tessera-learn 0.0.13 → 0.1.0

package/dist/{validation-B-xTvM9B.js → audit-CzKAXy3Y.js}

@@ -1,6 +1,205 @@
 import { basename, extname, relative, resolve } from "node:path";
-import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
+import { existsSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
 import JSON5 from "json5";
+import { Parser } from "acorn";
+import { tsPlugin } from "@sveltejs/acorn-typescript";
+import { parse } from "svelte/compiler";
+//#region src/plugin/ast.ts
+const rootCache = /* @__PURE__ */ new Map();
+/** Drop every cached root. Call at the start of a run to scope the cache. */
+function clearParseCache() {
+	rootCache.clear();
+}
+function parseRoot(source) {
+	const cached = rootCache.get(source);
+	if (cached !== void 0) return cached;
+	let entry;
+	try {
+		entry = {
+			root: parse(source, { modern: true }),
+			error: null
+		};
+	} catch (error) {
+		entry = {
+			root: null,
+			error: (error instanceof Error ? error.message : String(error)).split("\n")[0].trim() || "parse error"
+		};
+	}
+	rootCache.set(source, entry);
+	return entry;
+}
+function collectComponents(root, names) {
+	const found = [];
+	const seen = /* @__PURE__ */ new Set();
+	const walk = (value) => {
+		if (!value || typeof value !== "object") return;
+		if (seen.has(value)) return;
+		seen.add(value);
+		if (Array.isArray(value)) {
+			for (const item of value) walk(item);
+			return;
+		}
+		const node = value;
+		if (node.type === "Component" && names.has(node.name)) found.push(node);
+		for (const key of Object.keys(node)) {
+			if (key === "type") continue;
+			walk(node[key]);
+		}
+	};
+	walk(root);
+	return found.sort((a, b) => a.start - b.start);
+}
+function readProps(source, node) {
+	const props = /* @__PURE__ */ new Map();
+	let hasSpread = false;
+	const attributes = node.attributes ?? [];
+	for (const attr of attributes) {
+		if (attr.type === "SpreadAttribute") {
+			hasSpread = true;
+			continue;
+		}
+		if (attr.type === "BindDirective") {
+			const expr = attr.expression;
+			if (expr) props.set(attr.name, {
+				kind: "expr",
+				raw: source.slice(expr.start, expr.end).trim()
+			});
+			continue;
+		}
+		if (attr.type !== "Attribute") continue;
+		const name = attr.name;
+		const value = attr.value;
+		if (value === true) props.set(name, { kind: "bool" });
+		else if (Array.isArray(value)) if (value.length === 0) props.set(name, {
+			kind: "string",
+			value: ""
+		});
+		else {
+			const first = value[0];
+			const last = value[value.length - 1];
+			props.set(name, {
+				kind: "string",
+				value: source.slice(first.start, last.end)
+			});
+		}
+		else if (value && typeof value === "object" && value.type === "ExpressionTag") {
+			const expr = value.expression;
+			props.set(name, {
+				kind: "expr",
+				raw: source.slice(expr.start, expr.end).trim()
+			});
+			if (source[attr.start] === "{") hasSpread = true;
+		}
+	}
+	return {
+		name: node.name,
+		props,
+		hasSpread
+	};
+}
+/**
+* Return a one-line message if `source` is not valid Svelte, else null. Lets
+* the validator surface a real syntax error itself rather than only failing
+* later in the compiler (and the compile-less CLI would otherwise miss it).
+*/
+function getParseError(source) {
+	return parseRoot(source).error;
+}
+/**
+* Find every question/media component in a `.svelte` source, anywhere in the
+* markup, with its props. Returns null if the source can't be parsed — callers
+* then skip component validation, matching the old "skip when unsure" stance.
+*/
+function findComponents(source, names) {
+	const { root } = parseRoot(source);
+	if (!root) return null;
+	return collectComponents(root, names).map((node) => readProps(source, node));
+}
+const TsParser = Parser.extend(tsPlugin());
+function parseJsModule(source) {
+	try {
+		return TsParser.parse(source, {
+			ecmaVersion: "latest",
+			sourceType: "module"
+		});
+	} catch {
+		return null;
+	}
+}
+function unwrapTsCast(node) {
+	let current = node;
+	while (current && (current.type === "TSAsExpression" || current.type === "TSSatisfiesExpression" || current.type === "TSTypeAssertion" || current.type === "TSNonNullExpression")) current = current.expression ?? null;
+	return current;
+}
+function findPageConfigInProgram(program, source) {
+	const body = program.body ?? [];
+	for (const node of body) {
+		if (node.type !== "ExportNamedDeclaration") continue;
+		const declaration = node.declaration;
+		if (!declaration || declaration.type !== "VariableDeclaration") continue;
+		for (const decl of declaration.declarations) {
+			const id = decl.id;
+			if (id.type !== "Identifier" || id.name !== "pageConfig") continue;
+			const init = unwrapTsCast(decl.init);
+			if (init && init.type === "ObjectExpression") return {
+				kind: "literal",
+				text: source.slice(init.start, init.end)
+			};
+			return { kind: "invalid" };
+		}
+	}
+	return { kind: "none" };
+}
+/**
+* Locate the `export default { ... }` object literal in a plain JS source.
+* Returns a discriminated result so callers can tell parse failure from a
+* missing or non-literal default export.
+*/
+function defaultExportObjectLiteral(jsSource) {
+	const program = parseJsModule(jsSource);
+	if (!program) return { kind: "parse-error" };
+	for (const node of program.body ?? []) {
+		if (node.type !== "ExportDefaultDeclaration") continue;
+		const decl = unwrapTsCast(node.declaration ?? null);
+		if (decl && decl.type === "ObjectExpression") return {
+			kind: "literal",
+			text: jsSource.slice(decl.start, decl.end)
+		};
+		return { kind: "invalid" };
+	}
+	return { kind: "none" };
+}
+const MODULE_SCRIPT_OPEN_RE = /<script\s+(?:context\s*=\s*["']module["']|module)[^>]*>/;
+const SCRIPT_CLOSE = "<\/script>";
+function pageConfigFromModuleScriptFallback(svelteSource) {
+	const open = svelteSource.match(MODULE_SCRIPT_OPEN_RE);
+	if (!open || open.index === void 0) return { kind: "none" };
+	const bodyStart = open.index + open[0].length;
+	let from = bodyStart;
+	while (true) {
+		const closeIdx = svelteSource.indexOf(SCRIPT_CLOSE, from);
+		if (closeIdx < 0) return { kind: "none" };
+		const body = svelteSource.slice(bodyStart, closeIdx);
+		const program = parseJsModule(body);
+		if (program) return findPageConfigInProgram(program, body);
+		from = closeIdx + 9;
+	}
+}
+/**
+* Locate `export const pageConfig = { ... }` in a Svelte page's module script
+* and return the object-literal text. Walks the page-level AST so TypeScript
+* (`lang="ts"`) module scripts are handled by Svelte's own parser.
+*/
+function pageConfigLiteral(svelteSource) {
+	const { root } = parseRoot(svelteSource);
+	if (root) {
+		const program = root.module?.content;
+		if (!program) return { kind: "none" };
+		return findPageConfigInProgram(program, svelteSource);
+	}
+	return pageConfigFromModuleScriptFallback(svelteSource);
+}
+//#endregion
 //#region src/plugin/manifest.ts
 /** Append `.svelte` if not already present. Both bare and suffixed names are accepted in author config. */
 function ensureSvelteSuffix(name) {
@@ -38,23 +237,14 @@ function deriveSlug(name, isFile = false) {
 	if (isFile) return basename(name, extname(name));
 	return stripPrefix(name);
 }
-/** Matches both Svelte 5 `<script module>` and legacy `<script context="module">`. */
-const MODULE_SCRIPT_RE = /<script\s+(?:context\s*=\s*["']module["']|module)[^>]*>([\s\S]*?)<\/script>/;
-/** Matches `export const pageConfig =` (RHS is read separately). */
-const PAGE_CONFIG_EXPORT_RE = /export\s+const\s+pageConfig\s*=\s*/;
-/** Matches `export default ` (RHS is read separately). */
-const DEFAULT_EXPORT_RE = /export\s+default\s*/;
 /**
-* Locate `export default { ... }` and return the object literal substring,
-* or null if no balanced object literal follows the `export default` keyword.
-* Used by both manifest extraction and project validation.
+* Locate `export default { ... }` and return its object-literal text. Returns
+* a discriminated result so callers can tell parse failure from a missing or
+* non-literal default export. Used by both manifest extraction and project
+* validation.
 */
 function extractDefaultExportObjectLiteral(source) {
-	const match = source.match(DEFAULT_EXPORT_RE);
-	if (!match || match.index === void 0) return null;
-	const startIndex = source.indexOf("{", match.index);
-	if (startIndex < 0) return null;
-	return extractObjectLiteral(source, startIndex);
+	return defaultExportObjectLiteral(source);
 }
 /**
 * Read and JSON5-parse the `export default { ... }` literal from a project's
@@ -69,15 +259,19 @@ function readCourseConfig(projectRoot) {
 		ok: false,
 		reason: "missing"
 	};
-	const objectStr = extractDefaultExportObjectLiteral(readSourceFileCached(configPath));
-	if (!objectStr) return {
+	const result = extractDefaultExportObjectLiteral(readSourceFileCached(configPath));
+	if (result.kind === "parse-error") return {
+		ok: false,
+		reason: "parse-error"
+	};
+	if (result.kind !== "literal") return {
 		ok: false,
 		reason: "no-export"
 	};
 	try {
 		return {
 			ok: true,
-			config: JSON5.parse(objectStr)
+			config: JSON5.parse(result.text)
 		};
 	} catch (error) {
 		return {
@@ -94,30 +288,23 @@ function readCourseConfig(projectRoot) {
 */
 function readMetaFile(metaPath) {
 	if (!existsSync(metaPath)) return {};
-	const objectStr = extractDefaultExportObjectLiteral(readSourceFileCached(metaPath));
-	if (!objectStr) return {};
+	const result = extractDefaultExportObjectLiteral(readSourceFileCached(metaPath));
+	if (result.kind !== "literal") return {};
 	try {
-		return JSON5.parse(objectStr);
+		return JSON5.parse(result.text);
 	} catch {
 		return {};
 	}
 }
 /** Source-level pageConfig extraction shared by manifest generation and build-time validation. */
 function parsePageConfigFromSource(content) {
-	const moduleScriptMatch = content.match(MODULE_SCRIPT_RE);
-	if (!moduleScriptMatch) return { kind: "none" };
-	const scriptContent = moduleScriptMatch[1];
-	const configMatch = scriptContent.match(PAGE_CONFIG_EXPORT_RE);
-	if (!configMatch || configMatch.index === void 0) return { kind: "none" };
-	if (!scriptContent.slice(configMatch.index + configMatch[0].length).trimStart().startsWith("{")) return { kind: "invalid" };
-	const startIndex = scriptContent.indexOf("{", configMatch.index + configMatch[0].length);
-	if (startIndex < 0) return { kind: "invalid" };
-	const objectStr = extractObjectLiteral(scriptContent, startIndex);
-	if (!objectStr) return { kind: "invalid" };
+	const literal = pageConfigLiteral(content);
+	if (literal.kind === "none") return { kind: "none" };
+	if (literal.kind === "invalid") return { kind: "invalid" };
 	try {
 		return {
 			kind: "ok",
-			value: JSON5.parse(objectStr)
+			value: JSON5.parse(literal.text)
 		};
 	} catch {
 		return { kind: "invalid" };
@@ -131,54 +318,6 @@ function extractPageConfig(filePath) {
 	return {};
 }
 /**
-* Extract a balanced `{...}` or `[...]` span starting at the opening bracket,
-* skipping strings and comments. Returns the substring (inclusive) or null if
-* the open char is wrong or no matching close is found. Shared by manifest
-* extraction, _meta/pageConfig parsing, and the validator's tag-prop parser.
-*/
-function extractObjectLiteral(source, startIndex) {
-	const open = source[startIndex];
-	if (open !== "{" && open !== "[") return null;
-	let depth = 0;
-	let inString = null;
-	let escaped = false;
-	for (let i = startIndex; i < source.length; i++) {
-		const char = source[i];
-		if (escaped) {
-			escaped = false;
-			continue;
-		}
-		if (char === "\\" && inString) {
-			escaped = true;
-			continue;
-		}
-		if (inString) {
-			if (char === inString) inString = null;
-			continue;
-		}
-		if (char === "\"" || char === "'" || char === "`") {
-			inString = char;
-			continue;
-		}
-		if (char === "/" && i + 1 < source.length && source[i + 1] === "/") {
-			const newline = source.indexOf("\n", i);
-			i = newline === -1 ? source.length : newline;
-			continue;
-		}
-		if (char === "/" && i + 1 < source.length && source[i + 1] === "*") {
-			const end = source.indexOf("*/", i + 2);
-			i = end === -1 ? source.length : end + 1;
-			continue;
-		}
-		if (char === "{" || char === "[") depth++;
-		if (char === "}" || char === "]") {
-			depth--;
-			if (depth === 0) return source.slice(startIndex, i + 1);
-		}
-	}
-	return null;
-}
-/**
 * Get sorted subdirectories of a given path.
 */
 function getSortedDirs(dirPath) {
@@ -195,35 +334,70 @@ function getSvelteFiles(dirPath) {
 	return readdirSync(dirPath).filter((name) => name.endsWith(".svelte")).sort();
 }
 /**
+* Enumerate the course's section → lesson → file structure. Section-level
+* `.svelte` files become an implicit flat lesson (`name: null`) ordered before
+* the section's explicit lesson directories. Shared by manifest generation and
+* build-time validation so the two never disagree on which files are pages.
+*/
+function walkPages(pagesDir) {
+	const sections = [];
+	for (const sectionName of getSortedDirs(pagesDir)) {
+		const dir = resolve(pagesDir, sectionName);
+		const metaPath = resolve(dir, "_meta.js");
+		const lessons = [];
+		const flatFiles = getSvelteFiles(dir);
+		if (flatFiles.length > 0) lessons.push({
+			name: null,
+			dir,
+			metaPath,
+			files: flatFiles
+		});
+		for (const lessonName of getSortedDirs(dir)) {
+			const lessonDir = resolve(dir, lessonName);
+			lessons.push({
+				name: lessonName,
+				dir: lessonDir,
+				metaPath: resolve(lessonDir, "_meta.js"),
+				files: getSvelteFiles(lessonDir)
+			});
+		}
+		sections.push({
+			name: sectionName,
+			dir,
+			metaPath,
+			lessons
+		});
+	}
+	return sections;
+}
+/**
 * Generate a course manifest by scanning the pages/ directory.
 */
 function generateManifest(pagesDir) {
+	clearParseCache();
 	const sections = [];
 	const flatPages = [];
 	let pageIndex = 0;
-	const sectionDirs = getSortedDirs(pagesDir);
-	for (const sectionName of sectionDirs) {
-		const sectionPath = resolve(pagesDir, sectionName);
-		const sectionMeta = readMetaFile(resolve(sectionPath, "_meta.js"));
-		const sectionSlug = deriveSlug(sectionName);
+	for (const walkedSection of walkPages(pagesDir)) {
+		const sectionMeta = readMetaFile(walkedSection.metaPath);
+		const sectionSlug = deriveSlug(walkedSection.name);
 		const section = {
 			title: sectionMeta.title || titleCase(sectionSlug),
 			slug: sectionSlug,
 			lessons: []
 		};
-		const lessonDirs = getSortedDirs(sectionPath);
-		for (const lessonName of lessonDirs) {
-			const lessonPath = resolve(sectionPath, lessonName);
-			const lessonMeta = readMetaFile(resolve(lessonPath, "_meta.js"));
-			const lessonSlug = deriveSlug(lessonName);
+		for (const walkedLesson of walkedSection.lessons) {
+			const isFlat = walkedLesson.name === null;
+			const lessonMeta = isFlat ? sectionMeta : readMetaFile(walkedLesson.metaPath);
+			const lessonSlug = isFlat ? sectionSlug : deriveSlug(walkedLesson.name);
+			const relDir = isFlat ? `/pages/${walkedSection.name}` : `/pages/${walkedSection.name}/${walkedLesson.name}`;
 			const lesson = {
-				title: lessonMeta.title || titleCase(lessonSlug),
+				title: isFlat ? "" : lessonMeta.title || titleCase(lessonSlug),
 				slug: lessonSlug,
 				pages: []
 			};
-			const orderedFiles = orderPageFiles(getSvelteFiles(lessonPath), lessonMeta.pages);
-			for (const fileName of orderedFiles) {
-				const filePath = resolve(lessonPath, fileName);
+			for (const fileName of orderPageFiles(walkedLesson.files, lessonMeta.pages)) {
+				const filePath = resolve(walkedLesson.dir, fileName);
 				const pageSlug = deriveSlug(fileName, true);
 				let pageConfig = {};
 				try {
@@ -231,12 +405,11 @@ function generateManifest(pagesDir) {
 				} catch (e) {
 					console.warn(`[tessera warning] ${e.message}`);
 				}
-				const relativePath = `/pages/${sectionName}/${lessonName}/${fileName}`;
 				const page = {
 					index: pageIndex,
 					title: pageConfig.title || titleCase(pageSlug),
 					slug: pageSlug,
-					importPath: relativePath,
+					importPath: `${relDir}/${fileName}`,
 					quiz: pageConfig.quiz || null,
 					...pageConfig.completesOn === "view" ? { completesOn: "view" } : {}
 				};
@@ -336,6 +509,21 @@ function validateAuthCredential(auth) {
 	return null;
 }
 //#endregion
+//#region src/runtime/xapi/derive-actor.ts
+/**
+* Origin of an http(s) URL, else null. Shared with the config validator, which
+* predicts this result to know when `actorAccountHomePage` becomes required —
+* one helper keeps the two in lockstep.
+*/
+function httpOrigin(url) {
+	try {
+		const parsed = new URL(url);
+		return parsed.protocol === "http:" || parsed.protocol === "https:" ? parsed.origin : null;
+	} catch {
+		return null;
+	}
+}
+//#endregion
 //#region src/runtime/interaction-format.ts
 /**
 * SCORM `short_identifier_type` / `CMIIdentifier`: alphanumerics +
@@ -554,6 +742,7 @@ const VALID_RETRY_MODES = RETRY_MODES;
 * Returns errors (block build) and warnings (informational).
 */
 function validateProject(projectRoot) {
+	clearParseCache();
 	const errors = [];
 	const warnings = [];
 	if (!existsSync(resolve(projectRoot, "course.config.js"))) {
@@ -582,8 +771,8 @@ function validateProject(projectRoot) {
 function parseConfig(projectRoot, errors, warnings) {
 	const read = readCourseConfig(projectRoot);
 	if (!read.ok) {
-		if (read.reason === "no-export") errors.push("course.config.js: could not parse — must use `export default { ... }` syntax");
-		else if (read.reason === "parse-error") errors.push("course.config.js: syntax error — must export a static object literal");
+		if (read.reason === "no-export") errors.push("course.config.js: must use `export default { ... }` syntax");
+		else if (read.reason === "parse-error") errors.push("course.config.js: could not parse — JavaScript syntax error");
 		return null;
 	}
 	const config = read.config;
@@ -635,9 +824,12 @@ function isPlausibleColor(value) {
 * on primaryColor. Runtime failures are mild: an unresolved logo ships a broken
 * <img src>, an unparseable color falls back to theme defaults.
 */
+function describeType(raw) {
+	return raw === null ? "null" : Array.isArray(raw) ? "array" : typeof raw;
+}
 function validateBranding(raw, warnings) {
 	if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
-		warnings.push(`course.config.js: "branding" must be an object, got ${raw === null ? "null" : Array.isArray(raw) ? "array" : typeof raw} — will be ignored`);
+		warnings.push(`course.config.js: "branding" must be an object, got ${describeType(raw)} — will be ignored`);
 		return;
 	}
 	const branding = raw;
@@ -659,7 +851,7 @@ function validateBranding(raw, warnings) {
 /** Shape-check the `a11y` block. Malformed values can't be silenced by `ignore`. */
 function validateA11yConfig(raw, errors) {
 	if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
-		errors.push(`course.config.js: "a11y" must be an object, got ${raw === null ? "null" : Array.isArray(raw) ? "array" : typeof raw}`);
+		errors.push(`course.config.js: "a11y" must be an object, got ${describeType(raw)}`);
 		return;
 	}
 	const a11y = raw;
@@ -766,16 +958,7 @@ function validateSingleXAPIEntry(entry, label, standard, errors, warnings) {
 		if (actor !== void 0) warnings.push(`course.config.js: ${label}.actorAccountHomePage is ignored when ${label}.actor is supplied explicitly.`);
 		if (standard === "cmi5" || standard === "web") warnings.push(`course.config.js: ${label}.actorAccountHomePage is only used under scorm12/scorm2004 actor synthesis; ignored under "${standard}".`);
 	}
-	if (actor === void 0 && (standard === "scorm12" || standard === "scorm2004") && typeof activityId === "string") {
-		let isHttp;
-		try {
-			const u = new URL(activityId);
-			isHttp = u.protocol === "http:" || u.protocol === "https:";
-		} catch {
-			isHttp = false;
-		}
-		if (!isHttp && aahp === void 0) errors.push(`course.config.js: ${label}.activityId is not an http(s) URL, so its origin can't be used as the SCORM actor's account.homePage. Provide ${label}.actorAccountHomePage explicitly.`);
-	}
+	if (actor === void 0 && (standard === "scorm12" || standard === "scorm2004") && typeof activityId === "string" && httpOrigin(activityId) === null && aahp === void 0) errors.push(`course.config.js: ${label}.activityId is not an http(s) URL, so its origin can't be used as the SCORM actor's account.homePage. Provide ${label}.actorAccountHomePage explicitly.`);
 	const registration = entry.registration;
 	if (registration !== void 0) {
 		if (typeof registration !== "string" || !UUID_RE.test(registration)) errors.push(`course.config.js: ${label}.registration must be a UUID v4, got "${String(registration)}"`);
@@ -790,6 +973,22 @@ function validateSingleXAPIEntry(entry, label, standard, errors, warnings) {
 function validatePageFile(filePath, projectRoot, assetsDir, navIndex, errors, warnings, assetExistsCache, exportStandard) {
 	const fileRel = relative(projectRoot, filePath);
 	const content = readSourceFileCached(filePath);
+	const parseError = getParseError(content);
+	if (parseError) {
+		errors.push(`${fileRel}: could not parse — ${parseError}`);
+		return {
+			page: {
+				fileRel,
+				navIndex,
+				hasGradedQuiz: false,
+				hasQuiz: false,
+				completesOnView: false
+			},
+			isQuiz: false,
+			isGradedQuiz: false,
+			parseError: true
+		};
+	}
 	const pageConfig = validatePageConfig(content, fileRel, errors);
 	const isQuiz = !!pageConfig?.quiz;
 	let isGradedQuiz = false;
@@ -813,7 +1012,8 @@ function validatePageFile(filePath, projectRoot, assetsDir, navIndex, errors, wa
 			completesOnView
 		},
 		isQuiz,
-		isGradedQuiz
+		isGradedQuiz,
+		parseError: false
 	};
 }
 function validatePages(pagesDir, assetsDir, projectRoot, exportStandard) {
@@ -823,117 +1023,79 @@ function validatePages(pagesDir, assetsDir, projectRoot, exportStandard) {
 	let totalPages = 0;
 	let totalQuizzes = 0;
 	let hasGradedQuiz = false;
+	let hasParseErrors = false;
 	const assetExistsCache = /* @__PURE__ */ new Map();
-	if (!existsSync(pagesDir)) {
+	const noPages = () => {
 		errors.push("No pages found. Create at least one section with a lesson and page in pages/");
 		return {
 			errors,
 			warnings,
-			totalPages: 0,
-			totalQuizzes: 0,
-			hasGradedQuiz: false,
+			totalPages,
+			totalQuizzes,
+			hasGradedQuiz,
+			hasParseErrors,
 			pages
 		};
-	}
-	const topLevelEntries = readdirSync(pagesDir);
-	for (const entry of topLevelEntries) {
+	};
+	if (!existsSync(pagesDir)) return noPages();
+	for (const entry of readdirSync(pagesDir)) {
 		const fullPath = resolve(pagesDir, entry);
-		if (entry.endsWith(".svelte") && statSync(fullPath).isFile()) {
-			const relPath = relative(projectRoot, fullPath);
-			warnings.push(`${relPath}: this file is outside the section/lesson structure and will be ignored`);
-		}
+		if (entry.endsWith(".svelte") && statSync(fullPath).isFile()) warnings.push(`${relative(projectRoot, fullPath)}: this file is outside the section/lesson structure and will be ignored`);
 	}
-	const sectionDirs = topLevelEntries.filter((name) => {
-		return statSync(resolve(pagesDir, name)).isDirectory() && !name.startsWith(".");
-	}).sort();
-	if (sectionDirs.length === 0) {
-		errors.push("No pages found. Create at least one section with a lesson and page in pages/");
-		return {
-			errors,
-			warnings,
-			totalPages: 0,
-			totalQuizzes: 0,
-			hasGradedQuiz: false,
-			pages
-		};
-	}
-	for (const sectionName of sectionDirs) {
-		const sectionPath = resolve(pagesDir, sectionName);
-		const sectionRel = relative(projectRoot, sectionPath);
-		const pagesBeforeSection = totalPages;
-		const sectionMeta = validateMetaFile(resolve(sectionPath, "_meta.js"), sectionRel, errors);
-		const sectionEntries = readdirSync(sectionPath);
-		const sectionSvelteFiles = sectionEntries.filter((name) => {
-			const full = resolve(sectionPath, name);
-			return name.endsWith(".svelte") && statSync(full).isFile();
-		}).sort();
-		if (sectionMeta?.pages) for (const pageName of sectionMeta.pages) {
+	const sections = walkPages(pagesDir);
+	if (sections.length === 0) return noPages();
+	const validateLesson = (lesson, meta) => {
+		if (meta?.pages) for (const pageName of meta.pages) {
 			const fileName = ensureSvelteSuffix(pageName);
-			if (!sectionSvelteFiles.includes(fileName)) {
-				const metaRel = relative(projectRoot, resolve(sectionPath, "_meta.js"));
-				errors.push(`${metaRel}: pages array lists "${pageName}" but ${fileName} not found in this directory`);
-			}
+			if (!lesson.files.includes(fileName)) errors.push(`${relative(projectRoot, lesson.metaPath)}: pages array lists "${pageName}" but ${fileName} not found in this directory`);
 		}
-		for (const fileName of sectionSvelteFiles) {
-			const result = validatePageFile(resolve(sectionPath, fileName), projectRoot, assetsDir, totalPages, errors, warnings, assetExistsCache, exportStandard);
+		if (meta?.pages && meta.pages.length > 0) {
+			const listedSet = new Set(meta.pages.map(ensureSvelteSuffix));
+			for (const file of lesson.files) if (!listedSet.has(file)) warnings.push(`${relative(projectRoot, resolve(lesson.dir, file))}: not listed in _meta.js pages array — will be appended at end`);
+		}
+		for (const fileName of orderPageFiles(lesson.files, meta?.pages)) {
+			const result = validatePageFile(resolve(lesson.dir, fileName), projectRoot, assetsDir, totalPages, errors, warnings, assetExistsCache, exportStandard);
 			totalPages++;
 			if (result.isQuiz) totalQuizzes++;
 			if (result.isGradedQuiz) hasGradedQuiz = true;
+			if (result.parseError) hasParseErrors = true;
 			pages.push(result.page);
 		}
-		const lessonDirs = sectionEntries.filter((name) => {
-			return statSync(resolve(sectionPath, name)).isDirectory() && !name.startsWith(".");
-		}).sort();
-		for (const lessonName of lessonDirs) {
-			const lessonPath = resolve(sectionPath, lessonName);
-			const lessonRel = relative(projectRoot, lessonPath);
-			const meta = validateMetaFile(resolve(lessonPath, "_meta.js"), lessonRel, errors);
-			const svelteFiles = readdirSync(lessonPath).filter((name) => name.endsWith(".svelte")).sort();
-			if (meta?.pages) for (const pageName of meta.pages) {
-				const fileName = ensureSvelteSuffix(pageName);
-				if (!svelteFiles.includes(fileName)) {
-					const metaRel = relative(projectRoot, resolve(lessonPath, "_meta.js"));
-					errors.push(`${metaRel}: pages array lists "${pageName}" but ${fileName} not found in this directory`);
-				}
-			}
-			if (meta?.pages && meta.pages.length > 0) {
-				const listedSet = new Set(meta.pages.map(ensureSvelteSuffix));
-				for (const file of svelteFiles) if (!listedSet.has(file)) {
-					const relPath = relative(projectRoot, resolve(lessonPath, file));
-					warnings.push(`${relPath}: not listed in _meta.js pages array — will be appended at end`);
-				}
-			}
-			for (const fileName of svelteFiles) {
-				const result = validatePageFile(resolve(lessonPath, fileName), projectRoot, assetsDir, totalPages, errors, warnings, assetExistsCache, exportStandard);
-				totalPages++;
-				if (result.isQuiz) totalQuizzes++;
-				if (result.isGradedQuiz) hasGradedQuiz = true;
-				pages.push(result.page);
-			}
-		}
+	};
+	for (const section of sections) {
+		const sectionRel = relative(projectRoot, section.dir);
+		const pagesBeforeSection = totalPages;
+		const sectionMeta = validateMetaFile(section.metaPath, sectionRel, errors);
+		for (const lesson of section.lessons) if (lesson.name === null) validateLesson(lesson, sectionMeta);
+		else validateLesson(lesson, validateMetaFile(lesson.metaPath, relative(projectRoot, lesson.dir), errors));
 		if (totalPages === pagesBeforeSection) warnings.push(`${sectionRel}: section contributed no pages and will be empty`);
 	}
-	if (totalPages === 0) errors.push("No pages found. Create at least one section with a lesson and page in pages/");
+	if (totalPages === 0) return noPages();
 	return {
 		errors,
 		warnings,
 		totalPages,
 		totalQuizzes,
 		hasGradedQuiz,
+		hasParseErrors,
 		pages
 	};
 }
 function validateMetaFile(metaPath, parentRel, errors) {
 	if (!existsSync(metaPath)) return null;
 	const metaRel = `${parentRel}/_meta.js`;
-	const objectStr = extractDefaultExportObjectLiteral(readSourceFileCached(metaPath));
-	if (!objectStr) {
+	const result = extractDefaultExportObjectLiteral(readSourceFileCached(metaPath));
+	if (result.kind === "parse-error") {
+		errors.push(`${metaRel}: could not parse — JavaScript syntax error`);
+		return null;
+	}
+	if (result.kind !== "literal") {
 		errors.push(`${metaRel}: syntax error — must export default { title: "..." }`);
 		return null;
 	}
 	let meta;
 	try {
-		meta = JSON5.parse(objectStr);
+		meta = JSON5.parse(result.text);
 	} catch {
 		errors.push(`${metaRel}: syntax error — must export default { title: "..." }`);
 		return null;
@@ -979,66 +1141,6 @@ const QUESTION_COMPONENT_REQUIRED = {
 		"correct"
 	]
 };
-/**
-* Parse the props of an opening tag starting just after the component name.
-* Returns null if the tag can't be parsed cleanly — callers then skip it
-* rather than risk a false positive.
-*/
-function parseTagProps(content, start) {
-	const props = /* @__PURE__ */ new Map();
-	let hasSpread = false;
-	let i = start;
-	while (i < content.length) {
-		while (i < content.length && /\s/.test(content[i])) i++;
-		if (i >= content.length) return null;
-		const c = content[i];
-		if (c === ">") return {
-			props,
-			hasSpread
-		};
-		if (c === "/" && content[i + 1] === ">") return {
-			props,
-			hasSpread
-		};
-		if (c === "{") {
-			const block = extractObjectLiteral(content, i);
-			if (!block) return null;
-			hasSpread = true;
-			i += block.length;
-			continue;
-		}
-		const nameMatch = /^[A-Za-z_][\w-]*/.exec(content.slice(i));
-		if (!nameMatch) return null;
-		const propName = nameMatch[0];
-		i += propName.length;
-		while (i < content.length && /\s/.test(content[i])) i++;
-		if (content[i] !== "=") {
-			props.set(propName, { kind: "bool" });
-			continue;
-		}
-		i++;
-		while (i < content.length && /\s/.test(content[i])) i++;
-		const v = content[i];
-		if (v === "\"" || v === "'") {
-			const end = content.indexOf(v, i + 1);
-			if (end === -1) return null;
-			props.set(propName, {
-				kind: "string",
-				value: content.slice(i + 1, end)
-			});
-			i = end + 1;
-		} else if (v === "{") {
-			const block = extractObjectLiteral(content, i);
-			if (!block) return null;
-			props.set(propName, {
-				kind: "expr",
-				raw: block.slice(1, -1).trim()
-			});
-			i += block.length;
-		} else return null;
-	}
-	return null;
-}
 function staticArray(prop) {
 	if (prop?.kind !== "expr" || !prop.raw.startsWith("[")) return null;
 	try {
@@ -1058,16 +1160,11 @@ function staticNumber(prop) {
 	}
 }
 function validateQuestionComponents(content, fileRel, errors, warnings, exportStandard) {
-	const names = Object.keys(QUESTION_COMPONENT_REQUIRED).join("|");
-	const tagStartRe = new RegExp(`<(${names})(?=[\\s/>])`, "g");
+	const components = findComponents(content, new Set(Object.keys(QUESTION_COMPONENT_REQUIRED)));
+	if (!components) return;
 	const seenIds = /* @__PURE__ */ new Set();
 	const seenSanitized = /* @__PURE__ */ new Set();
-	let m;
-	while ((m = tagStartRe.exec(content)) !== null) {
-		const name = m[1];
-		const parsed = parseTagProps(content, m.index + m[0].length);
-		if (!parsed) continue;
-		const { props, hasSpread } = parsed;
+	for (const { name, props, hasSpread } of components) {
 		for (const req of QUESTION_COMPONENT_REQUIRED[name]) if (!hasSpread && !props.has(req)) errors.push(`${fileRel}: <${name}> is missing required prop "${req}"`);
 		for (const labelProp of ["options", "answers"]) if (staticArray(props.get(labelProp))?.some((e) => typeof e === "string" && e.trim() === "")) warnings.push(tag(A11Y_IDS.questionLabel, `${fileRel}: <${name}> has an empty ${labelProp === "options" ? "option" : "answer"} label`));
 		const idProp = props.get("id");
@@ -1125,20 +1222,31 @@ function validateQuestionComponents(content, fileRel, errors, warnings, exportSt
 }
 /** Remove HTML/Svelte comments so commented-out markup isn't scanned as live. */
 const HTML_COMMENT_RE = /<!--[\s\S]*?-->/g;
+const SCRIPT_STYLE_RE = /<(script|style)\b[\s\S]*?<\/\1>/gi;
+function stripRepeated(input, patterns) {
+	let out = input;
+	for (const pattern of patterns) {
+		let prev;
+		do {
+			prev = out;
+			out = out.replace(pattern, "");
+		} while (out !== prev);
+	}
+	return out;
+}
 /**
 * Sibling to validateQuestionComponents kept out of QUESTION_COMPONENT_REQUIRED
 * so media isn't treated as gradable questions. Declares `warnings` directly.
 * Non-static (kind 'expr') values are skipped, matching the rest of the linter.
 */
 function validateMediaComponents(content, fileRel, errors, warnings) {
-	const scan = content.replace(HTML_COMMENT_RE, "");
-	const tagStartRe = /<(Image|Video|Audio)(?=[\s/>])/g;
-	let m;
-	while ((m = tagStartRe.exec(scan)) !== null) {
-		const name = m[1];
-		const parsed = parseTagProps(scan, m.index + m[0].length);
-		if (!parsed) continue;
-		const { props, hasSpread } = parsed;
+	const components = findComponents(content, new Set([
+		"Image",
+		"Video",
+		"Audio"
+	]));
+	if (!components) return;
+	for (const { name, props, hasSpread } of components) {
 		if (name === "Image") {
 			const alt = props.get("alt");
 			const decorative = props.get("decorative");
@@ -1170,7 +1278,7 @@ function validateMediaComponents(content, fileRel, errors, warnings) {
 * audit.
 */
 function validateHeadingOrder(content, fileRel, warnings) {
-	const levels = [...content.replace(/<(script|style)\b[\s\S]*?<\/\1>/gi, "").replace(HTML_COMMENT_RE, "").matchAll(/<h([1-6])\b/gi)].map((h) => Number(h[1]));
+	const levels = [...stripRepeated(content, [SCRIPT_STYLE_RE, HTML_COMMENT_RE]).matchAll(/<h([1-6])\b/gi)].map((h) => Number(h[1]));
 	let prevSeen = null;
 	for (const level of levels) {
 		if (prevSeen !== null && level - prevSeen > 1) warnings.push(tag(A11Y_IDS.headingOrder, `${fileRel}: heading level jumps from h${prevSeen} to h${level} — don't skip levels (WCAG 1.3.1)`));
@@ -1212,11 +1320,11 @@ function validateAssetRefs(content, fileRel, assetsDir, warnings, existsCache) {
 	}
 }
 function crossValidate(config, pageResults, errors, warnings) {
-	if (config.completion?.mode === "quiz" && !pageResults.hasGradedQuiz) errors.push("completion.mode is \"quiz\" but no pages have quiz config with graded: true");
+	if (config.completion?.mode === "quiz" && !pageResults.hasGradedQuiz && !pageResults.hasParseErrors) errors.push("completion.mode is \"quiz\" but no pages have quiz config with graded: true");
 	if (config.completion?.mode === "quiz" && config.scoring?.passingScore === void 0) warnings.push("completion.mode is \"quiz\" but scoring.passingScore is not set — defaulting to 70%. Set it explicitly to be sure.");
 	const isManual = config.completion?.mode === "manual";
 	const completesOnPages = pageResults.pages.filter((p) => p.completesOnView);
-	if (isManual && config.completion?.trigger === "page" && completesOnPages.length === 0) errors.push("completion.mode is \"manual\" with trigger: \"page\", but no page declares pageConfig.completesOn: \"view\". Either add a completesOn page or remove the trigger field to drop the static check.");
+	if (isManual && config.completion?.trigger === "page" && completesOnPages.length === 0 && !pageResults.hasParseErrors) errors.push("completion.mode is \"manual\" with trigger: \"page\", but no page declares pageConfig.completesOn: \"view\". Either add a completesOn page or remove the trigger field to drop the static check.");
 	if (isManual) {
 		for (const page of pageResults.pages) if (page.hasGradedQuiz) warnings.push(`${page.fileRel}: quiz.graded is true under completion.mode: "manual". The score will be reported to the LMS for transcripts, but it will not drive completion or success status — \`markComplete()\` / completesOn does. If that's not what you want, set graded: false or change completion.mode.`);
 	}
@@ -1239,6 +1347,221 @@ function crossValidate(config, pageResults, errors, warnings) {
 	}
 }
 //#endregion
-export { validateProject as a, reportValidationIssues as i, isPlausibleLanguageTag as n, generateManifest as o, normalizeA11y as r, readCourseConfig as s, isIgnored as t };
+//#region src/plugin/a11y/audit.ts
+const IMPACT_RANK = {
+	minor: 1,
+	moderate: 2,
+	serious: 3,
+	critical: 4
+};
+const AUDIT_ENV_FLAG = "TESSERA_A11Y_AUDIT";
+/** Map the `a11y.standard` enum to axe's cumulative `runOnly` tag list. */
+function axeTags(standard) {
+	switch (standard) {
+		case "wcag2a": return ["wcag2a"];
+		case "wcag21aa": return [
+			"wcag2a",
+			"wcag2aa",
+			"wcag21a",
+			"wcag21aa"
+		];
+		default: return ["wcag2a", "wcag2aa"];
+	}
+}
+/** axe-applicable ignore entries: drop the Tier-1a/1b namespaces. */
+function axeIgnoreRules(ignore) {
+	return ignore.filter((id) => !id.startsWith("tessera/") && !id.startsWith("a11y_"));
+}
+function isMissingBrowserError(message) {
+	return /Executable doesn't exist|playwright install/i.test(message);
+}
+function isFailing(v, thresholdRank) {
+	return !v.impact || IMPACT_RANK[v.impact] >= thresholdRank;
+}
+async function tryImport(specifier) {
+	return import(specifier);
+}
+async function loadDeps() {
+	let chromium;
+	for (const spec of ["playwright", "@playwright/test"]) try {
+		const mod = await tryImport(spec);
+		if (mod.chromium) {
+			chromium = mod.chromium;
+			break;
+		}
+	} catch {}
+	if (!chromium) return {
+		ok: false,
+		missing: "playwright"
+	};
+	try {
+		const mod = await tryImport("@axe-core/playwright");
+		if (!mod.default) return {
+			ok: false,
+			missing: "@axe-core/playwright"
+		};
+		return {
+			ok: true,
+			deps: {
+				chromium,
+				AxeBuilder: mod.default
+			}
+		};
+	} catch {
+		return {
+			ok: false,
+			missing: "@axe-core/playwright"
+		};
+	}
+}
+/**
+* Run the Tier-2 runtime accessibility audit against a built course. Builds (or
+* reuses) dist/, serves it, drives Playwright + axe-core over each page, writes
+* a11y-report.json, and returns a process exit code (0 pass, 1 fail/error).
+*/
+async function runAudit(projectRoot, options = {}) {
+	const threshold = options.threshold ?? "serious";
+	const deps = await loadDeps();
+	if (!deps.ok) {
+		console.error("\x1B[31m[tessera a11y]\x1B[0m Tier 2 needs Playwright + axe-core, which aren't installed.\n  Install them to run the runtime audit:\n    pnpm add -D playwright @axe-core/playwright\n    pnpm exec playwright install chromium");
+		return 1;
+	}
+	const { chromium, AxeBuilder } = deps.deps;
+	const read = readCourseConfig(projectRoot);
+	const settings = normalizeA11y(read.ok ? read.config.a11y : void 0);
+	const tags = axeTags(settings.standard);
+	const disableRules = axeIgnoreRules(settings.ignore);
+	const manifest = generateManifest(resolve(projectRoot, "pages"));
+	const vite = await import("vite");
+	const { resolveTesseraConfig } = await import("./inline-config-DYHT51G8.js");
+	const auditBaseConfig = await resolveTesseraConfig(projectRoot, {
+		command: "build",
+		mode: "production"
+	});
+	const auditDist = resolve(projectRoot, "node_modules", ".tessera-a11y");
+	const distHtml = resolve(auditDist, "index.html");
+	const prevEnv = process.env[AUDIT_ENV_FLAG];
+	process.env[AUDIT_ENV_FLAG] = "1";
+	let server;
+	try {
+		if (options.rebuild || !existsSync(distHtml)) {
+			console.log("[tessera a11y] Building course…");
+			await vite.build(vite.mergeConfig(auditBaseConfig, {
+				build: {
+					outDir: auditDist,
+					emptyOutDir: true
+				},
+				logLevel: "warn"
+			}));
+		}
+		server = await vite.preview({
+			root: projectRoot,
+			base: auditBaseConfig.base,
+			build: { outDir: auditDist },
+			preview: {
+				port: 0,
+				host: "127.0.0.1"
+			},
+			logLevel: "warn"
+		});
+		const baseUrl = server.resolvedUrls?.local?.[0];
+		if (!baseUrl) {
+			console.error("[tessera a11y] Could not determine preview server URL.");
+			return 1;
+		}
+		let browser;
+		try {
+			browser = await chromium.launch();
+		} catch (err) {
+			if (isMissingBrowserError(err instanceof Error ? err.message : String(err))) {
+				console.error("\x1B[31m[tessera a11y]\x1B[0m Chromium isn't installed for Playwright.\n  Install it once:\n    pnpm exec playwright install chromium");
+				return 1;
+			}
+			throw err;
+		}
+		const pages = [];
+		try {
+			const page = await (await browser.newContext()).newPage();
+			const auditUrl = new URL(baseUrl);
+			auditUrl.searchParams.set("__tessera_audit", "1");
+			await page.goto(auditUrl.href, { waitUntil: "networkidle" });
+			await page.waitForSelector("#tessera-app", { timeout: 2e4 });
+			const scan = async () => {
+				const builder = new AxeBuilder({ page }).withTags(tags);
+				if (disableRules.length > 0) builder.disableRules(disableRules);
+				return (await builder.analyze()).violations.map((v) => ({
+					id: v.id,
+					impact: v.impact ?? null,
+					help: v.help,
+					helpUrl: v.helpUrl,
+					nodes: v.nodes.length
+				}));
+			};
+			const navCount = await page.locator("button.tessera-nav-page").count();
+			if (navCount === 0) pages.push({
+				index: 0,
+				title: manifest.pages[0]?.title ?? "(entry)",
+				violations: await scan()
+			});
+			else for (let i = 0; i < navCount; i++) {
+				const btn = page.locator("button.tessera-nav-page").nth(i);
+				const title = (await btn.textContent())?.trim() || `Page ${i + 1}`;
+				await btn.click();
+				await page.waitForFunction((idx) => document.querySelectorAll("button.tessera-nav-page")[idx]?.getAttribute("aria-current") === "page", i, { timeout: 2e4 });
+				await page.waitForLoadState("networkidle");
+				pages.push({
+					index: i,
+					title,
+					violations: await scan()
+				});
+			}
+		} finally {
+			await browser.close();
+		}
+		const thresholdRank = IMPACT_RANK[threshold];
+		let totalViolations = 0;
+		let failingViolations = 0;
+		for (const p of pages) for (const v of p.violations) {
+			totalViolations++;
+			if (isFailing(v, thresholdRank)) failingViolations++;
+		}
+		const report = {
+			standard: settings.standard,
+			threshold,
+			pages,
+			totalViolations,
+			failingViolations,
+			passed: failingViolations === 0
+		};
+		const reportPath = resolve(projectRoot, "a11y-report.json");
+		writeFileSync(reportPath, JSON.stringify(report, null, 2), "utf-8");
+		printSummary(report, reportPath);
+		return report.passed ? 0 : 1;
+	} catch (err) {
+		console.error(`\x1b[31m[tessera a11y]\x1b[0m Audit could not complete: ${err instanceof Error ? err.message : String(err)}`);
+		return 1;
+	} finally {
+		server?.httpServer?.close?.();
+		if (prevEnv === void 0) delete process.env[AUDIT_ENV_FLAG];
+		else process.env[AUDIT_ENV_FLAG] = prevEnv;
+	}
+}
+function printSummary(report, reportPath) {
+	const thresholdRank = IMPACT_RANK[report.threshold];
+	for (const p of report.pages) {
+		if (p.violations.length === 0) {
+			console.log(`\x1b[32m  ✓\x1b[0m ${p.title}`);
+			continue;
+		}
+		const mark = p.violations.some((v) => isFailing(v, thresholdRank)) ? "\x1B[31m  ✗\x1B[0m" : "\x1B[33m  ⚠\x1B[0m";
+		console.log(`${mark} ${p.title}`);
+		for (const v of p.violations) console.log(`      [${v.impact ?? "n/a"}] ${v.id} — ${v.help} (${v.nodes} node${v.nodes === 1 ? "" : "s"})`);
+	}
+	console.log(`\n[tessera a11y] Report written to ${reportPath}`);
+	if (report.passed) console.log(`\x1b[32m[tessera a11y] Passed\x1b[0m — ${report.totalViolations} total finding(s), none at/above "${report.threshold}".`);
+	else console.log(`\x1b[31m[tessera a11y] Failed\x1b[0m — ${report.failingViolations} finding(s) at/above "${report.threshold}" (of ${report.totalViolations} total).`);
+}
+//#endregion
+export { normalizeA11y as a, generateManifest as c, isPlausibleLanguageTag as i, readCourseConfig as l, runAudit as n, reportValidationIssues as o, isIgnored as r, validateProject as s, AUDIT_ENV_FLAG as t };
 
-//# sourceMappingURL=validation-B-xTvM9B.js.map
+//# sourceMappingURL=audit-CzKAXy3Y.js.map