Array.from(option._zod.values)));
+      return new Set(zod.def.options.flatMap((option2) => Array.from(option2._zod.values)));
     }
     return void 0;
   });
@@ -10374,8 +10391,8 @@ var $ZodUnion = /* @__PURE__ */ $constructor("$ZodUnion", (inst, def) => {
     }
     let async = false;
     const results = [];
-    for (const option of def.options) {
-      const result = option._zod.run({
+    for (const option2 of def.options) {
+      const result = option2._zod.run({
         value: payload.value,
         issues: []
       }, ctx);
@@ -10434,8 +10451,8 @@ var $ZodXor = /* @__PURE__ */ $constructor("$ZodXor", (inst, def) => {
     }
     let async = false;
     const results = [];
-    for (const option of def.options) {
-      const result = option._zod.run({
+    for (const option2 of def.options) {
+      const result = option2._zod.run({
         value: payload.value,
         issues: []
       }, ctx);
@@ -10460,24 +10477,24 @@ function getDiscriminatedOption(union2, value) {
     map2 = discriminatorMap(internals.def);
     internals.bag.optionsMap = map2;
   }
-  const option = map2.get(value);
-  if (option === null)
+  const option2 = map2.get(value);
+  if (option2 === null)
     throw new Error(`Ambiguous discriminator value "${String(value)}"`);
-  return option;
+  return option2;
 }
 function discriminatorMap(def) {
   const map2 = /* @__PURE__ */ new Map();
-  for (const option of def.options) {
-    const values = option._zod.propValues?.[def.discriminator];
+  for (const option2 of def.options) {
+    const values = option2._zod.propValues?.[def.discriminator];
     if (!values || values.size === 0)
-      throw new Error(`Invalid discriminated union option at index "${def.options.indexOf(option)}"`);
+      throw new Error(`Invalid discriminated union option at index "${def.options.indexOf(option2)}"`);
     for (const value of values) {
       if (map2.has(value)) {
         if (value !== void 0)
           throw new Error(`Duplicate discriminator value "${String(value)}"`);
         map2.set(value, null);
       } else {
-        map2.set(value, option);
+        map2.set(value, option2);
       }
     }
   }
@@ -10490,10 +10507,10 @@ var $ZodDiscriminatedUnion = /* @__PURE__ */ $constructor("$ZodDiscriminatedUnio
   defineLazyInternal(inst, "propValues", (zod) => {
     const propValues = {};
     let undefinedCount = 0;
-    for (const option of zod.def.options) {
-      const pv = option._zod.propValues;
+    for (const option2 of zod.def.options) {
+      const pv = option2._zod.propValues;
       if (!pv || Object.keys(pv).length === 0)
-        throw new Error(`Invalid discriminated union option at index "${zod.def.options.indexOf(option)}"`);
+        throw new Error(`Invalid discriminated union option at index "${zod.def.options.indexOf(option2)}"`);
       if (pv[zod.def.discriminator]?.has(void 0))
         undefinedCount++;
       for (const [k, v] of Object.entries(pv)) {
@@ -10509,8 +10526,8 @@ var $ZodDiscriminatedUnion = /* @__PURE__ */ $constructor("$ZodDiscriminatedUnio
       propValues[zod.def.discriminator]?.delete(void 0);
     return propValues;
   });
-  def.options.forEach((option, i) => {
-    const propShape = rawShape(option._zod.def);
+  def.options.forEach((option2, i) => {
+    const propShape = rawShape(option2._zod.def);
     if (propShape && !Object.prototype.hasOwnProperty.call(propShape, def.discriminator)) {
       throw new Error(`Invalid discriminated union option at index "${i}"`);
     }
@@ -20810,8 +20827,8 @@ function generateDiscriminatedUnionCheck(doc, ctx, def, accessor) {
   doc.write(`let ${outputVar};`);
   let firstBranch = true;
   const claimed = /* @__PURE__ */ new Set();
-  for (const option of def.options) {
-    const values = option._zod.propValues?.[def.discriminator];
+  for (const option2 of def.options) {
+    const values = option2._zod.propValues?.[def.discriminator];
     if (!values || values.size === 0) {
       throw new ZodCompileUnsupportedError("discriminated union option without static discriminator values");
     }
@@ -20825,7 +20842,7 @@ function generateDiscriminatedUnionCheck(doc, ctx, def, accessor) {
     const prefix = firstBranch ? "if" : "else if";
     doc.write(`${prefix} (${conditions.join(" || ")}) {`);
     doc.indented((d) => {
-      const branchOutput = generateCheck(d, ctx, option, accessor);
+      const branchOutput = generateCheck(d, ctx, option2, accessor);
       d.write(`${outputVar} = ${branchOutput};`);
     });
     doc.write(`}`);
@@ -22407,14 +22424,14 @@ function compactTypeUnion(schema2) {
   if (!Array.isArray(options) || options.length === 0 || schema2.type !== void 0)
     return;
   const types = [];
-  for (const option of options) {
-    if (!option || typeof option !== "object")
+  for (const option2 of options) {
+    if (!option2 || typeof option2 !== "object")
       return;
-    compactTypeUnion(option);
-    const keys = Object.keys(option);
+    compactTypeUnion(option2);
+    const keys = Object.keys(option2);
     if (keys.length !== 1 || keys[0] !== "type")
       return;
-    const type = option.type;
+    const type = option2.type;
     for (const member of Array.isArray(type) ? type : [type]) {
       if (typeof member !== "string")
         return;
@@ -22704,8 +22721,8 @@ function isTransforming(_schema, _ctx) {
     return false;
   }
   if (def.type === "union") {
-    for (const option of def.options) {
-      if (isTransforming(option, ctx))
+    for (const option2 of def.options) {
+      if (isTransforming(option2, ctx))
         return true;
     }
     return false;
@@ -26452,7 +26469,7 @@ function stringValue(value) {
 }
 
 // src/version.ts
-var VERSION = "0.9.2";
+var VERSION = "0.9.4";
 
 // src/worker/http.ts
 var HEALTH_PATH = "/healthz";
@@ -27058,6 +27075,11 @@ var DASHBOARD_PATH = "/my/";
 var COURSE_PATH = "/course/view.php";
 var ASSIGN_VIEW_PATH = "/mod/assign/view.php";
 var QUIZ_VIEW_PATH = "/mod/quiz/view.php";
+var QUIZ_REVIEW_PATH = "/mod/quiz/review.php";
+var QUIZ_START_PATH = "/mod/quiz/startattempt.php";
+var QUIZ_ATTEMPT_PATH = "/mod/quiz/attempt.php";
+var QUIZ_SUMMARY_PATH = "/mod/quiz/summary.php";
+var QUIZ_PROCESS_PATH = "/mod/quiz/processattempt.php";
 var RESOURCE_VIEW_PATH = "/mod/resource/view.php";
 var URL_VIEW_PATH = "/mod/url/view.php";
 var PAGE_VIEW_PATH = "/mod/page/view.php";
@@ -27378,6 +27400,8 @@ function parseGradeOverviewRows(html, baseUrl) {
   return rows;
 }
 function parseAssignmentHtml(html, assignmentId, baseUrl) {
+  const root = (0, import_node_html_parser2.parse)(html);
+  const feedback = root.querySelector(".feedback");
   return {
     id: assignmentId,
     name: pageTitle(html),
@@ -27387,9 +27411,39 @@ function parseAssignmentHtml(html, assignmentId, baseUrl) {
     grading_status: findTableValue(html, "Grading status"),
     time_remaining: findTableValue(html, "Time remaining"),
     grade: findTableValue(html, "Grade"),
+    graded_on: feedback ? findTableValue(feedback.toString(), "Graded on") : "",
+    graded_by: feedback ? findTableValue(feedback.toString(), "Graded by") : "",
+    feedback_comments: feedback ? findTableValue(feedback.toString(), "Feedback comments") : "",
+    criteria: feedback ? parseFeedbackCriteria(feedback) : [],
+    file_entries: feedback ? parseFeedbackFiles(feedback, baseUrl) : [],
     url: `${baseUrl.replace(/\/$/, "")}/mod/assign/view.php?id=${assignmentId}`
   };
 }
+function parseFeedbackCriteria(feedback) {
+  const criteria = [];
+  for (const row of feedback.querySelectorAll("tr.criterion")) {
+    const level = row.querySelector("td.level.checked");
+    const name = cleanNodeText(row.querySelector(".criterionshortname") ?? row.querySelector("td.description"));
+    if (!name) continue;
+    criteria.push({
+      name,
+      level: cleanNodeText(level?.querySelector(".definition")),
+      score: cleanNodeText(row.querySelector("td.score") ?? level?.querySelector(".score")),
+      remark: cleanTableCell(row.querySelector("td.remark"))
+    });
+  }
+  return criteria;
+}
+function parseFeedbackFiles(feedback, baseUrl) {
+  const entries = [];
+  for (const link of feedback.querySelectorAll('a[href*="pluginfile.php"]')) {
+    const url2 = resolveUrl(baseUrl, link.getAttribute("href") ?? "");
+    const label = cleanNodeText(link);
+    const name = /\.\w{1,5}$/u.test(label) ? label : decodeURIComponent(new URL(url2).pathname.split("/").at(-1) || "file");
+    if (!entries.some((entry) => entry.url === url2)) entries.push(fileEntry(name, url2, baseUrl));
+  }
+  return entries;
+}
 function parseQuizHtml(html, quizId, baseUrl) {
   const root = (0, import_node_html_parser2.parse)(html);
   return {
@@ -27398,12 +27452,85 @@ function parseQuizHtml(html, quizId, baseUrl) {
     ...activityContext(html),
     opens_pretty: extractLabeledText(html, "Opens:"),
     closes_pretty: extractLabeledText(html, "Closes:"),
-    attempts_allowed: cleanText(root.textContent.match(/Attempts allowed:\s*([^\n]+)/i)?.[1] ?? ""),
+    attempts_allowed: labeledParagraph(root, "Attempts allowed:"),
+    time_limit: labeledParagraph(root, "Time limit:"),
     availability: cleanText(root.textContent.match(/This quiz is currently[^\n]+/i)?.[0] ?? ""),
     grade: findTableValue(html, "Grade"),
+    attempts: parseQuizAttempts(root, baseUrl),
     url: `${baseUrl.replace(/\/$/, "")}/mod/quiz/view.php?id=${quizId}`
   };
 }
+function labeledParagraph(root, label) {
+  for (const p of root.querySelectorAll("p")) {
+    const line = cleanNodeText(p);
+    if (line.startsWith(label)) return cleanText(line.slice(label.length));
+  }
+  return "";
+}
+function parseQuizAttempts(root, baseUrl) {
+  const attempts = [];
+  for (const table of root.querySelectorAll("table.quizreviewsummary")) {
+    const card = table.closest(".card") ?? table.parentNode;
+    const link = card?.querySelector('a[href*="/mod/quiz/review.php"]');
+    const reviewUrl = link ? resolveUrl(baseUrl, link.getAttribute("href") ?? "") : "";
+    const id2 = numberQueryValue(reviewUrl, "attempt");
+    if (!link || id2 === null) continue;
+    const summary = tableValues(table);
+    const number4 = Number(cleanNodeText(card?.querySelector(".card-title")).match(/\d+/)?.[0] ?? attempts.length + 1);
+    attempts.push({ id: id2, number: number4, status: summary.Status ?? "", started: summary.Started ?? "", completed: summary.Completed ?? "", duration: summary.Duration ?? "", marks: summary.Marks ?? "", grade: summary.Grade ?? "", review_url: reviewUrl });
+  }
+  return attempts;
+}
+function parseQuizReviewHtml(html, attemptId, baseUrl) {
+  const root = (0, import_node_html_parser2.parse)(html);
+  const summary = tableValues(root.querySelector("table.quizreviewsummary"));
+  const form = root.querySelector("form.questionflagsaveform");
+  const url2 = `${baseUrl.replace(/\/$/, "")}/mod/quiz/review.php?attempt=${attemptId}`;
+  return {
+    id: attemptId,
+    quiz_id: numberQueryValue(form?.getAttribute("action") ?? "", "cmid") ?? 0,
+    course_id: parseCourseIdFromPageHtml(html) ?? 0,
+    status: summary.Status ?? "",
+    started: summary.Started ?? "",
+    completed: summary.Completed ?? "",
+    duration: summary.Duration ?? "",
+    marks: summary.Marks ?? "",
+    grade: summary.Grade ?? "",
+    questions: root.querySelectorAll("div.que").map(parseQuizQuestion),
+    url: url2
+  };
+}
+function parseQuizQuestion(que) {
+  const answer = que.querySelector(".answer");
+  const picked = answer?.querySelectorAll("input:checked, input[checked]").map((input3) => {
+    const label = input3.getAttribute("aria-labelledby");
+    return cleanTableCell(label ? que.querySelector(`[id="${label}"]`) : input3.parentNode);
+  }).filter(Boolean) ?? [];
+  const typed = cleanText(que.querySelector('input[type="text"], input[type="number"]')?.getAttribute("value") ?? "");
+  const response = picked.length ? picked.join("; ") : typed || blockText(answer?.querySelector(".qtype_essay_response") ?? answer);
+  return {
+    number: Number(cleanNodeText(que.querySelector(".qno")) || 0),
+    type: que.classList.value[1] ?? "",
+    state: cleanNodeText(que.querySelector(".info .state")),
+    mark: cleanNodeText(que.querySelector(".info .grade")).replace(/^Mark\s+/u, ""),
+    text: blockText(que.querySelector(".qtext")),
+    response: response.replace(/\s*Word count: \d+$/u, ""),
+    correct: blockText(que.querySelector(".rightanswer")).replace(/^The correct answers? (?:is|are):?\s*/iu, "").replace(/^'(.*)'\.?$/u, "$1"),
+    feedback: blockText(que.querySelector(".outcome .feedback"))
+  };
+}
+function blockText(node2) {
+  if (!node2) return "";
+  return cleanTableCell((0, import_node_html_parser2.parse)(node2.toString().replace(/<br\s*\/?>|<\/(?:p|div|li|h\d|tr)>/giu, "$& ")));
+}
+function tableValues(table) {
+  const values = {};
+  for (const row of table?.querySelectorAll("tr") ?? []) {
+    const cells = row.querySelectorAll("th, td");
+    if (cells.length >= 2) values[cleanNodeText(cells[0])] = cleanTableCell(cells[1]);
+  }
+  return values;
+}
 function parseResourceHtml(html, resourceId, baseUrl) {
   const root = (0, import_node_html_parser2.parse)(html);
   const link = root.querySelector(".resourceworkaround a[href], .resourcecontent a[href], a.resourceworkaround[href]");
@@ -27583,12 +27710,12 @@ function parseForumGroupsHtml(html) {
   }
   const groups = [];
   const seen = /* @__PURE__ */ new Set();
-  for (const option of select.querySelectorAll("option")) {
-    const groupId = safeInt(option.getAttribute("value"));
+  for (const option2 of select.querySelectorAll("option")) {
+    const groupId = safeInt(option2.getAttribute("value"));
     if (!groupId) {
       continue;
     }
-    const groupName = cleanNodeText(option);
+    const groupName = cleanNodeText(option2);
     const key = `${groupId}:${groupName}`;
     if (seen.has(key)) {
       continue;
@@ -27608,9 +27735,9 @@ function selectedGroupName(root, groupId) {
     return "";
   }
   for (const selector of ["select[name='groupinfo']", "select[name='group']"]) {
-    const option = root.querySelector(selector)?.querySelector(`option[value='${groupId}']`) ?? null;
-    if (option) {
-      return cleanNodeText(option);
+    const option2 = root.querySelector(selector)?.querySelector(`option[value='${groupId}']`) ?? null;
+    if (option2) {
+      return cleanNodeText(option2);
     }
   }
   return "";
@@ -27726,7 +27853,7 @@ function cleanTableCell(node2) {
     return "";
   }
   const clone2 = (0, import_node_html_parser2.parse)(node2.toString());
-  for (const unwanted of clone2.querySelectorAll(".action-menu, .dropdown, script, style")) {
+  for (const unwanted of clone2.querySelectorAll(".action-menu, .dropdown, .hidden, .accesshide, script, style")) {
     unwanted.remove();
   }
   return cleanText(clone2.textContent.replace("( Empty )", "(Empty)"));
@@ -27864,8 +27991,6 @@ function parseSubmissionForm(html, deps) {
   const repositories = (Array.isArray(picker.repositories) ? picker.repositories : Object.values(record2(picker.repositories))).map(record2);
   const upload = repositories.find((repo) => repo.type === "upload");
   if (!upload || upload.id === void 0) throw deps.fail("The site does not allow direct file uploads for this assignment.");
-  const accepted = options.accepted_types;
-  const acceptedTypes = Array.isArray(accepted) ? accepted.map(String).filter(Boolean) : accepted === void 0 || accepted === "*" ? "*" : [String(accepted)];
   return {
     action: resolveUrl(deps.baseUrl, form.getAttribute("action") || `${deps.baseUrl}${ASSIGN_VIEW_PATH}`),
     fields: fields2,
@@ -27879,7 +28004,7 @@ function parseSubmissionForm(html, deps) {
     maxBytes: integer2(options.maxbytes),
     areaMaxBytes: integer2(options.areamaxbytes),
     maxFiles: integer2(options.maxfiles),
-    acceptedTypes: acceptedTypes.length === 1 && acceptedTypes[0] === "*" ? "*" : acceptedTypes,
+    acceptedTypes: acceptedTypesOf(options.accepted_types),
     ...statementOf(form)
   };
 }
@@ -27944,7 +28069,7 @@ function formFields(form) {
     }
     if (tag === "select") {
       const options = element.querySelectorAll("option");
-      const chosen = options.find((option) => option.hasAttribute("selected")) ?? options[0];
+      const chosen = options.find((option2) => option2.hasAttribute("selected")) ?? options[0];
       if (chosen) fields2.push([name, chosen.getAttribute("value") ?? cleanText(chosen.textContent)]);
       continue;
     }
@@ -27977,6 +28102,11 @@ function filemanagerOptions(html, itemid) {
   }
   return null;
 }
+function acceptedTypesOf(value) {
+  const list2 = Array.isArray(value) ? value : isRecord5(value) ? Object.values(value) : value === void 0 ? [] : [value];
+  const types = list2.map((type) => String(type).trim()).filter(Boolean);
+  return types.length === 0 || types.includes("*") ? "*" : types;
+}
 function balancedObject(text, start) {
   if (text[start] !== "{") return null;
   let depth = 0;
@@ -28118,6 +28248,292 @@ function record2(value) {
   return isRecord5(value) ? value : {};
 }
 
+// src/moodle-quiz-core.ts
+var import_node_html_parser4 = __toESM(require_dist(), 1);
+async function startQuizAttempt(deps, quizId, options = {}) {
+  if (!Number.isSafeInteger(quizId) || quizId <= 0) throw deps.usage("The quiz id must be a positive integer.");
+  const viewUrl = `${deps.baseUrl}${QUIZ_VIEW_PATH}?id=${quizId}`;
+  const viewHtml = await pageText2(deps, viewUrl);
+  const root = (0, import_node_html_parser4.parse)(viewHtml);
+  if (/safeexambrowser|Safe Exam Browser/iu.test(viewHtml)) throw deps.usage("This quiz requires the Safe Exam Browser, which the CLI cannot provide.", "Open it in the browser Moodle asks for.");
+  const resume = formWithAction2(root, QUIZ_ATTEMPT_PATH) ?? root.querySelector(`a[href*="${QUIZ_ATTEMPT_PATH}?"]`);
+  if (resume) {
+    const target = resume.tagName.toLowerCase() === "form" ? `${resolveUrl(deps.baseUrl, resume.getAttribute("action") ?? "")}?${new URLSearchParams(formFields2(resume)).toString()}` : resolveUrl(deps.baseUrl, resume.getAttribute("href") ?? "");
+    const attempt = numberParam(target, "attempt");
+    if (attempt) return getAttemptPage(deps, attempt, quizId, 0);
+  }
+  const start = formWithAction2(root, QUIZ_START_PATH);
+  if (!start) {
+    const reason = cleanText(root.querySelector(".quizattempt, .quizinfo")?.textContent) || "the quiz page shows no attempt button";
+    throw deps.usage(`Moodle offers no new attempt: ${reason}`, `See ${viewUrl}`);
+  }
+  let response = await deps.request(resolveUrl(deps.baseUrl, start.getAttribute("action") ?? ""), postInit(formFields2(start)));
+  let html = await response.text();
+  if (!onPath(response.url, QUIZ_ATTEMPT_PATH)) {
+    const preflight = formWithAction2((0, import_node_html_parser4.parse)(html), QUIZ_START_PATH);
+    if (!preflight) throw deps.fail(`Moodle did not start the attempt: ${noticesOf2(html) || "it returned an unexpected page"}`);
+    const fields2 = [...formFields2(preflight).filter(([name]) => name !== "quizpassword"), ["submitbutton", "Start attempt"]];
+    if (preflight.querySelector("input[name=quizpassword]")) {
+      const password = options.password ? await options.password() : null;
+      if (!password) throw deps.usage("This quiz needs its access password to start.", "Run moodle quiz start again at a terminal to be asked for it, or pass --password.");
+      fields2.push(["quizpassword", password]);
+    }
+    response = await deps.request(resolveUrl(deps.baseUrl, preflight.getAttribute("action") ?? ""), postInit(fields2));
+    html = await response.text();
+    if (!onPath(response.url, QUIZ_ATTEMPT_PATH)) throw deps.fail(`Moodle did not start the attempt: ${noticesOf2(html) || "it returned the pre-flight form again"}`);
+  }
+  return withoutForm(parseAttemptPage(html, response.url, deps));
+}
+async function getAttemptPage(deps, attemptId, quizId, page2) {
+  return withoutForm(await loadAttemptPage(deps, attemptId, quizId, page2));
+}
+async function loadAttemptPage(deps, attemptId, quizId, page2) {
+  const url2 = attemptUrl(deps.baseUrl, attemptId, quizId, page2);
+  const response = await deps.request(url2);
+  const html = await response.text();
+  if (onPath(response.url, QUIZ_REVIEW_PATH)) throw deps.usage(`Attempt ${attemptId} is already finished.`, `Its review is at ${response.url}`);
+  if (!onPath(response.url, QUIZ_ATTEMPT_PATH)) throw deps.fail(`Moodle did not show attempt ${attemptId}: ${noticesOf2(html) || "it redirected elsewhere"}`);
+  return parseAttemptPage(html, response.url, deps);
+}
+function withoutForm({ form: _form, ...page2 }) {
+  return page2;
+}
+async function answerQuizQuestion(deps, request) {
+  const first2 = await loadAttemptPage(deps, request.attemptId, request.quizId, 0);
+  const entry = first2.navigation.find((item) => item.number === request.question.trim());
+  if (!entry) throw deps.usage(`Attempt ${request.attemptId} has no question ${request.question}.`, `Questions: ${first2.navigation.map((item) => item.number).join(", ")}`);
+  const page2 = entry.page === first2.page ? first2 : await loadAttemptPage(deps, request.attemptId, request.quizId, entry.page);
+  const question2 = page2.questions.find((item) => item.slot === entry.slot);
+  if (!question2) throw deps.fail(`Page ${entry.page + 1} does not contain question ${request.question}.`);
+  const fields2 = encodeAnswer(deps, page2.form, question2, request.value);
+  const replay = fields2.map(([name, value]) => name === "nextpage" ? [name, String(page2.page)] : [name, value]);
+  const response = await deps.request(page2.form.action, postInit(replay));
+  const html = await response.text();
+  if (!onPath(response.url, QUIZ_ATTEMPT_PATH)) throw deps.fail(`Moodle did not save the answer: ${noticesOf2(html) || "it left the attempt page"}`);
+  const after = parseAttemptPage(html, response.url, deps);
+  const saved = after.questions.find((item) => item.slot === question2.slot);
+  if (!saved || /not yet answered|not answered/iu.test(saved.state)) throw deps.fail(`Moodle accepted the post but still reports question ${request.question} as "${saved?.state || "missing"}".`);
+  return withoutForm(after);
+}
+async function getAttemptSummary(deps, attemptId, quizId) {
+  const { form: _form, ...summary } = await loadAttemptSummary(deps, attemptId, quizId);
+  return summary;
+}
+async function loadAttemptSummary(deps, attemptId, quizId) {
+  const url2 = `${deps.baseUrl}${QUIZ_SUMMARY_PATH}?attempt=${attemptId}&cmid=${quizId}`;
+  const response = await deps.request(url2);
+  const html = await response.text();
+  if (onPath(response.url, QUIZ_REVIEW_PATH)) throw deps.usage(`Attempt ${attemptId} is already finished.`, `Its review is at ${response.url}`);
+  const root = (0, import_node_html_parser4.parse)(html);
+  const rows = root.querySelectorAll("table.quizsummaryofattempt tbody tr").flatMap((row) => {
+    const cells = row.querySelectorAll("td");
+    if (cells.length < 2) return [];
+    const link = cells[0].querySelector("a")?.getAttribute("href") ?? "";
+    return [{ number: cleanText(cells[0].textContent), state: cleanText(cells[1].textContent), page: numberParam(link, "page") ?? 0 }];
+  });
+  const finish = root.querySelector("form#frm-finishattempt") ?? formWithAction2(root, QUIZ_PROCESS_PATH);
+  if (!finish || !rows.length) throw deps.fail(`Moodle did not show the summary of attempt ${attemptId}: ${noticesOf2(html) || "the page has no finish button"}`);
+  const form = { action: resolveUrl(deps.baseUrl, finish.getAttribute("action") ?? ""), fields: formFields2(finish) };
+  return { attempt: attemptId, quiz_id: quizId, name: pageHeading(root), rows, url: url2, form };
+}
+async function finishQuizAttempt(deps, attemptId, quizId) {
+  const summary = await loadAttemptSummary(deps, attemptId, quizId);
+  const response = await deps.request(summary.form.action, postInit(summary.form.fields));
+  const html = await response.text();
+  const receipt = { attempt: attemptId, quiz_id: quizId, name: summary.name, summary: summary.rows, url: response.url };
+  if (onPath(response.url, QUIZ_REVIEW_PATH)) {
+    receipt.review = parseQuizReviewHtml(html, attemptId, deps.baseUrl);
+    return receipt;
+  }
+  const quiz = parseQuizHtml(onPath(response.url, QUIZ_VIEW_PATH) ? html : await pageText2(deps, `${deps.baseUrl}${QUIZ_VIEW_PATH}?id=${quizId}`), quizId, deps.baseUrl);
+  const row = quiz.attempts.find((attempt) => attempt.id === attemptId);
+  if (row && /in progress/iu.test(row.status)) throw deps.fail(`Moodle accepted the finish request but still lists attempt ${attemptId} as ${row.status}; check the quiz in a browser.`);
+  receipt.url = quiz.url;
+  if (row) {
+    receipt.result = { status: row.status, marks: row.marks, grade: row.grade, completed: row.completed };
+    return receipt;
+  }
+  const probe = await deps.request(attemptUrl(deps.baseUrl, attemptId, quizId, 0));
+  if (onPath(probe.url, QUIZ_ATTEMPT_PATH) && (0, import_node_html_parser4.parse)(await probe.text()).querySelector("form#responseform")) throw deps.fail(`Moodle accepted the finish request but attempt ${attemptId} is still open; check the quiz in a browser.`);
+  return receipt;
+}
+function parseAttemptPage(html, url2, deps) {
+  const root = (0, import_node_html_parser4.parse)(html);
+  const form = root.querySelector("form#responseform");
+  if (!form) throw deps.fail(`Moodle did not render an attempt page: ${noticesOf2(html) || "no response form found"}`);
+  const attempt = numberParam(url2, "attempt") ?? Number(form.querySelector("input[name=attempt]")?.getAttribute("value"));
+  const quizId = numberParam(form.getAttribute("action") ?? "", "cmid") ?? numberParam(url2, "cmid") ?? 0;
+  const page2 = Number(form.querySelector("input[name=thispage]")?.getAttribute("value") ?? numberParam(url2, "page") ?? 0);
+  const navigation = root.querySelectorAll("a.qnbutton").map((button) => {
+    const title = button.getAttribute("title") ?? "";
+    const match = title.match(/^(?:Question|Information)?\s*(\S+)\s*-\s*(.+)$/u);
+    return {
+      slot: Number(button.getAttribute("id")?.replace(/^quiznavbutton/u, "") ?? 0),
+      number: match?.[1] ?? cleanText(button.textContent),
+      page: Number(button.getAttribute("data-quiz-page") ?? 0),
+      state: match?.[2] ?? ""
+    };
+  });
+  const questions = form.querySelectorAll("div.que").map(parseAttemptQuestion);
+  return {
+    attempt,
+    quiz_id: quizId,
+    name: pageHeading(root),
+    page: page2,
+    pages: Math.max(page2 + 1, ...navigation.map((entry) => entry.page + 1)),
+    questions,
+    navigation,
+    url: attemptUrl(deps.baseUrl, attempt, quizId, page2),
+    form: { action: resolveUrl(deps.baseUrl, form.getAttribute("action") ?? ""), fields: formFields2(form) }
+  };
+}
+function parseAttemptQuestion(que) {
+  const slot = Number(que.getAttribute("id")?.split("-").at(-1) ?? 0);
+  const base = {
+    slot,
+    number: cleanText(que.querySelector(".info .qno, .info .no")?.textContent).replace(/^Question\s*/iu, "") || "i",
+    type: que.classList.value[1] ?? "",
+    kind: "unsupported",
+    state: cleanText(que.querySelector(".info .state")?.textContent),
+    text: blockText(que.querySelector(".qtext"))
+  };
+  if (que.classList.contains("description")) return { ...base, number: "i", kind: "info" };
+  const inputs = que.querySelectorAll("input, textarea, select").filter((input3) => {
+    const name = input3.getAttribute("name") ?? "";
+    return name.startsWith("q") && !/_:(?:flagged|sequencecheck)$|_-seen$|_answerformat$/u.test(name) && !/^(?:hidden|submit)$/u.test(input3.getAttribute("type") ?? "");
+  });
+  const tag = (input3) => input3.tagName.toLowerCase();
+  const type = (input3) => tag(input3) === "input" ? (input3.getAttribute("type") ?? "text").toLowerCase() : tag(input3);
+  const isClearChoice = (input3) => type(input3) === "radio" && (input3.closest(".qtype_multichoice_clearchoice") !== null || input3.getAttribute("aria-hidden") === "true");
+  const radios = inputs.filter((input3) => type(input3) === "radio" && !isClearChoice(input3));
+  const boxes = inputs.filter((input3) => type(input3) === "checkbox");
+  const texts = inputs.filter((input3) => ["textarea", "text", "number"].includes(type(input3)));
+  const selects = inputs.filter((input3) => type(input3) === "select");
+  const others = inputs.length - radios.length - boxes.length - texts.length - selects.length - inputs.filter(isClearChoice).length;
+  const radioNames = new Set(radios.map((input3) => input3.getAttribute("name")));
+  const only = (group) => group.length === inputs.length - inputs.filter(isClearChoice).length && others === 0;
+  if (radios.length && radioNames.size === 1 && only(radios)) {
+    return { ...base, kind: "choice", field: radios[0].getAttribute("name"), options: radios.map((input3, index) => option(que, input3, index)) };
+  }
+  if (boxes.length && only(boxes)) return { ...base, kind: "multi", options: boxes.map((input3, index) => option(que, input3, index)) };
+  if (selects.length === 1 && only(selects)) {
+    const select = selects[0];
+    const name = select.getAttribute("name");
+    const choices = select.querySelectorAll("option").filter((item) => (item.getAttribute("value") ?? "") !== "");
+    return { ...base, kind: "choice", field: name, options: choices.map((item, index) => ({ key: String.fromCharCode(97 + index), field: name, value: item.getAttribute("value") ?? "", text: cleanText(item.textContent), chosen: item.hasAttribute("selected") })) };
+  }
+  if (texts.length === 1 && only(texts)) {
+    const text = texts[0];
+    const html = tag(text) === "textarea";
+    return { ...base, kind: "text", field: text.getAttribute("name"), answer: html ? blockText((0, import_node_html_parser4.parse)(text.textContent)) : cleanText(text.getAttribute("value") ?? "") };
+  }
+  return base;
+}
+function option(que, input3, index) {
+  const labelId = input3.getAttribute("aria-labelledby");
+  const id2 = input3.getAttribute("id");
+  const label = (labelId ? que.querySelector(`[id="${labelId}"]`) : null) ?? (id2 ? que.querySelector(`label[for="${id2}"]`) : null) ?? input3.parentNode;
+  const text = blockText(label) || label?.querySelectorAll("img").map((img) => cleanText(img.getAttribute("alt"))).filter(Boolean).join(" ") || "(image; see the quiz in a browser)";
+  return { key: String.fromCharCode(97 + index), field: input3.getAttribute("name") ?? "", value: input3.getAttribute("value") ?? "", text, chosen: input3.hasAttribute("checked") };
+}
+function encodeAnswer(deps, form, question2, value) {
+  const raw = value.trim();
+  if (question2.kind === "info") throw deps.usage(`Question ${question2.number} is an information block; it takes no answer.`);
+  if (question2.kind === "unsupported" || !question2.field && question2.kind !== "multi") throw deps.usage(`Question ${question2.number} is a ${question2.type || "question"} type the CLI cannot answer.`, "Answer it in a browser; other questions can still be answered here.");
+  if (question2.kind === "text") {
+    if (!raw) throw deps.usage(`Question ${question2.number} needs a written answer.`);
+    const format = form.fields.find(([name]) => name === `${question2.field}format`)?.[1];
+    return [...form.fields.filter(([name]) => name !== question2.field), [question2.field, format === "1" ? paragraphs(value) : raw]];
+  }
+  const options = question2.options ?? [];
+  const picks = raw.split(",").map((part) => part.trim()).filter(Boolean).map((part) => {
+    const match = options.find((item) => item.key === part.toLowerCase()) ?? options.find((item) => cleanText(item.text).toLowerCase() === part.toLowerCase());
+    if (!match) throw deps.usage(`Question ${question2.number} has no option '${part}'.`, `Choose from ${options.map((item) => item.key).join(", ")}.`);
+    return match;
+  });
+  if (!picks.length) throw deps.usage(`Question ${question2.number} needs an option letter.`, `Choose from ${options.map((item) => item.key).join(", ")}.`);
+  if (question2.kind === "choice") {
+    if (picks.length > 1) throw deps.usage(`Question ${question2.number} takes one option, not ${picks.length}.`);
+    return [...form.fields.filter(([name]) => name !== question2.field), [question2.field, picks[0].value]];
+  }
+  const chosen = new Set(picks.map((pick2) => pick2.key));
+  const boxNames = new Set(options.map((item) => item.field));
+  return [
+    ...form.fields.filter(([name]) => !boxNames.has(name)),
+    ...options.map((item) => [item.field, chosen.has(item.key) ? "1" : "0"])
+  ];
+}
+function noticesOf2(html) {
+  const root = (0, import_node_html_parser4.parse)(html);
+  const texts = [];
+  for (const node2 of root.querySelectorAll(".alert, .errorbox, .error, #notice")) {
+    for (const junk of node2.querySelectorAll("button, .close")) junk.remove();
+    const text = cleanText(node2.textContent);
+    if (text && !texts.includes(text)) texts.push(text);
+  }
+  return texts.join(" ");
+}
+function formWithAction2(root, path) {
+  return root.querySelectorAll("form").find((form) => onPath(form.getAttribute("action") ?? "", path)) ?? null;
+}
+function formFields2(form) {
+  const fields2 = [];
+  for (const element of form.querySelectorAll("input, textarea, select")) {
+    const name = element.getAttribute("name");
+    if (!name) continue;
+    const tag = element.tagName.toLowerCase();
+    if (tag === "textarea") {
+      fields2.push([name, element.textContent]);
+      continue;
+    }
+    if (tag === "select") {
+      const options = element.querySelectorAll("option");
+      const chosen = options.find((item) => item.hasAttribute("selected")) ?? options[0];
+      if (chosen) fields2.push([name, chosen.getAttribute("value") ?? cleanText(chosen.textContent)]);
+      continue;
+    }
+    const type = (element.getAttribute("type") ?? "text").toLowerCase();
+    if (["submit", "button", "image", "file", "reset"].includes(type)) continue;
+    if ((type === "checkbox" || type === "radio") && !element.hasAttribute("checked")) continue;
+    fields2.push([name, element.getAttribute("value") ?? (type === "checkbox" ? "on" : "")]);
+  }
+  return fields2;
+}
+function postInit(fields2) {
+  return { method: "POST", headers: { "content-type": "application/x-www-form-urlencoded" }, body: new URLSearchParams(fields2).toString() };
+}
+async function pageText2(deps, url2) {
+  return (await deps.request(url2)).text();
+}
+function attemptUrl(baseUrl, attempt, quizId, page2) {
+  return `${baseUrl}${QUIZ_ATTEMPT_PATH}?attempt=${attempt}&cmid=${quizId}${page2 ? `&page=${page2}` : ""}`;
+}
+function pageHeading(root) {
+  const heading = cleanText(root.querySelector(".page-header-headings h1, #page-header h1")?.textContent);
+  if (heading) return heading;
+  const title = cleanText(root.querySelector("title")?.textContent).replace(/\s*\(page \d+ of \d+\)/iu, "").split(" | ")[0].trim();
+  return title || cleanText(root.querySelector("h2")?.textContent);
+}
+function onPath(url2, path) {
+  try {
+    return new URL(url2, "https://moodle.invalid").pathname.endsWith(path);
+  } catch {
+    return false;
+  }
+}
+function numberParam(url2, key) {
+  try {
+    const value = Number(new URL(url2, "https://moodle.invalid").searchParams.get(key));
+    return Number.isSafeInteger(value) && value > 0 ? value : key === "page" && value === 0 ? 0 : null;
+  } catch {
+    return null;
+  }
+}
+function paragraphs(text) {
+  const escaped = text.trim().replace(/&/gu, "&amp;").replace(/</gu, "&lt;").replace(/>/gu, "&gt;");
+  return escaped.split(/\n\s*\n/u).map((block) => `<p>${block.trim().replace(/\n/gu, "<br>")}</p>`).join("");
+}
+
 // src/parsers.ts
 function schema(parser) {
   return { parse: parser };
@@ -29118,6 +29534,10 @@ var MoodleClientCore = class {
   async getQuiz(id2) {
     return parseQuizHtml(await this.get(QUIZ_VIEW_PATH, { id: id2 }), id2, this.baseUrl);
   }
+  async getQuizAttempt(attemptId) {
+    await this.ensureSession();
+    return parseQuizReviewHtml(await this.get(QUIZ_REVIEW_PATH, { attempt: attemptId, showall: 1 }), attemptId, this.baseUrl);
+  }
   async getResource(id2) {
     const url2 = `${this.baseUrl}${RESOURCE_VIEW_PATH}?id=${id2}`;
     const response = await this.requestAbsolute(url2);
@@ -29166,6 +29586,32 @@ var MoodleClientCore = class {
       usage: (message, hint) => this.errors.usage ? this.errors.usage(message, hint) : new MoodleClientCoreError("usage", message, hint)
     }, request);
   }
+  /** Starts a new attempt, or resumes the one already in progress, and returns its first page. */
+  async startQuizAttempt(quizId, options = {}) {
+    return startQuizAttempt(await this.quizDeps(), quizId, options);
+  }
+  async getQuizAttemptPage(attemptId, quizId, page2 = 0) {
+    return getAttemptPage(await this.quizDeps(), attemptId, quizId, page2);
+  }
+  async getQuizAttemptSummary(attemptId, quizId) {
+    return getAttemptSummary(await this.quizDeps(), attemptId, quizId);
+  }
+  async answerQuizQuestion(request) {
+    return answerQuizQuestion(await this.quizDeps(), request);
+  }
+  /** Submits the attempt for grading. Moodle treats this as final. */
+  async finishQuizAttempt(attemptId, quizId) {
+    return finishQuizAttempt(await this.quizDeps(), attemptId, quizId);
+  }
+  async quizDeps() {
+    await this.ensureSession();
+    return {
+      baseUrl: this.baseUrl,
+      request: (url2, init, options) => this.requestAbsolute(url2, init, options),
+      fail: (message, moodleErrorCode) => this.errors.api(message, moodleErrorCode),
+      usage: (message, hint) => this.errors.usage ? this.errors.usage(message, hint) : new MoodleClientCoreError("usage", message, hint)
+    };
+  }
   async getNewsForums(courseId) {
     const units = courseId === void 0 ? await this.getCourses() : (await this.getCourses()).filter((c) => c.id === courseId);
     const forums = [];
@@ -29527,7 +29973,7 @@ function safeUrl(value) {
 }
 
 // src/mcp/gateway.ts
-var import_node_html_parser4 = __toESM(require_dist(), 1);
+var import_node_html_parser5 = __toESM(require_dist(), 1);
 var MAX_MCP_FILE_BYTES = 16 * 1024 * 1024;
 var MoodleGatewayError = class extends Error {
   code;
@@ -29562,6 +30008,7 @@ function createMoodleGateway(client, hooks = {}) {
       return limit2 === void 0 ? activities : activities.slice(0, limit2);
     },
     getActivity: ({ activityId }) => client.getActivity(activityId),
+    ...client.getQuizAttempt ? { getQuizAttempt: (attemptId) => client.getQuizAttempt(attemptId) } : {},
     getGrades: ({ courseId }) => client.getCourseGrades(courseId),
     async listForums({ courseId, limit: limit2 }) {
       const forums = await client.getForums(courseId);
@@ -29602,7 +30049,9 @@ function createMoodleGateway(client, hooks = {}) {
         name,
         mimeType: contentType(response),
         bytes: content.byteLength,
-        uri: publicFileUrl(response.url || target.url),
+        // The Moodle-origin URL, never the post-redirect CDN one: stripping query parameters from
+        // a signed CDN link leaves an address that can only ever answer MissingKey.
+        uri: publicFileUrl(target.url),
         blob: encodeBase64(content)
       };
     }
@@ -29668,7 +30117,7 @@ async function fileFromActivity(client, activityId) {
   return { url: entry.url, name: entry.name };
 }
 function resourceLinks(html, baseUrl) {
-  const root = (0, import_node_html_parser4.parse)(html);
+  const root = (0, import_node_html_parser5.parse)(html);
   const entries = root.querySelectorAll(".resourceworkaround a[href], .resourcecontent a[href], a.resourceworkaround[href]").map((link) => ({
     name: link.textContent.trim(),
     url: new URL(link.getAttribute("href") ?? "", baseUrl).toString()
@@ -29722,7 +30171,7 @@ function isHtml(response) {
   return type.includes("text/html") || type.includes("application/xhtml+xml");
 }
 function looksLikeLoginPage(html) {
-  const root = (0, import_node_html_parser4.parse)(html);
+  const root = (0, import_node_html_parser5.parse)(html);
   return root.querySelector('form[action*="/login/"], input[name="password"], #page-login-index') !== null || /<title>\s*(?:log in|login)/iu.test(html);
 }
 function contentType(response) {
@@ -29786,7 +30235,10 @@ var fields = (keys) => Object.fromEntries(keys.map((key) => [key, s]));
 var file2 = external_exports.object({ name: s, url: s, requires_authentication: external_exports.boolean().optional() });
 var activityFields = { id, name: s, type: s, unit_id: n, section_id: n, hidden: external_exports.boolean().optional(), due: s, due_at: n, files: external_exports.array(file2).optional() };
 var activityListSchema = external_exports.object({ ...activityFields, section: s, unit_code: s, description: s });
-var activitySchema = external_exports.object({ ...activityFields, ...fields(["url", "target_url", "section", "unit_code", "description", "submission_status", "grading_status", "grade", "due_pretty", "opens_pretty", "closes_pretty", "attempts_allowed", "availability", "time_remaining", "content_text"]), files: external_exports.array(file2).optional() });
+var criterion = external_exports.object({ name: s, level: s, score: s, remark: s });
+var attemptSummary = { id, status: s, started: s, completed: s, duration: s, marks: s, grade: s };
+var question = external_exports.object({ number: id, type: s, state: s, mark: s, text: s, response: s, correct: s, feedback: s });
+var activitySchema = external_exports.object({ ...activityFields, ...fields(["url", "target_url", "section", "unit_code", "description", "submission_status", "grading_status", "grade", "graded_on", "graded_by", "feedback_comments", "due_pretty", "opens_pretty", "closes_pretty", "attempts_allowed", "time_limit", "availability", "time_remaining", "content_text"]), criteria: external_exports.array(criterion).optional(), attempts: external_exports.array(external_exports.object({ ...attemptSummary, number: id })).optional(), files: external_exports.array(file2).optional() });
 var sectionSchema = external_exports.object({ id, name: s, activity_count: id, hidden: external_exports.boolean().optional(), positional: external_exports.boolean().optional(), activities: external_exports.array(activityListSchema).optional() });
 var current = external_exports.object({ id, name: s, estimated: external_exports.boolean().optional() });
 var unitSchema = external_exports.object({ id, code: s, name: s, start: s, end: s, start_at: n, end_at: n, hidden: external_exports.boolean().optional(), current_section: current.optional() });
@@ -29800,22 +30252,27 @@ var receiptSchema = external_exports.object({ id, name: s, unit_id: n, url: s, a
 var input2 = (shape) => external_exports.object(shape).strict();
 var list = (key, value) => external_exports.object({ [key]: external_exports.array(value).optional(), total: id });
 var intentContracts = {
-  home: { when: "dashboard", command: "moodle", what: "Today, timezone, due items and unread counts.", instead: "due for longer deadline lists", refs: "days defaults to 14", then: "unit or item", cost: "small dashboard", input: input2({ days: external_exports.number().int().min(1).max(365).default(14) }), output: external_exports.object({ home: external_exports.object({ today: external_exports.string(), timezone: external_exports.string(), timezone_source: s, name: s, siteurl: s, units: external_exports.array(unitSchema).optional(), due: external_exports.array(dueSchema).optional(), total: id, unread: counts.optional(), errors: external_exports.array(external_exports.string()).optional() }) }) },
+  home: { when: "dashboard", command: "moodle", what: "Today's date and timezone, items due soon, unread counts and the current section of each unit.", instead: "due for longer deadline lists", refs: "days defaults to 14", then: "unit or item", cost: "small dashboard", input: input2({ days: external_exports.number().int().min(1).max(365).default(14) }), output: external_exports.object({ home: external_exports.object({ today: external_exports.string(), timezone: external_exports.string(), timezone_source: s, name: s, siteurl: s, units: external_exports.array(unitSchema).optional(), due: external_exports.array(dueSchema).optional(), total: id, unread: counts.optional(), errors: external_exports.array(external_exports.string()).optional() }) }) },
   due: { when: "deadlines", command: "moodle due [UNIT] --days 14", what: "Items due in a date window.", instead: "item for submission details", refs: "unit code, name, id or URL", then: "item with activity_id", cost: "up to 20 rows by default", input: input2({ unit: ref.optional(), days: external_exports.number().int().min(1).max(365).default(14), limit }), output: list("due", dueSchema) },
   units: { when: "unit names", command: "moodle units", what: "Enrolled units with ids, codes and names.", instead: "unit for sections", refs: "none", then: "unit with a name or id", cost: "small list", input: input2({ limit: limit.default(200) }), output: list("units", unitSchema) },
   unit: { when: "a unit or section", command: "moodle UNIT [SECTION]", what: "Section index and current section; section argument returns activities and files.", instead: "find for a named item", refs: "unit code, name, id or URL; section number or name", then: "item or file with activity id", cost: "index about 4 KB; section about 0.5 KB", input: input2({ unit: ref, section: ref.optional() }), output: external_exports.object({ unit: unitSchema, sections: external_exports.array(sectionSchema).optional(), total: id }) },
   find: { when: "find slides or a task", command: 'moodle find "QUERY" [UNIT]', what: "Ranked sections, activities and discussion subjects.", instead: "search_forums for post text; due for deadlines", refs: "query and optional unit code, name, id or URL", then: "item or file with id", cost: "up to 20 rows by default", input: input2({ query: external_exports.string().trim().min(1), unit: ref.optional(), types: external_exports.array(external_exports.string()).optional(), limit }), output: list("results", activityListSchema) },
-  item: { when: "submission or item detail", command: 'moodle UNIT "TASK"', what: "Activity due dates, status, grades, files, or latest forum threads.", instead: "file for binary content", refs: "id, same-site URL, or UNIT TASK phrase", then: "file with id or files URL", cost: "one item", input: input2({ ref }), output: external_exports.object({ item: activitySchema, threads: external_exports.array(external_exports.object({ id, name: s })).optional(), total: n }) },
-  grades: { when: "my grades", command: "moodle grades [UNIT]", what: "Grades across units or in one unit.", instead: "item for submission status", refs: "optional unit code, name, id or URL", then: "item for an ungraded task", cost: "graded_only narrows output", input: input2({ unit: ref.optional(), graded_only: external_exports.boolean().default(false) }), output: list("grades", gradeSchema) },
+  item: { when: "submission or item detail", command: 'moodle UNIT "TASK"', what: "One activity in full: due date, status, grade, marker feedback with rubric or marking-guide rows and feedback files, attached files, quiz attempts, or a forum's latest threads.", instead: "file for binary content; attempt for quiz answers", refs: "id, same-site URL, or UNIT TASK phrase", then: "file with a file id, or attempt with an attempt id", cost: "one item", input: input2({ ref }), output: external_exports.object({ item: activitySchema, threads: external_exports.array(external_exports.object({ id, name: s })).optional(), total: n }) },
+  attempt: { when: "a quiz attempt", command: "moodle attempt ID", what: "Each question with your response, and mark, correct answer and feedback when the site shows them.", instead: "item for the attempt list", refs: "attempt id or review URL", then: "item with quiz_id", cost: "one attempt", input: input2({ attempt: ref }), output: external_exports.object({ attempt: external_exports.object({ ...attemptSummary, quiz_id: n, unit_id: n, url: s, questions: external_exports.array(question).optional() }) }) },
+  grades: { when: "my grades", command: "moodle grades [UNIT]", what: "Gradebook rows across units or in one unit, with grade, range, percentage and grader feedback.", instead: "item for submission status and rubric detail", refs: "optional unit code, name, id or URL", then: "item for an ungraded task", cost: "graded_only narrows output", input: input2({ unit: ref.optional(), graded_only: external_exports.boolean().default(false) }), output: list("grades", gradeSchema) },
   news: { when: "announcements", command: "moodle news [UNIT]", what: "Latest announcement threads with first-post text.", instead: "search_forums for other discussions", refs: "optional unit code, name, id or URL", then: "thread with discussion id", cost: "up to 5 announcements by default", input: input2({ unit: ref.optional(), limit: limit.default(5) }), output: list("news", external_exports.object({ id, name: s, unit_id: id, unit_code: s, forum_id: id, post: postSchema.optional() })) },
   thread: { when: "discussion posts", command: "moodle threads show ID", what: "A discussion and a page of compact posts, with attachment links.", instead: "news for announcements", refs: "discussion_id; offset and limit", then: "increase offset while posts_total exceeds returned", cost: "up to 20 posts by default", input: input2({ discussion_id: external_exports.number().int().positive(), limit, offset: external_exports.number().int().nonnegative().default(0) }), output: external_exports.object({ thread: external_exports.object({ id, name: s, unit_id: id, forum_id: id, url: s, posts: external_exports.array(postSchema).optional(), posts_total: id, offset: id }) }) },
   search_forums: { when: "forum post text", command: 'moodle forums search "QUERY" --unit UNIT', what: "Matching posts with unit and forum name maps.", instead: "find for activity names", refs: "query, optional unit or courseId and forumId", then: "thread with discussion_id", cost: "bounded forum scan; total covers scanned scope", input: input2({ query: external_exports.string().trim().min(1), unit: ref.optional(), courseId: external_exports.number().int().positive().optional(), forumId: external_exports.number().int().positive().optional(), limit, includePostText: external_exports.boolean().default(true), titlesOnly: external_exports.boolean().default(false), unreadOnly: external_exports.boolean().default(false), sortBy: external_exports.enum(["relevance", "recent"]).default("relevance"), maxForums: limit.default(20), maxDiscussionsPerForum: limit.default(50) }), output: external_exports.object({ results: external_exports.array(searchSchema).optional(), total: id, forums: external_exports.record(external_exports.string(), external_exports.string()).optional(), units: external_exports.record(external_exports.string(), external_exports.string()).optional(), scope: external_exports.object({ max_forums: id, max_discussions_per_forum: id }) }) },
   submit: { when: "upload assignment files", command: 'moodle submit "UNIT TASK" FILE... [--final]', what: "Upload local files into an assignment; returns the receipt Moodle shows afterwards.", instead: "item for status only", refs: "assignment id, same-site URL or UNIT TASK phrase; local file paths", then: "dry_run (default) only plans; show the plan to the person, then rerun with dry_run false; final submits for grading and cannot be undone", cost: "writes to Moodle", input: input2({ ref, files: external_exports.array(external_exports.string().trim().min(1)).max(20).default([]), final: external_exports.boolean().default(false), replace: external_exports.boolean().default(false), accept_statement: external_exports.boolean().default(false), dry_run: external_exports.boolean().default(true) }), output: external_exports.object({ submission: receiptSchema }) },
-  file: { when: "download a file", command: 'moodle get "UNIT TASK" --to DIR', what: "One authenticated file as embedded content, at most 16 MiB.", instead: "item for file choices", refs: "resource id, same-site URL, or UNIT TASK phrase", then: "read the returned resource", cost: "binary content up to 16 MiB", input: input2({ ref }), output: external_exports.object({ file: external_exports.object({ name: external_exports.string(), mime_type: external_exports.string(), bytes: id, uri: external_exports.string() }) }) }
+  file: { when: "download a file", command: 'moodle get "UNIT TASK" --to DIR', what: "One authenticated file: an image as image content, anything else as embedded binary, at most 16 MiB.", instead: "item for file choices", refs: "resource id, same-site URL, or UNIT TASK phrase", then: "read the returned image or resource", cost: "binary content up to 16 MiB", input: input2({ ref }), output: external_exports.object({ file: external_exports.object({ name: external_exports.string(), mime_type: external_exports.string(), bytes: id, uri: external_exports.string() }) }) }
 };
 function intentDescription(name) {
   const c = intentContracts[name];
-  return `${c.what} Use when: ${c.when}. Not for: ${c.instead}. Refs: ${c.refs}. Then: ${c.then}. Cost: ${c.cost}.`;
+  const alternatives = c.instead.split("; ").map((rule) => {
+    const [tool, ...purpose] = rule.split(" for ");
+    return `for ${purpose.join(" for ")} call ${tool}`;
+  }).join("; ");
+  return `${c.what} Use it for ${c.when}; ${alternatives}. Input: ${c.refs}. Next: ${c.then}. Cost: ${c.cost}.`;
 }
 
 // src/results.ts
@@ -29975,6 +30432,15 @@ function createIntentService(gateway, now = () => Date.now()) {
         result = { item: { ...itemRow(activity), ...due }, threads: threads?.slice(0, 20).map((t) => ({ id: t.id, name: t.subject })), total: threads?.length };
         break;
       }
+      case "attempt": {
+        if (!gateway.getQuizAttempt) throw new ReferenceError2("not_found", "This gateway cannot read quiz attempts.", []);
+        const raw = String(input3.attempt);
+        const id2 = raw.includes("://") ? Number(new URL(raw).searchParams.get("attempt")) : Number(raw);
+        if (!Number.isInteger(id2) || id2 <= 0) throw new ReferenceError2("not_found", "Use a quiz attempt id or a review URL with ?attempt=.", []);
+        const { course_id, questions, ...attempt } = await gateway.getQuizAttempt(id2);
+        result = { attempt: { ...attempt, unit_id: course_id || void 0, questions } };
+        break;
+      }
       case "home":
       case "due": {
         const data = name === "due" && gateway.getDue ? { user: await user(), courses: await courses(), todo: await gateway.getDue(Number(input3.days)), errors: [] } : await overview(Number(input3.days));
@@ -30141,7 +30607,10 @@ function createMoodleMcpServer(gateway, options = {}) {
             protocolVersion,
             capabilities: { tools: { listChanged: false } },
             serverInfo,
-            instructions: gateway.submitAssignment ? "Access to the authenticated user's Moodle data. Only submit writes; it defaults to a dry run." : "Read-only access to the authenticated user's Moodle data."
+            instructions: [
+              gateway.submitAssignment ? "Access to the authenticated user's Moodle data. Only submit writes; it defaults to a dry run." : "Read-only access to the authenticated user's Moodle data.",
+              ...options.instructions ?? []
+            ].join(" ")
           });
         }
         if (request.method === "ping") {
@@ -30262,6 +30731,9 @@ async function callTool(gateway, params) {
 function toolContent(name, payload, structuredContent) {
   const text = { type: "text", text: JSON.stringify(structuredContent) };
   if (name !== "get_file" || !isMoodleFile(payload)) return [text];
+  if (payload.mimeType.startsWith("image/")) {
+    return [text, { type: "image", data: payload.blob, mimeType: payload.mimeType }];
+  }
   return [
     text,
     {
@@ -30307,6 +30779,40 @@ function isMoodleFile(value) {
   return isRecord8(value) && typeof value.name === "string" && typeof value.mimeType === "string" && typeof value.bytes === "number" && typeof value.uri === "string" && typeof value.blob === "string";
 }
 
+// src/update-core.ts
+var PACKAGE_NAME2 = "moodle-cli";
+var LATEST_VERSION_URL = `https://registry.npmjs.org/-/package/${PACKAGE_NAME2}/dist-tags`;
+var UPDATE_CHECK_TTL_MS = 24 * 60 * 60 * 1e3;
+var UPDATE_RETRY_MS = 60 * 60 * 1e3;
+function compareVersions(a, b) {
+  const [aMain, aPre] = a.split("-", 2);
+  const [bMain, bPre] = b.split("-", 2);
+  const left = aMain.split(".").map(Number);
+  const right = bMain.split(".").map(Number);
+  for (let index = 0; index < Math.max(left.length, right.length); index += 1) {
+    const diff = (left[index] ?? 0) - (right[index] ?? 0);
+    if (diff !== 0) return Math.sign(diff);
+  }
+  if (Boolean(aPre) === Boolean(bPre)) return (aPre ?? "").localeCompare(bPre ?? "");
+  return aPre ? -1 : 1;
+}
+function isNewerVersion(candidate, current2) {
+  return Boolean(candidate) && /^\d+\.\d+\.\d+/u.test(candidate) && compareVersions(candidate, current2) > 0;
+}
+async function fetchLatestVersion(fetchImpl = fetch, timeoutMs = 5e3) {
+  try {
+    const response = await fetchImpl(LATEST_VERSION_URL, { headers: { accept: "application/json" }, signal: AbortSignal.timeout(timeoutMs) });
+    if (!response.ok) return null;
+    const tags = await response.json();
+    return typeof tags.latest === "string" ? tags.latest : null;
+  } catch {
+    return null;
+  }
+}
+function updateHint(current2, latest) {
+  return `moodle-cli ${latest} is available (running ${current2}). Run: moodle update`;
+}
+
 // src/worker/moodle-upstream.ts
 var DASHBOARD_PATH2 = "/my/";
 var AJAX_PATH = "/lib/ajax/service.php";
@@ -30417,6 +30923,7 @@ var DEFAULT_TOUCH_DELAY_MS = 30 * 60 * 1e3;
 var MIN_TOUCH_DELAY_MS = 60 * 1e3;
 var MAX_BACKOFF_MS = 30 * 60 * 1e3;
 var SESSION_STALE_MS = 24 * 60 * 60 * 1e3;
+var LATEST_VERSION_KEY = "latest_version";
 var SESSION_EXPIRING_MS = 15 * 60 * 1e3;
 var SessionBroker = class {
   constructor(state, env, dependencies) {
@@ -30469,7 +30976,10 @@ var SessionBroker = class {
       userid: session.moodle_user_id,
       fetchImpl: this.dependencies.fetchImpl
     });
-    const server = createMoodleMcpServer(createMoodleGateway(client));
+    const initializing = isRecord10(envelope.request) && envelope.request.method === "initialize";
+    const latest = initializing ? await this.latestVersion(true) : void 0;
+    const instructions = latest && isNewerVersion(latest, VERSION) ? [`${updateHint(VERSION, latest)} to redeploy this server.`] : void 0;
+    const server = createMoodleMcpServer(createMoodleGateway(client), { instructions });
     const response = await server.handle(envelope.request, envelope.context);
     return Response.json({ response }, { headers: { "cache-control": "private, no-store" } });
   }
@@ -30480,10 +30990,22 @@ var SessionBroker = class {
       await this.state.storage.setAlarm(this.now() + MAX_BACKOFF_MS);
     }
   }
+  // The Worker can only report a newer release; deploying one needs the owner's
+  // Cloudflare credentials, which stay on their machine.
+  async latestVersion(refresh) {
+    const cached2 = await this.state.storage.get(LATEST_VERSION_KEY);
+    if (cached2 && this.now() - cached2.checked_at < UPDATE_CHECK_TTL_MS) return cached2.latest;
+    if (!refresh) return cached2?.latest;
+    const latest = await fetchLatestVersion(this.dependencies.fetchImpl, 3e3);
+    if (!latest) return cached2?.latest;
+    await this.state.storage.put(LATEST_VERSION_KEY, { latest, checked_at: this.now() });
+    return latest;
+  }
   async ready() {
     const session = await this.loadSession();
     const health = readiness(session, this.now());
-    return Response.json({ ...health, encryptionKeyId: (await this.keyring()).current.id, ...this.env.SESSION_CREDENTIAL_ID ? { credentialId: this.env.SESSION_CREDENTIAL_ID } : {} }, {
+    const latest = await this.latestVersion(false);
+    return Response.json({ ...health, version: VERSION, ...latest ? { latest_version: latest } : {}, encryptionKeyId: (await this.keyring()).current.id, ...this.env.SESSION_CREDENTIAL_ID ? { credentialId: this.env.SESSION_CREDENTIAL_ID } : {} }, {
       status: health.status === "fail" ? 503 : 200,
       headers: { "content-type": "application/health+json; charset=utf-8" }
     });