npm - openlearn-next - Versions diffs - 0.2.1 → 0.2.3 - Mend

openlearn-next 0.2.1 → 0.2.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (10) hide show

package/README.md +2 -0
package/dist/assets/{courseware-BfnpYR-P.js → courseware-Cc-Yy0Ha.js} +1 -1
package/dist/assets/index-CsN5CIqI.css +1 -0
package/dist/assets/{index-zi7zNIte.js → index-D_zAVH7u.js} +101 -101
package/dist/assets/{index.es-S9HBYdjC.js → index.es-CF5dm42F.js} +1 -1
package/dist/assets/{whiteboard-BpCj1CQU.js → whiteboard-jgQrAUm7.js} +45 -14
package/dist/index.html +2 -2
package/dist/server.cjs +180 -34
package/package.json +1 -1
package/dist/assets/index-CaJDJGky.css +0 -1

package/dist/index.html CHANGED Viewed

@@ -15,9 +15,9 @@
       }
     }
     </script>
-    <script type="module" crossorigin src="/assets/index-zi7zNIte.js"></script>
+    <script type="module" crossorigin src="/assets/index-D_zAVH7u.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/vendor-reveal-DcQQzuI9.css">
-    <link rel="stylesheet" crossorigin href="/assets/index-CaJDJGky.css">
+    <link rel="stylesheet" crossorigin href="/assets/index-CsN5CIqI.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/server.cjs CHANGED Viewed

@@ -18418,9 +18418,69 @@ var BRIDGE_SDK_CODE = `(function() {
     } catch (err) {}
   }
+  // \u2500\u2500 Helper: create a safe postMessage wrapper that normalises 'null' \u2192 '*' \u2500\u2500
+  function __makeSafePostMessage(realTarget, label) {
+    return function(message, targetOrigin, transfer) {
+      try {
+        if (message && typeof message === 'object') {
+          if (!message.attempt_id && window.__LMS_STUDENT__?.attempt_id) {
+            message.attempt_id = window.__LMS_STUDENT__.attempt_id;
+          }
+          if (!message.uuid && window.__LMS_COURSEWARE__?.uuid) {
+            message.uuid = window.__LMS_COURSEWARE__.uuid;
+          }
+        }
+      } catch (e) {}
+      var origin = targetOrigin;
+      if (origin === 'null' || origin === null || origin === undefined) {
+        console.warn('[LMS Bridge Notice] Normalized invalid targetOrigin "' + origin + '" to "*" for ' + label);
+        origin = '*';
+      }
+      try {
+        return realTarget.postMessage.call(realTarget, message, origin, transfer);
+      } catch (err) {
+        if (err.name === 'SyntaxError' && origin !== '*') {
+          console.warn('[LMS Bridge Notice] Recovered SyntaxError on ' + label + ', fallback to "*"', err);
+          return realTarget.postMessage.call(realTarget, message, '*', transfer);
+        }
+        throw err;
+      }
+    };
+  }
+  // \u2500\u2500 Helper: create a Proxy wrapper around a cross-origin WindowProxy \u2500\u2500
+  //    This is necessary because sandboxed iframes (without allow-same-origin)
+  //    cannot set properties on cross-origin WindowProxy objects.
+  //    We use Object.defineProperty to shadow window.parent / window.top
+  //    with a Proxy that intercepts the .postMessage() call.
+  function __proxyWindow(realRef, propName) {
+    try {
+      var safePost = __makeSafePostMessage(realRef, propName + '.postMessage');
+      var proxyObj = new Proxy(realRef, {
+        get: function(target, prop) {
+          if (prop === 'postMessage') return safePost;
+          try {
+            var val = target[prop];
+            if (typeof val === 'function') return val.bind(target);
+            return val;
+          } catch (e) { return undefined; }
+        }
+      });
+      Object.defineProperty(window, propName, {
+        get: function() { return proxyObj; },
+        configurable: true
+      });
+    } catch (e) {
+      // Proxy or defineProperty not supported, fall back to direct override attempt
+      try { realRef.postMessage = __makeSafePostMessage(realRef, propName + '.postMessage (fallback)'); } catch (_) {}
+    }
+  }
   // Proxy postMessage calls to enrich them with attempt_id/uuid and normalize targetOrigin
   try {
-    const originalPostMessage = window.postMessage;
+    // 1. Override window.postMessage (self-targeting, always works)
+    var originalPostMessage = window.postMessage;
     window.postMessage = function(message, targetOrigin, transfer) {
       try {
         if (message && typeof message === 'object') {
@@ -18433,49 +18493,67 @@ var BRIDGE_SDK_CODE = `(function() {
         }
       } catch (e) {}
-      let origin = targetOrigin;
-      if (origin === 'null') {
+      var origin = targetOrigin;
+      if (origin === 'null' || origin === null || origin === undefined) {
+        console.warn('[LMS Bridge Notice] Normalized invalid targetOrigin "null" to "*" for postMessage call');
         origin = '*';
       }
       try {
         return originalPostMessage.call(this, message, origin, transfer);
       } catch (err) {
         if (err.name === 'SyntaxError' && origin !== '*') {
+          console.warn('[LMS Bridge Notice] Recovered SyntaxError on postMessage, fallback targetOrigin to "*"', err);
           return originalPostMessage.call(this, message, '*', transfer);
         }
         throw err;
       }
     };
+    // 2. Shadow window.parent with a Proxy that intercepts .postMessage()
     if (window.parent && window.parent !== window) {
-      const parentPostMessage = window.parent.postMessage;
-      try {
-        window.parent.postMessage = function(message, targetOrigin, transfer) {
-          try {
-            if (message && typeof message === 'object') {
-              if (!message.attempt_id && window.__LMS_STUDENT__?.attempt_id) {
-                message.attempt_id = window.__LMS_STUDENT__.attempt_id;
-              }
-              if (!message.uuid && window.__LMS_COURSEWARE__?.uuid) {
-                message.uuid = window.__LMS_COURSEWARE__.uuid;
+      __proxyWindow(window.parent, 'parent');
+    }
+    // 3. Shadow window.top with a Proxy that intercepts .postMessage()
+    try {
+      if (window.top && window.top !== window) {
+        __proxyWindow(window.top, 'top');
+      }
+    } catch (e) {}
+    // 4. Intercept message event listeners to sanitize event.source.postMessage replies
+    var origAddEventListener = window.addEventListener;
+    if (typeof origAddEventListener === 'function') {
+      window.addEventListener = function(type, listener, options) {
+        if (type === 'message' && typeof listener === 'function') {
+          var wrappedListener = function(event) {
+            try {
+              if (event && event.source && typeof event.source.postMessage === 'function') {
+                var origSourcePostMessage = event.source.postMessage;
+                event.source.postMessage = function(msg, targetOrigin, transfer) {
+                  var origin = targetOrigin;
+                  if (origin === 'null' || origin === null) {
+                    console.warn('[LMS Bridge Notice] Normalized invalid targetOrigin "null" to "*" on event.source.postMessage');
+                    origin = '*';
+                  }
+                  try {
+                    return origSourcePostMessage.call(event.source, msg, origin, transfer);
+                  } catch (err) {
+                    if (err.name === 'SyntaxError' && origin !== '*') {
+                      console.warn('[LMS Bridge Notice] Recovered SyntaxError on event.source.postMessage, fallback to "*"', err);
+                      return origSourcePostMessage.call(event.source, msg, '*', transfer);
+                    }
+                    throw err;
+                  }
+                };
               }
-            }
-          } catch (e) {}
-          let origin = targetOrigin;
-          if (origin === 'null') {
-            origin = '*';
-          }
-          try {
-            return parentPostMessage.call(window.parent, message, origin, transfer);
-          } catch (err) {
-            if (err.name === 'SyntaxError' && origin !== '*') {
-              return parentPostMessage.call(window.parent, message, '*', transfer);
-            }
-            throw err;
-          }
-        };
-      } catch (e) {}
+            } catch (e) {}
+            return listener.apply(this, arguments);
+          };
+          return origAddEventListener.call(this, type, wrappedListener, options);
+        }
+        return origAddEventListener.apply(this, arguments);
+      };
     }
   } catch (e) {}
@@ -20001,7 +20079,8 @@ function registerBridgeRoutes(ctx) {
     res.setHeader("Access-Control-Allow-Origin", "*");
     res.send(BRIDGE_SDK_CODE);
   });
-  app.get("/runtime/:uuid", (req, res) => {
+  app.get("/runtime/:uuid", (req, res, next) => {
+    if (req.path.endsWith("/")) return next();
     res.redirect(`/runtime/${req.params.uuid}/`);
   });
   app.get("/runtime/:uuid/*", (req, res) => {
@@ -20061,6 +20140,7 @@ function registerBridgeRoutes(ctx) {
 // server/routes/lessons.ts
 var import_genai3 = require("@google/genai");
+var import_uuid16 = require("uuid");
 function registerLessonsRoutes(ctx) {
   const {
     app,
@@ -20470,6 +20550,72 @@ Provide a short, friendly, and helpful hint (1-2 sentences) directly related to
       res.status(500).json({ error: e.message });
     }
   });
+  app.delete("/api/lessons/:id", async (req, res) => {
+    try {
+      const { id } = req.params;
+      kernelContainer.db.prepare("DELETE FROM whiteboard_elements WHERE lesson_id = ?").run(id);
+      kernelContainer.db.prepare("DELETE FROM student_lesson_progress WHERE lesson_id = ?").run(id);
+      kernelContainer.db.prepare("DELETE FROM schedules WHERE lesson_id = ?").run(id);
+      kernelContainer.db.prepare("DELETE FROM assignments WHERE lesson_id = ?").run(id);
+      const result = kernelContainer.db.prepare("DELETE FROM lessons WHERE id = ?").run(id);
+      if (result.changes === 0) {
+        return res.status(404).json({ error: "Lesson not found" });
+      }
+      res.json({ success: true });
+    } catch (e) {
+      res.status(500).json({ error: e.message });
+    }
+  });
+  app.get("/api/lessons/:id/stats", (req, res) => {
+    try {
+      const { id } = req.params;
+      const whiteboardCount = kernelContainer.db.prepare(
+        "SELECT COUNT(*) as count FROM whiteboard_elements WHERE lesson_id = ?"
+      ).get(id).count;
+      const scheduleCount = kernelContainer.db.prepare(
+        "SELECT COUNT(*) as count FROM schedules WHERE lesson_id = ?"
+      ).get(id).count;
+      const enrollmentCount = kernelContainer.db.prepare(
+        "SELECT COUNT(*) as count FROM student_lesson_progress WHERE lesson_id = ?"
+      ).get(id).count;
+      const assignmentCount = kernelContainer.db.prepare(
+        "SELECT COUNT(*) as count FROM assignments WHERE lesson_id = ?"
+      ).get(id).count;
+      res.json({ whiteboardCount, scheduleCount, enrollmentCount, assignmentCount });
+    } catch (e) {
+      res.status(500).json({ error: e.message });
+    }
+  });
+  app.post("/api/lessons/:id/clone", async (req, res) => {
+    try {
+      const { id } = req.params;
+      const original = kernelContainer.db.prepare("SELECT * FROM lessons WHERE id = ?").get(id);
+      if (!original) {
+        return res.status(404).json({ error: "Lesson not found" });
+      }
+      const newId = (0, import_uuid16.v7)();
+      const now = Date.now();
+      const newTitle = `\u526F\u672C-${original.title}`;
+      kernelContainer.db.prepare(
+        "INSERT INTO lessons (id, title, content, timeline, progress_mode, progress_conditions, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)"
+      ).run(newId, newTitle, original.content, original.timeline, original.progress_mode, original.progress_conditions, now, now);
+      const whiteboardElements = kernelContainer.db.prepare(
+        "SELECT * FROM whiteboard_elements WHERE lesson_id = ?"
+      ).all(id);
+      const insertElement = kernelContainer.db.prepare(
+        "INSERT INTO whiteboard_elements (id, lesson_id, type, data, created_at) VALUES (?, ?, ?, ?, ?)"
+      );
+      for (const el of whiteboardElements) {
+        insertElement.run((0, import_uuid16.v7)(), newId, el.type, el.data, now);
+      }
+      const cloned = kernelContainer.db.prepare(
+        "SELECT l.*, 0 as enrollment_count FROM lessons l WHERE l.id = ?"
+      ).get(newId);
+      res.json({ success: true, lesson: cloned });
+    } catch (e) {
+      res.status(500).json({ error: e.message });
+    }
+  });
 }
 // server/routes/workspace.ts
@@ -22178,9 +22324,9 @@ Provide a grade score (0-100) and brief feedback. Ensure you output in this exac
         } catch (e) {
         }
       }
-      const { v7: uuidv716 } = await import("uuid");
+      const { v7: uuidv717 } = await import("uuid");
       await kernelContainer.commandBus.execute({
-        id: uuidv716(),
+        id: uuidv717(),
         type: "ai.apply_grade",
         actorId: "system",
         timestamp: Date.now(),
@@ -23877,7 +24023,7 @@ async function startServer() {
         imgSrc: ["'self'", "data:", "blob:", "https:"],
         connectSrc: ["'self'", "ws:", "wss:", "https:"],
         fontSrc: ["'self'", "data:", "https:", "https://fonts.gstatic.com"],
-        frameSrc: ["'self'"],
+        frameSrc: ["'self'", "blob:", "data:", "http://localhost", "http://127.0.0.1", "http:", "https:"],
         objectSrc: ["'none'"]
       }
     },

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "openlearn-next",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "private": false,
   "description": "A plugin-driven Educational OS / LMS platform with AI agent teaching assistant",
   "keywords": [