tessera-learn 0.2.3 → 0.4.0

package/dist/{audit--fSWIOgK.js → audit-DsYqXbqm.js}

@@ -8,9 +8,11 @@ import { parse } from "svelte/compiler";
 import { spawn } from "node:child_process";
 //#region src/plugin/ast.ts
 const rootCache = /* @__PURE__ */ new Map();
+const jsModuleCache = /* @__PURE__ */ new Map();
 /** Drop every cached root. Call at the start of a run to scope the cache. */
 function clearParseCache() {
 	rootCache.clear();
+	jsModuleCache.clear();
 }
 function parseRoot(source) {
 	const cached = rootCache.get(source);
@@ -119,14 +121,19 @@ function findComponents(source, names) {
 }
 const TsParser = Parser.extend(tsPlugin());
 function parseJsModule(source) {
+	const cached = jsModuleCache.get(source);
+	if (cached !== void 0) return cached;
+	let result;
 	try {
-		return TsParser.parse(source, {
+		result = TsParser.parse(source, {
 			ecmaVersion: "latest",
 			sourceType: "module"
 		});
 	} catch {
-		return null;
+		result = null;
 	}
+	jsModuleCache.set(source, result);
+	return result;
 }
 function unwrapTsCast(node) {
 	let current = node;
@@ -240,15 +247,6 @@ function deriveSlug(name, isFile = false) {
 	return stripPrefix(name);
 }
 /**
-* Locate `export default { ... }` and return its object-literal text. Returns
-* a discriminated result so callers can tell parse failure from a missing or
-* non-literal default export. Used by both manifest extraction and project
-* validation.
-*/
-function extractDefaultExportObjectLiteral(source) {
-	return defaultExportObjectLiteral(source);
-}
-/**
 * Read and JSON5-parse the `export default { ... }` literal from a project's
 * course.config.js. Shared by the build plugin and the validator so the read,
 * cache, and parse rules live in one place. The discriminated `reason` lets
@@ -261,7 +259,7 @@ function readCourseConfig(projectRoot) {
 		ok: false,
 		reason: "missing"
 	};
-	const result = extractDefaultExportObjectLiteral(readSourceFileCached(configPath));
+	const result = defaultExportObjectLiteral(readSourceFileCached(configPath));
 	if (result.kind === "parse-error") return {
 		ok: false,
 		reason: "parse-error"
@@ -284,13 +282,40 @@ function readCourseConfig(projectRoot) {
 	}
 }
 /**
+* Resolve a project's effective export standard once: the CLI `--standard`
+* override wins, else `export.standard`, else `'web'`. An unreadable config with
+* no override fails closed with `'unknown'` so callers withhold standard-specific
+* output rather than guess. The returned `config` already has the override
+* applied, so consumers read it back directly. Exported for tests.
+*/
+function readResolvedConfig(projectRoot, standardOverride) {
+	const read = readCourseConfig(projectRoot);
+	if (!read.ok) return {
+		...read,
+		standard: standardOverride ?? "unknown"
+	};
+	const override = standardOverride;
+	const config = override ? {
+		...read.config,
+		export: {
+			...read.config.export,
+			standard: override
+		}
+	} : read.config;
+	return {
+		ok: true,
+		config,
+		standard: config.export?.standard || "web"
+	};
+}
+/**
 * Read a _meta.js file and extract its default export object.
 * Uses the same JSON5 approach as pageConfig extraction — find the object literal
 * after `export default` and parse it.
 */
 function readMetaFile(metaPath) {
 	if (!existsSync(metaPath)) return {};
-	const result = extractDefaultExportObjectLiteral(readSourceFileCached(metaPath));
+	const result = defaultExportObjectLiteral(readSourceFileCached(metaPath));
 	if (result.kind !== "literal") return {};
 	try {
 		return JSON5.parse(result.text);
@@ -548,6 +573,14 @@ const FEEDBACK_MODES = [
 	"never"
 ];
 const RETRY_MODES = ["full", "incorrect-only"];
+/**
+* Trimmed course identity, or '' when absent. Single source of truth for the
+* "is there a usable id?" check shared by the web storage key, the cmi5/xAPI
+* id derivation, and the config validator.
+*/
+function courseIdentity(config) {
+	return typeof config.id === "string" && config.id.trim() || "";
+}
 //#endregion
 //#region src/plugin/a11y/contrast.ts
 /**
@@ -606,6 +639,48 @@ function contrastRatio(a, b) {
 	return (lighter + .05) / (darker + .05);
 }
 //#endregion
+//#region src/plugin/csp.ts
+const WEB_CSP_BASELINE = {
+	"default-src": ["'self'"],
+	"img-src": [
+		"'self'",
+		"data:",
+		"https:"
+	],
+	"media-src": [
+		"'self'",
+		"blob:",
+		"data:",
+		"https:"
+	],
+	"style-src": ["'self'", "'unsafe-inline'"],
+	"script-src": ["'self'", "'unsafe-inline'"],
+	"font-src": ["'self'", "data:"],
+	"connect-src": ["'self'", "https:"],
+	"frame-src": [
+		"'self'",
+		"blob:",
+		"https:"
+	],
+	"worker-src": ["'self'", "blob:"],
+	"object-src": ["'none'"],
+	"base-uri": ["'self'"]
+};
+const CSP_DIRECTIVE = /^[a-zA-Z][a-zA-Z-]*$/;
+const CSP_SOURCE = /^[^\s;,"<>]+$/;
+function isCspOverrides(v) {
+	return typeof v === "object" && v !== null && !Array.isArray(v) && Object.entries(v).every(([directive, sources]) => CSP_DIRECTIVE.test(directive) && Array.isArray(sources) && sources.every((s) => typeof s === "string" && CSP_SOURCE.test(s)));
+}
+function buildCsp(overrides) {
+	const merged = new Map(Object.entries(WEB_CSP_BASELINE).map(([k, v]) => [k, [...v]]));
+	if (isCspOverrides(overrides)) for (const [directive, sources] of Object.entries(overrides)) {
+		const existing = merged.get(directive) ?? [];
+		for (const src of sources) if (!existing.includes(src)) existing.push(src);
+		merged.set(directive, existing);
+	}
+	return [...merged].map(([directive, sources]) => `${directive} ${sources.join(" ")}`).join("; ");
+}
+//#endregion
 //#region src/components/video-embed.ts
 /**
 * Shared YouTube/Vimeo embed detection. Used by Video.svelte to pick the iframe
@@ -628,6 +703,17 @@ function isVideoEmbed(src) {
 }
 //#endregion
 //#region src/plugin/validation.ts
+/** Collects errors and warnings so checkers thread one argument, not a pair. */
+var Diagnostics = class {
+	errors = [];
+	warnings = [];
+	error(message) {
+		this.errors.push(message);
+	}
+	warn(message) {
+		this.warnings.push(message);
+	}
+};
 /** Tier-1b rule IDs. `a11y.ignore` matches these literally. */
 const A11Y_IDS = {
 	imageAlt: "tessera/image-alt",
@@ -640,7 +726,7 @@ const A11Y_IDS = {
 	lang: "tessera/lang"
 };
 /** Promotable by `a11y.level: 'error'`; the rest are hard contract errors. */
-const PROMOTABLE_A11Y_IDS = new Set([
+const PROMOTABLE_A11Y_IDS = /* @__PURE__ */ new Set([
 	A11Y_IDS.mediaTranscript,
 	A11Y_IDS.mediaCaptions,
 	A11Y_IDS.questionLabel,
@@ -681,21 +767,21 @@ function normalizeA11y(raw) {
 * promotable a11y warnings to errors) to a result in place. `ignore` suppresses
 * at any severity, including hard contract errors; `level` only re-rates.
 */
-function applyA11ySettings(result, settings) {
+function applyA11ySettings(d, settings) {
 	if (settings.ignore.length > 0) {
 		const ignored = new Set(settings.ignore);
 		const keep = (msg) => !isIgnored(msg, ignored);
-		result.errors = result.errors.filter(keep);
-		result.warnings = result.warnings.filter(keep);
+		d.errors = d.errors.filter(keep);
+		d.warnings = d.warnings.filter(keep);
 	}
 	if (settings.level === "error") {
 		const remaining = [];
-		for (const msg of result.warnings) {
+		for (const msg of d.warnings) {
 			const id = diagnosticId(msg);
-			if (id !== null && PROMOTABLE_A11Y_IDS.has(id)) result.errors.push(msg);
+			if (id !== null && PROMOTABLE_A11Y_IDS.has(id)) d.error(msg);
 			else remaining.push(msg);
 		}
-		result.warnings = remaining;
+		d.warnings = remaining;
 	}
 }
 /** Print validation warnings (yellow) then errors (red). Shared by the dev/build plugin and the CLI. */
@@ -703,11 +789,13 @@ function reportValidationIssues({ errors, warnings }) {
 	for (const warning of warnings) console.warn(`\x1b[33m[tessera warning]\x1b[0m ${warning}`);
 	for (const error of errors) console.error(`\x1b[31m[tessera error]\x1b[0m ${error}`);
 }
-const KNOWN_CONFIG_FIELDS = new Set([
+const KNOWN_CONFIG_FIELDS = /* @__PURE__ */ new Set([
 	"title",
+	"id",
 	"description",
 	"author",
 	"version",
+	"resume",
 	"language",
 	"branding",
 	"navigation",
@@ -733,7 +821,8 @@ const VALID_EXPORT_STANDARDS = [
 	"web",
 	"scorm12",
 	"scorm2004",
-	"cmi5"
+	"cmi5",
+	"xapi"
 ];
 const VALID_MANUAL_TRIGGERS = ["page"];
 const VALID_REQUIRE_SUCCESS_STATUS = ["passed", "failed"];
@@ -743,75 +832,77 @@ const VALID_RETRY_MODES = RETRY_MODES;
 * Validate a Tessera project at the given root.
 * Returns errors (block build) and warnings (informational).
 */
-function validateProject(projectRoot) {
+function validateProject(projectRoot, standardOverride) {
 	clearParseCache();
-	const errors = [];
-	const warnings = [];
+	const d = new Diagnostics();
 	if (!existsSync(resolve(projectRoot, "course.config.js"))) {
-		errors.push("course.config.js not found in project root");
-		return {
-			errors,
-			warnings
-		};
+		d.error("course.config.js not found in project root");
+		return d;
 	}
-	const config = parseConfig(projectRoot, errors, warnings);
-	const pageResults = validatePages(resolve(projectRoot, "pages"), resolve(projectRoot, "assets"), projectRoot, config?.export?.standard);
-	errors.push(...pageResults.errors);
-	warnings.push(...pageResults.warnings);
+	const config = parseConfig(projectRoot, d, standardOverride);
+	const pageResults = validatePages(resolve(projectRoot, "pages"), resolve(projectRoot, "assets"), projectRoot, d, config?.export?.standard);
 	for (const shellFile of ["layout.svelte", "quiz.svelte"]) {
 		const shellPath = resolve(projectRoot, shellFile);
-		if (existsSync(shellPath)) validateContractBypass(readSourceFileCached(shellPath), shellFile, errors);
+		if (existsSync(shellPath)) validateContractBypass(readSourceFileCached(shellPath), shellFile, d);
 	}
-	if (config) crossValidate(config, pageResults, errors, warnings);
-	const result = {
-		errors,
-		warnings
-	};
-	applyA11ySettings(result, normalizeA11y(config?.a11y));
-	return result;
+	if (config) crossValidate(config, pageResults, d);
+	applyA11ySettings(d, normalizeA11y(config?.a11y));
+	return d;
 }
-function parseConfig(projectRoot, errors, warnings) {
+function parseConfig(projectRoot, d, standardOverride) {
 	const read = readCourseConfig(projectRoot);
 	if (!read.ok) {
-		if (read.reason === "no-export") errors.push("course.config.js: must use `export default { ... }` syntax");
-		else if (read.reason === "parse-error") errors.push("course.config.js: could not parse — JavaScript syntax error");
+		if (read.reason === "no-export") d.error("course.config.js: must use `export default { ... }` syntax");
+		else if (read.reason === "parse-error") d.error("course.config.js: could not parse — JavaScript syntax error");
 		return null;
 	}
 	const config = read.config;
-	for (const key of Object.keys(config)) if (!KNOWN_CONFIG_FIELDS.has(key)) warnings.push(`course.config.js: unknown field "${key}" — will be ignored`);
-	if (config.title !== void 0 && typeof config.title !== "string") errors.push(`course.config.js: "title" must be a string, got ${typeof config.title}`);
-	else if (config.title === void 0 || config.title === "") warnings.push("course.config.js: \"title\" is missing or empty — the course will ship as \"Untitled Course\"");
-	else if (config.title.trim() === "") warnings.push("course.config.js: \"title\" is only whitespace — it ships verbatim and will not fall back to \"Untitled Course\"");
-	if (config.branding !== void 0) validateBranding(config.branding, warnings);
-	if (config.language === void 0) warnings.push(tag(A11Y_IDS.lang, `course.config.js: "language" is not set — defaulting <html lang> to "en". Set it to the course's language (BCP-47, e.g. "en", "fr-CA") for WCAG 3.1.1.`));
-	else if (!isPlausibleLanguageTag(config.language)) warnings.push(tag(A11Y_IDS.lang, `course.config.js: "language" (${JSON.stringify(config.language)}) is not a plausible BCP-47 tag — use e.g. "en", "es", or "fr-CA"`));
-	if (config.a11y !== void 0) validateA11yConfig(config.a11y, errors);
+	for (const key of Object.keys(config)) if (!KNOWN_CONFIG_FIELDS.has(key)) d.warn(`course.config.js: unknown field "${key}" — will be ignored`);
+	if (config.title !== void 0 && typeof config.title !== "string") d.error(`course.config.js: "title" must be a string, got ${typeof config.title}`);
+	else if (config.title === void 0 || config.title === "") d.warn("course.config.js: \"title\" is missing or empty — the course will ship as \"Untitled Course\"");
+	else if (config.title.trim() === "") d.warn("course.config.js: \"title\" is only whitespace — it ships verbatim and will not fall back to \"Untitled Course\"");
+	if (config.branding !== void 0) validateBranding(config.branding, d);
+	if (config.language === void 0) d.warn(tag(A11Y_IDS.lang, `course.config.js: "language" is not set — defaulting <html lang> to "en". Set it to the course's language (BCP-47, e.g. "en", "fr-CA") for WCAG 3.1.1.`));
+	else if (!isPlausibleLanguageTag(config.language)) d.warn(tag(A11Y_IDS.lang, `course.config.js: "language" (${JSON.stringify(config.language)}) is not a plausible BCP-47 tag — use e.g. "en", "es", or "fr-CA"`));
+	if (config.export?.standard !== void 0) {
+		if (!VALID_EXPORT_STANDARDS.includes(config.export.standard)) d.error(`course.config.js: "export.standard" must be "web", "scorm12", "scorm2004", "cmi5", or "xapi", got "${config.export.standard}"`);
+	}
+	if (standardOverride) config.export = {
+		...config.export,
+		standard: standardOverride
+	};
+	const standard = config.export?.standard;
+	if ((standard === void 0 || standard === "web" || standard === "cmi5" || standard === "xapi") && !courseIdentity(config)) d.warn(`course.config.js: no "id" set — the web storage key and cmi5/xAPI activity id then share a fixed fallback that collides across courses. Add a unique id (e.g. "urn:uuid:…"); scaffolded courses include one.`);
+	if (config.a11y !== void 0) validateA11yConfig(config.a11y, d);
 	if (config.navigation?.mode !== void 0) {
-		if (!VALID_NAV_MODES.includes(config.navigation.mode)) errors.push(`course.config.js: "navigation.mode" must be "free" or "sequential", got "${config.navigation.mode}"`);
+		if (!VALID_NAV_MODES.includes(config.navigation.mode)) d.error(`course.config.js: "navigation.mode" must be "free" or "sequential", got "${config.navigation.mode}"`);
 	}
 	if (config.completion?.mode !== void 0) {
-		if (!VALID_COMPLETION_MODES.includes(config.completion.mode)) errors.push(`course.config.js: "completion.mode" must be "quiz", "percentage", or "manual", got "${config.completion.mode}"`);
+		if (!VALID_COMPLETION_MODES.includes(config.completion.mode)) d.error(`course.config.js: "completion.mode" must be "quiz", "percentage", or "manual", got "${config.completion.mode}"`);
 	}
 	if (config.completion?.trigger !== void 0) {
-		if (config.completion.mode !== "manual") warnings.push(`course.config.js: "completion.trigger" is ignored unless completion.mode is "manual"`);
-		else if (!VALID_MANUAL_TRIGGERS.includes(config.completion.trigger)) errors.push(`course.config.js: "completion.trigger" must be "page" or omitted, got "${config.completion.trigger}"`);
+		if (config.completion.mode !== "manual") d.warn(`course.config.js: "completion.trigger" is ignored unless completion.mode is "manual"`);
+		else if (!VALID_MANUAL_TRIGGERS.includes(config.completion.trigger)) d.error(`course.config.js: "completion.trigger" must be "page" or omitted, got "${config.completion.trigger}"`);
 	}
 	if (config.completion?.requireSuccessStatus !== void 0) {
-		if (config.completion.mode !== "manual") warnings.push(`course.config.js: "completion.requireSuccessStatus" is ignored unless completion.mode is "manual"`);
-		else if (!VALID_REQUIRE_SUCCESS_STATUS.includes(config.completion.requireSuccessStatus)) errors.push(`course.config.js: "completion.requireSuccessStatus" must be "passed" or "failed" (omit for "unknown"), got "${config.completion.requireSuccessStatus}"`);
+		if (config.completion.mode !== "manual") d.warn(`course.config.js: "completion.requireSuccessStatus" is ignored unless completion.mode is "manual"`);
+		else if (!VALID_REQUIRE_SUCCESS_STATUS.includes(config.completion.requireSuccessStatus)) d.error(`course.config.js: "completion.requireSuccessStatus" must be "passed" or "failed" (omit for "unknown"), got "${config.completion.requireSuccessStatus}"`);
 	}
-	if (config.export?.standard !== void 0) {
-		if (!VALID_EXPORT_STANDARDS.includes(config.export.standard)) errors.push(`course.config.js: "export.standard" must be "web", "scorm12", "scorm2004", or "cmi5", got "${config.export.standard}"`);
+	if (config.resume !== void 0 && config.resume !== "auto" && config.resume !== "never") d.error(`course.config.js: "resume" must be "auto" or "never", got "${config.resume}"`);
+	if (config.export?.csp !== void 0) {
+		const csp = config.export.csp;
+		if (csp !== false && !isCspOverrides(csp)) d.warn("course.config.js: \"export.csp\" must be false or an object of directive → string[]; ignoring it and using the baseline CSP");
+		else if ((config.export.standard ?? "web") !== "web") d.warn(`course.config.js: "export.csp" is ignored when "export.standard" is "${config.export.standard}" (the CSP meta is web-export only)`);
 	}
 	if (config.scoring?.passingScore !== void 0) {
 		const score = config.scoring.passingScore;
-		if (typeof score !== "number" || score < 0 || score > 100) errors.push(`course.config.js: "scoring.passingScore" must be 0–100, got ${score}`);
+		if (typeof score !== "number" || score < 0 || score > 100) d.error(`course.config.js: "scoring.passingScore" must be 0–100, got ${score}`);
 	}
 	if (config.completion?.percentageThreshold !== void 0) {
 		const threshold = config.completion.percentageThreshold;
-		if (typeof threshold !== "number" || threshold < 0 || threshold > 100) errors.push(`course.config.js: "completion.percentageThreshold" must be 0–100, got ${threshold}`);
+		if (typeof threshold !== "number" || threshold < 0 || threshold > 100) d.error(`course.config.js: "completion.percentageThreshold" must be 0–100, got ${threshold}`);
 	}
-	if (config.xapi !== void 0) validateXAPIConfig(config.xapi, config.export?.standard ?? "web", errors, warnings);
+	if (config.xapi !== void 0) validateXAPIConfig(config.xapi, config.export?.standard ?? "web", d);
 	return config;
 }
 const HEX_COLOR_RE = /^#(?:[0-9a-fA-F]{3,4}|[0-9a-fA-F]{6}|[0-9a-fA-F]{8})$/;
@@ -829,142 +920,142 @@ function isPlausibleColor(value) {
 function describeType(raw) {
 	return raw === null ? "null" : Array.isArray(raw) ? "array" : typeof raw;
 }
-function validateBranding(raw, warnings) {
+function validateBranding(raw, d) {
 	if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
-		warnings.push(`course.config.js: "branding" must be an object, got ${describeType(raw)} — will be ignored`);
+		d.warn(`course.config.js: "branding" must be an object, got ${describeType(raw)} — will be ignored`);
 		return;
 	}
 	const branding = raw;
 	const logo = branding.logo;
 	if (logo !== void 0) {
-		if (typeof logo !== "string") warnings.push(`course.config.js: "branding.logo" must be a string, got ${typeof logo}`);
-		else if (logo.startsWith("$assets/")) warnings.push("course.config.js: \"branding.logo\" starts with \"$assets/\", but branding paths are not asset-resolved — it will ship as a literal, broken src. Use a URL or a path relative to the deployed root.");
+		if (typeof logo !== "string") d.warn(`course.config.js: "branding.logo" must be a string, got ${typeof logo}`);
+		else if (logo.startsWith("$assets/")) d.warn("course.config.js: \"branding.logo\" starts with \"$assets/\", but branding paths are not asset-resolved — it will ship as a literal, broken src. Use a URL or a path relative to the deployed root.");
 	}
 	const primaryColor = branding.primaryColor;
-	if (primaryColor !== void 0) if (typeof primaryColor !== "string") warnings.push(`course.config.js: "branding.primaryColor" must be a string, got ${typeof primaryColor}`);
-	else if (!isPlausibleColor(primaryColor)) warnings.push(`course.config.js: "branding.primaryColor" "${primaryColor}" does not look like a valid CSS color — the theme will fall back to its default shades if the browser can't parse it`);
+	if (primaryColor !== void 0) if (typeof primaryColor !== "string") d.warn(`course.config.js: "branding.primaryColor" must be a string, got ${typeof primaryColor}`);
+	else if (!isPlausibleColor(primaryColor)) d.warn(`course.config.js: "branding.primaryColor" "${primaryColor}" does not look like a valid CSS color — the theme will fall back to its default shades if the browser can't parse it`);
 	else {
 		const ratio = contrastRatio(primaryColor, "#ffffff");
-		if (ratio !== null && ratio < 4.5) warnings.push(tag(A11Y_IDS.primaryContrast, `course.config.js: branding.primaryColor (${primaryColor}) is ${ratio.toFixed(2)}:1 against white — it's used both for links on the page background and as a button fill behind white text, and WCAG AA needs 4.5:1 for each`));
+		if (ratio !== null && ratio < 4.5) d.warn(tag(A11Y_IDS.primaryContrast, `course.config.js: branding.primaryColor (${primaryColor}) is ${ratio.toFixed(2)}:1 against white — it's used both for links on the page background and as a button fill behind white text, and WCAG AA needs 4.5:1 for each`));
 	}
 	const fontFamily = branding.fontFamily;
-	if (fontFamily !== void 0 && typeof fontFamily !== "string") warnings.push(`course.config.js: "branding.fontFamily" must be a string, got ${typeof fontFamily}`);
+	if (fontFamily !== void 0 && typeof fontFamily !== "string") d.warn(`course.config.js: "branding.fontFamily" must be a string, got ${typeof fontFamily}`);
 }
 /** Shape-check the `a11y` block. Malformed values can't be silenced by `ignore`. */
-function validateA11yConfig(raw, errors) {
+function validateA11yConfig(raw, d) {
 	if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
-		errors.push(`course.config.js: "a11y" must be an object, got ${describeType(raw)}`);
+		d.error(`course.config.js: "a11y" must be an object, got ${describeType(raw)}`);
 		return;
 	}
 	const a11y = raw;
-	if (a11y.level !== void 0 && !VALID_A11Y_LEVELS.includes(a11y.level)) errors.push(`course.config.js: "a11y.level" must be "warn" or "error", got ${JSON.stringify(a11y.level)}`);
-	if (a11y.standard !== void 0 && !VALID_A11Y_STANDARDS.includes(a11y.standard)) errors.push(`course.config.js: "a11y.standard" must be "wcag2a", "wcag2aa", or "wcag21aa", got ${JSON.stringify(a11y.standard)}`);
+	if (a11y.level !== void 0 && !VALID_A11Y_LEVELS.includes(a11y.level)) d.error(`course.config.js: "a11y.level" must be "warn" or "error", got ${JSON.stringify(a11y.level)}`);
+	if (a11y.standard !== void 0 && !VALID_A11Y_STANDARDS.includes(a11y.standard)) d.error(`course.config.js: "a11y.standard" must be "wcag2a", "wcag2aa", or "wcag21aa", got ${JSON.stringify(a11y.standard)}`);
 	if (a11y.ignore !== void 0) {
-		if (!Array.isArray(a11y.ignore) || a11y.ignore.some((x) => typeof x !== "string")) errors.push(`course.config.js: "a11y.ignore" must be an array of rule-ID strings`);
+		if (!Array.isArray(a11y.ignore) || a11y.ignore.some((x) => typeof x !== "string")) d.error(`course.config.js: "a11y.ignore" must be an array of rule-ID strings`);
 	}
 }
 const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
-function validateXAPIConfig(raw, standard, errors, warnings) {
+function validateXAPIConfig(raw, standard, d) {
 	if (raw === void 0 || raw === null) return;
 	const entries = Array.isArray(raw) ? raw : [raw];
 	if (Array.isArray(raw)) {
 		if (entries.length === 0) {
-			errors.push("course.config.js: xapi must contain at least one destination, or be omitted");
+			d.error("course.config.js: xapi must contain at least one destination, or be omitted");
 			return;
 		}
-		if (entries.filter((e) => e && typeof e === "object" && e.endpoint === "lms").length > 1) errors.push("course.config.js: xapi has multiple entries with endpoint: 'lms' — only one cmi5 launch-inherited destination is allowed");
+		if (entries.filter((e) => e && typeof e === "object" && e.endpoint === "lms").length > 1) d.error("course.config.js: xapi has multiple entries with endpoint: 'lms' — only one launch-inherited destination is allowed");
 		const seen = /* @__PURE__ */ new Map();
 		for (const e of entries) if (e && typeof e === "object") {
 			const ep = e.endpoint;
 			if (typeof ep === "string" && ep !== "lms") seen.set(ep, (seen.get(ep) ?? 0) + 1);
 		}
-		for (const [ep, count] of seen) if (count > 1) warnings.push(`course.config.js: xapi has ${count} entries with endpoint "${ep}" — usually a copy-paste mistake; fan-out to the same LRS with different actors/activityIds is supported but uncommon.`);
+		for (const [ep, count] of seen) if (count > 1) d.warn(`course.config.js: xapi has ${count} entries with endpoint "${ep}" — usually a copy-paste mistake; fan-out to the same LRS with different actors/activityIds is supported but uncommon.`);
 	} else if (typeof raw !== "object") {
-		errors.push("course.config.js: xapi must be an object or an array of objects");
+		d.error("course.config.js: xapi must be an object or an array of objects");
 		return;
 	}
 	for (let i = 0; i < entries.length; i++) {
 		const entry = entries[i];
 		const label = Array.isArray(raw) ? `xapi[${i}]` : "xapi";
 		if (!entry || typeof entry !== "object") {
-			errors.push(`course.config.js: ${label} must be an object`);
+			d.error(`course.config.js: ${label} must be an object`);
 			continue;
 		}
-		validateSingleXAPIEntry(entry, label, standard, errors, warnings);
+		validateSingleXAPIEntry(entry, label, standard, d);
 	}
 }
-function validateSingleXAPIEntry(entry, label, standard, errors, warnings) {
+function validateSingleXAPIEntry(entry, label, standard, d) {
 	const endpoint = entry.endpoint;
 	if (endpoint === void 0) {
-		errors.push(`course.config.js: ${label}.endpoint is required`);
+		d.error(`course.config.js: ${label}.endpoint is required`);
 		return;
 	}
 	if (typeof endpoint !== "string") {
-		errors.push(`course.config.js: ${label}.endpoint must be a string`);
+		d.error(`course.config.js: ${label}.endpoint must be a string`);
 		return;
 	}
 	if (endpoint === "lms") {
-		if (standard !== "cmi5") errors.push(`course.config.js: ${label}.endpoint: 'lms' requires export.standard: 'cmi5' (you have "${standard}"). Either change the export standard or specify an explicit LRS endpoint.`);
+		if (standard !== "cmi5" && standard !== "xapi") d.error(`course.config.js: ${label}.endpoint: 'lms' requires export.standard: 'cmi5' or 'xapi' (you have "${standard}"). Either change the export standard or specify an explicit LRS endpoint.`);
 		for (const f of [
 			"auth",
 			"actor",
 			"activityId",
 			"registration",
 			"actorAccountHomePage"
-		]) if (entry[f] !== void 0) errors.push(`course.config.js: ${label}.${f} must be omitted when ${label}.endpoint is 'lms' — it is inherited from the cmi5 launch.`);
+		]) if (entry[f] !== void 0) d.error(`course.config.js: ${label}.${f} must be omitted when ${label}.endpoint is 'lms' — it is inherited from the launch.`);
 		return;
 	}
 	let url;
 	try {
 		url = new URL(endpoint);
 	} catch {
-		errors.push(`course.config.js: ${label}.endpoint must be an absolute http(s) URL, got "${endpoint}"`);
+		d.error(`course.config.js: ${label}.endpoint must be an absolute http(s) URL, got "${endpoint}"`);
 		return;
 	}
 	if (url.protocol !== "http:" && url.protocol !== "https:") {
-		errors.push(`course.config.js: ${label}.endpoint must use http: or https:, got "${url.protocol}"`);
+		d.error(`course.config.js: ${label}.endpoint must use http: or https:, got "${url.protocol}"`);
 		return;
 	}
-	if (url.protocol === "http:" && process.env.NODE_ENV === "production") warnings.push(`course.config.js: ${label}.endpoint uses http:; LRS credentials will travel in cleartext. Use https in production.`);
-	if (!endpoint.endsWith("/")) warnings.push(`course.config.js: ${label}.endpoint should end with a slash to avoid concatenation surprises (e.g. 'https://lrs.example.com/xapi/' not 'https://lrs.example.com/xapi'). Runtime normalizes regardless.`);
+	if (url.protocol === "http:" && process.env.NODE_ENV === "production") d.warn(`course.config.js: ${label}.endpoint uses http:; LRS credentials will travel in cleartext. Use https in production.`);
+	if (!endpoint.endsWith("/")) d.warn(`course.config.js: ${label}.endpoint should end with a slash to avoid concatenation surprises (e.g. 'https://lrs.example.com/xapi/' not 'https://lrs.example.com/xapi'). Runtime normalizes regardless.`);
 	const auth = entry.auth;
-	if (auth === void 0) errors.push(`course.config.js: ${label}.auth is required`);
+	if (auth === void 0) d.error(`course.config.js: ${label}.auth is required`);
 	else if (typeof auth === "string") {
 		const authErr = validateAuthCredential(auth);
-		if (authErr) errors.push(`course.config.js: ${joinFieldError(`${label}.auth`, authErr)}`);
-		else warnings.push(`course.config.js: ${label}.auth is a static string and will be embedded in the bundle. For production, pass a function that fetches a short-lived token from a server endpoint.`);
-	} else if (typeof auth !== "function") errors.push(`course.config.js: ${label}.auth must be a string or a function, got ${typeof auth}`);
+		if (authErr) d.error(`course.config.js: ${joinFieldError(`${label}.auth`, authErr)}`);
+		else d.warn(`course.config.js: ${label}.auth is a static string and will be embedded in the bundle. For production, pass a function that fetches a short-lived token from a server endpoint.`);
+	} else if (typeof auth !== "function") d.error(`course.config.js: ${label}.auth must be a string or a function, got ${typeof auth}`);
 	const activityId = entry.activityId;
-	if (activityId === void 0 || activityId === "") errors.push(`course.config.js: ${label}.activityId is required`);
-	else if (typeof activityId !== "string") errors.push(`course.config.js: ${label}.activityId must be a string`);
+	if (activityId === void 0 || activityId === "") d.error(`course.config.js: ${label}.activityId is required`);
+	else if (typeof activityId !== "string") d.error(`course.config.js: ${label}.activityId must be a string`);
 	else try {
 		new URL(activityId);
 	} catch {
-		errors.push(`course.config.js: ${label}.activityId must be an absolute IRI, got "${activityId}"`);
+		d.error(`course.config.js: ${label}.activityId must be an absolute IRI, got "${activityId}"`);
 	}
 	const actor = entry.actor;
 	if (actor === void 0) {
-		if (standard === "web") errors.push(`course.config.js: ${label}.actor is required for web export — there is no LMS to derive a learner identity from. Provide either a static actor object or a function that resolves one (e.g. from your auth system).`);
+		if (standard === "web") d.error(`course.config.js: ${label}.actor is required for web export — there is no LMS to derive a learner identity from. Provide either a static actor object or a function that resolves one (e.g. from your auth system).`);
 	} else if (typeof actor === "object" && actor !== null) {
 		const err = validateAgent(actor);
-		if (err) errors.push(`course.config.js: ${joinFieldError(`${label}.actor`, err)}`);
-	} else if (typeof actor !== "function") errors.push(`course.config.js: ${label}.actor must be an object or function, got ${typeof actor}`);
+		if (err) d.error(`course.config.js: ${joinFieldError(`${label}.actor`, err)}`);
+	} else if (typeof actor !== "function") d.error(`course.config.js: ${label}.actor must be an object or function, got ${typeof actor}`);
 	const aahp = entry.actorAccountHomePage;
 	if (aahp !== void 0) {
-		if (typeof aahp !== "string") errors.push(`course.config.js: ${label}.actorAccountHomePage must be a string`);
+		if (typeof aahp !== "string") d.error(`course.config.js: ${label}.actorAccountHomePage must be a string`);
 		else try {
 			new URL(aahp);
 		} catch {
-			errors.push(`course.config.js: ${label}.actorAccountHomePage must be an absolute URL`);
+			d.error(`course.config.js: ${label}.actorAccountHomePage must be an absolute URL`);
 		}
-		if (actor !== void 0) warnings.push(`course.config.js: ${label}.actorAccountHomePage is ignored when ${label}.actor is supplied explicitly.`);
-		if (standard === "cmi5" || standard === "web") warnings.push(`course.config.js: ${label}.actorAccountHomePage is only used under scorm12/scorm2004 actor synthesis; ignored under "${standard}".`);
+		if (actor !== void 0) d.warn(`course.config.js: ${label}.actorAccountHomePage is ignored when ${label}.actor is supplied explicitly.`);
+		if (standard === "cmi5" || standard === "xapi" || standard === "web") d.warn(`course.config.js: ${label}.actorAccountHomePage is only used under scorm12/scorm2004 actor synthesis; ignored under "${standard}".`);
 	}
-	if (actor === void 0 && (standard === "scorm12" || standard === "scorm2004") && typeof activityId === "string" && httpOrigin(activityId) === null && aahp === void 0) errors.push(`course.config.js: ${label}.activityId is not an http(s) URL, so its origin can't be used as the SCORM actor's account.homePage. Provide ${label}.actorAccountHomePage explicitly.`);
+	if (actor === void 0 && (standard === "scorm12" || standard === "scorm2004") && typeof activityId === "string" && httpOrigin(activityId) === null && aahp === void 0) d.error(`course.config.js: ${label}.activityId is not an http(s) URL, so its origin can't be used as the SCORM actor's account.homePage. Provide ${label}.actorAccountHomePage explicitly.`);
 	const registration = entry.registration;
 	if (registration !== void 0) {
-		if (typeof registration !== "string" || !UUID_RE.test(registration)) errors.push(`course.config.js: ${label}.registration must be a UUID v4, got "${String(registration)}"`);
-		if (standard !== "cmi5") warnings.push(`course.config.js: ${label}.registration is a cmi5 concept; the LRS will accept it under "${standard}" but most analytics tools won't know what to do with it.`);
+		if (typeof registration !== "string" || !UUID_RE.test(registration)) d.error(`course.config.js: ${label}.registration must be a UUID v4, got "${String(registration)}"`);
+		if (standard !== "cmi5" && standard !== "xapi") d.warn(`course.config.js: ${label}.registration is a cmi5 concept; the LRS will accept it under "${standard}" but most analytics tools won't know what to do with it.`);
 	}
 }
 /**
@@ -972,12 +1063,12 @@ function validateSingleXAPIEntry(entry, label, standard, errors, warnings) {
 * lesson-level pages — the validation is identical, only the containing
 * directory differs.
 */
-function validatePageFile(filePath, projectRoot, assetsDir, navIndex, errors, warnings, assetExistsCache, exportStandard) {
+function validatePageFile(filePath, projectRoot, assetsDir, navIndex, d, assetExistsCache, exportStandard) {
 	const fileRel = relative(projectRoot, filePath);
 	const content = readSourceFileCached(filePath);
 	const parseError = getParseError(content);
 	if (parseError) {
-		errors.push(`${fileRel}: could not parse — ${parseError}`);
+		d.error(`${fileRel}: could not parse — ${parseError}`);
 		return {
 			page: {
 				fileRel,
@@ -991,20 +1082,20 @@ function validatePageFile(filePath, projectRoot, assetsDir, navIndex, errors, wa
 			parseError: true
 		};
 	}
-	const pageConfig = validatePageConfig(content, fileRel, errors);
+	const pageConfig = validatePageConfig(content, fileRel, d);
 	const isQuiz = !!pageConfig?.quiz;
 	let isGradedQuiz = false;
 	if (pageConfig?.quiz) {
-		validateQuizConfig(pageConfig.quiz, fileRel, errors);
+		validateQuizConfig(pageConfig.quiz, fileRel, d);
 		if (pageConfig.quiz.graded === true) isGradedQuiz = true;
 	}
-	const completesOnView = validateCompletesOn(pageConfig, fileRel, errors);
-	validateAssetRefs(content, fileRel, assetsDir, warnings, assetExistsCache);
-	validateQuestionComponents(content, fileRel, errors, warnings, exportStandard);
-	validateMediaComponents(content, fileRel, errors, warnings);
-	validateHeadingOrder(content, fileRel, warnings);
-	validateContractBypass(content, fileRel, errors);
-	if (pageConfig?.quiz && !HAS_USE_QUESTION_RE.test(content) && !HAS_QUESTION_TAG_RE.test(content) && !HAS_LOCAL_SVELTE_IMPORT_RE.test(content)) warnings.push(`${fileRel}: quiz page has no question components or useQuestion() calls — the quiz will have nothing to score`);
+	const completesOnView = validateCompletesOn(pageConfig, fileRel, d);
+	validateAssetRefs(content, fileRel, assetsDir, d, assetExistsCache);
+	validateQuestionComponents(content, fileRel, d, exportStandard);
+	validateMediaComponents(content, fileRel, d);
+	validateHeadingOrder(content, fileRel, d);
+	validateContractBypass(content, fileRel, d);
+	if (pageConfig?.quiz && !HAS_USE_QUESTION_RE.test(content) && !HAS_QUESTION_TAG_RE.test(content) && !HAS_LOCAL_SVELTE_IMPORT_RE.test(content)) d.warn(`${fileRel}: quiz page has no question components or useQuestion() calls — the quiz will have nothing to score`);
 	return {
 		page: {
 			fileRel,
@@ -1018,9 +1109,7 @@ function validatePageFile(filePath, projectRoot, assetsDir, navIndex, errors, wa
 		parseError: false
 	};
 }
-function validatePages(pagesDir, assetsDir, projectRoot, exportStandard) {
-	const errors = [];
-	const warnings = [];
+function validatePages(pagesDir, assetsDir, projectRoot, d, exportStandard) {
 	const pages = [];
 	let totalPages = 0;
 	let totalQuizzes = 0;
@@ -1028,10 +1117,8 @@ function validatePages(pagesDir, assetsDir, projectRoot, exportStandard) {
 	let hasParseErrors = false;
 	const assetExistsCache = /* @__PURE__ */ new Map();
 	const noPages = () => {
-		errors.push("No pages found. Create at least one section with a lesson and page in pages/");
+		d.error("No pages found. Create at least one section with a lesson and page in pages/");
 		return {
-			errors,
-			warnings,
 			totalPages,
 			totalQuizzes,
 			hasGradedQuiz,
@@ -1042,21 +1129,21 @@ function validatePages(pagesDir, assetsDir, projectRoot, exportStandard) {
 	if (!existsSync(pagesDir)) return noPages();
 	for (const entry of readdirSync(pagesDir)) {
 		const fullPath = resolve(pagesDir, entry);
-		if (entry.endsWith(".svelte") && statSync(fullPath).isFile()) warnings.push(`${relative(projectRoot, fullPath)}: this file is outside the section/lesson structure and will be ignored`);
+		if (entry.endsWith(".svelte") && statSync(fullPath).isFile()) d.warn(`${relative(projectRoot, fullPath)}: this file is outside the section/lesson structure and will be ignored`);
 	}
 	const sections = walkPages(pagesDir);
 	if (sections.length === 0) return noPages();
 	const validateLesson = (lesson, meta) => {
 		if (meta?.pages) for (const pageName of meta.pages) {
 			const fileName = ensureSvelteSuffix(pageName);
-			if (!lesson.files.includes(fileName)) errors.push(`${relative(projectRoot, lesson.metaPath)}: pages array lists "${pageName}" but ${fileName} not found in this directory`);
+			if (!lesson.files.includes(fileName)) d.error(`${relative(projectRoot, lesson.metaPath)}: pages array lists "${pageName}" but ${fileName} not found in this directory`);
 		}
 		if (meta?.pages && meta.pages.length > 0) {
 			const listedSet = new Set(meta.pages.map(ensureSvelteSuffix));
-			for (const file of lesson.files) if (!listedSet.has(file)) warnings.push(`${relative(projectRoot, resolve(lesson.dir, file))}: not listed in _meta.js pages array — will be appended at end`);
+			for (const file of lesson.files) if (!listedSet.has(file)) d.warn(`${relative(projectRoot, resolve(lesson.dir, file))}: not listed in _meta.js pages array — will be appended at end`);
 		}
 		for (const fileName of orderPageFiles(lesson.files, meta?.pages)) {
-			const result = validatePageFile(resolve(lesson.dir, fileName), projectRoot, assetsDir, totalPages, errors, warnings, assetExistsCache, exportStandard);
+			const result = validatePageFile(resolve(lesson.dir, fileName), projectRoot, assetsDir, totalPages, d, assetExistsCache, exportStandard);
 			totalPages++;
 			if (result.isQuiz) totalQuizzes++;
 			if (result.isGradedQuiz) hasGradedQuiz = true;
@@ -1067,15 +1154,13 @@ function validatePages(pagesDir, assetsDir, projectRoot, exportStandard) {
 	for (const section of sections) {
 		const sectionRel = relative(projectRoot, section.dir);
 		const pagesBeforeSection = totalPages;
-		const sectionMeta = validateMetaFile(section.metaPath, sectionRel, errors);
+		const sectionMeta = validateMetaFile(section.metaPath, sectionRel, d);
 		for (const lesson of section.lessons) if (lesson.name === null) validateLesson(lesson, sectionMeta);
-		else validateLesson(lesson, validateMetaFile(lesson.metaPath, relative(projectRoot, lesson.dir), errors));
-		if (totalPages === pagesBeforeSection) warnings.push(`${sectionRel}: section contributed no pages and will be empty`);
+		else validateLesson(lesson, validateMetaFile(lesson.metaPath, relative(projectRoot, lesson.dir), d));
+		if (totalPages === pagesBeforeSection) d.warn(`${sectionRel}: section contributed no pages and will be empty`);
 	}
 	if (totalPages === 0) return noPages();
 	return {
-		errors,
-		warnings,
 		totalPages,
 		totalQuizzes,
 		hasGradedQuiz,
@@ -1083,50 +1168,50 @@ function validatePages(pagesDir, assetsDir, projectRoot, exportStandard) {
 		pages
 	};
 }
-function validateMetaFile(metaPath, parentRel, errors) {
+function validateMetaFile(metaPath, parentRel, d) {
 	if (!existsSync(metaPath)) return null;
 	const metaRel = `${parentRel}/_meta.js`;
-	const result = extractDefaultExportObjectLiteral(readSourceFileCached(metaPath));
+	const result = defaultExportObjectLiteral(readSourceFileCached(metaPath));
 	if (result.kind === "parse-error") {
-		errors.push(`${metaRel}: could not parse — JavaScript syntax error`);
+		d.error(`${metaRel}: could not parse — JavaScript syntax error`);
 		return null;
 	}
 	if (result.kind !== "literal") {
-		errors.push(`${metaRel}: syntax error — must export default { title: "..." }`);
+		d.error(`${metaRel}: syntax error — must export default { title: "..." }`);
 		return null;
 	}
 	let meta;
 	try {
 		meta = JSON5.parse(result.text);
 	} catch {
-		errors.push(`${metaRel}: syntax error — must export default { title: "..." }`);
+		d.error(`${metaRel}: syntax error — must export default { title: "..." }`);
 		return null;
 	}
-	if (!meta.title) errors.push(`${metaRel}: missing required "title" field`);
+	if (!meta.title) d.error(`${metaRel}: missing required "title" field`);
 	return meta;
 }
-function validatePageConfig(content, fileRel, errors) {
+function validatePageConfig(content, fileRel, d) {
 	const result = parsePageConfigFromSource(content);
 	if (result.kind === "ok") return result.value;
-	if (result.kind === "invalid") errors.push(`${fileRel}: pageConfig must be a static object literal (no variables, function calls, or computed values)`);
+	if (result.kind === "invalid") d.error(`${fileRel}: pageConfig must be a static object literal (no variables, function calls, or computed values)`);
 	return null;
 }
-function validateCompletesOn(pageConfig, fileRel, errors) {
+function validateCompletesOn(pageConfig, fileRel, d) {
 	if (!pageConfig || pageConfig.completesOn === void 0) return false;
 	if (pageConfig.completesOn === "view") return true;
-	errors.push(`${fileRel}: pageConfig.completesOn must be "view", got ${JSON.stringify(pageConfig.completesOn)}`);
+	d.error(`${fileRel}: pageConfig.completesOn must be "view", got ${JSON.stringify(pageConfig.completesOn)}`);
 	return false;
 }
-function validateQuizConfig(quiz, fileRel, errors) {
+function validateQuizConfig(quiz, fileRel, d) {
 	if (!quiz || typeof quiz !== "object") return;
 	const cfg = quiz;
 	if (cfg.maxAttempts !== void 0) {
 		const val = cfg.maxAttempts;
-		if (val !== Infinity && (typeof val !== "number" || val <= 0 || !Number.isFinite(val))) errors.push(`${fileRel}: quiz.maxAttempts must be a positive number or Infinity, got ${String(val)}`);
+		if (val !== Infinity && (typeof val !== "number" || val <= 0 || !Number.isFinite(val))) d.error(`${fileRel}: quiz.maxAttempts must be a positive number or Infinity, got ${String(val)}`);
 	}
-	for (const field of ["graded", "gatesProgress"]) if (cfg[field] !== void 0 && typeof cfg[field] !== "boolean") errors.push(`${fileRel}: quiz.${field} must be a boolean, got ${typeof cfg[field]}`);
-	if (cfg.feedbackMode !== void 0 && !VALID_FEEDBACK_MODES.includes(cfg.feedbackMode)) errors.push(`${fileRel}: quiz.feedbackMode must be "review", "immediate", or "never", got "${String(cfg.feedbackMode)}"`);
-	if (cfg.retryMode !== void 0 && !VALID_RETRY_MODES.includes(cfg.retryMode)) errors.push(`${fileRel}: quiz.retryMode must be "full" or "incorrect-only", got "${String(cfg.retryMode)}"`);
+	for (const field of ["graded", "gatesProgress"]) if (cfg[field] !== void 0 && typeof cfg[field] !== "boolean") d.error(`${fileRel}: quiz.${field} must be a boolean, got ${typeof cfg[field]}`);
+	if (cfg.feedbackMode !== void 0 && !VALID_FEEDBACK_MODES.includes(cfg.feedbackMode)) d.error(`${fileRel}: quiz.feedbackMode must be "review", "immediate", or "never", got "${String(cfg.feedbackMode)}"`);
+	if (cfg.retryMode !== void 0 && !VALID_RETRY_MODES.includes(cfg.retryMode)) d.error(`${fileRel}: quiz.retryMode must be "full" or "incorrect-only", got "${String(cfg.retryMode)}"`);
 }
 const QUESTION_COMPONENT_REQUIRED = {
 	MultipleChoice: [
@@ -1161,63 +1246,63 @@ function staticNumber(prop) {
 		return null;
 	}
 }
-function validateQuestionComponents(content, fileRel, errors, warnings, exportStandard) {
+function validateQuestionComponents(content, fileRel, d, exportStandard) {
 	const components = findComponents(content, new Set(Object.keys(QUESTION_COMPONENT_REQUIRED)));
 	if (!components) return;
 	const seenIds = /* @__PURE__ */ new Set();
 	const seenSanitized = /* @__PURE__ */ new Set();
 	for (const { name, props, hasSpread } of components) {
-		for (const req of QUESTION_COMPONENT_REQUIRED[name]) if (!hasSpread && !props.has(req)) errors.push(`${fileRel}: <${name}> is missing required prop "${req}"`);
-		for (const labelProp of ["options", "answers"]) if (staticArray(props.get(labelProp))?.some((e) => typeof e === "string" && e.trim() === "")) warnings.push(tag(A11Y_IDS.questionLabel, `${fileRel}: <${name}> has an empty ${labelProp === "options" ? "option" : "answer"} label`));
+		for (const req of QUESTION_COMPONENT_REQUIRED[name]) if (!hasSpread && !props.has(req)) d.error(`${fileRel}: <${name}> is missing required prop "${req}"`);
+		for (const labelProp of ["options", "answers"]) if (staticArray(props.get(labelProp))?.some((e) => typeof e === "string" && e.trim() === "")) d.warn(tag(A11Y_IDS.questionLabel, `${fileRel}: <${name}> has an empty ${labelProp === "options" ? "option" : "answer"} label`));
 		const idProp = props.get("id");
 		if (idProp?.kind === "string") {
-			if (seenIds.has(idProp.value)) errors.push(`${fileRel}: duplicate question id "${idProp.value}" — each question on a page needs a unique id`);
+			if (seenIds.has(idProp.value)) d.error(`${fileRel}: duplicate question id "${idProp.value}" — each question on a page needs a unique id`);
 			else if (exportStandard === "scorm12") {
 				const sane = shortIdentifier(idProp.value);
-				if (sane !== idProp.value) warnings.push(`${fileRel}: question id "${idProp.value}" will be rewritten to "${sane}" for SCORM 1.2 — use only letters and digits (underscores only between them)`);
-				if (seenSanitized.has(sane)) errors.push(`${fileRel}: question id "${idProp.value}" collides with a prior id after SCORM 1.2 sanitization ("${sane}")`);
+				if (sane !== idProp.value) d.warn(`${fileRel}: question id "${idProp.value}" will be rewritten to "${sane}" for SCORM 1.2 — use only letters and digits (underscores only between them)`);
+				if (seenSanitized.has(sane)) d.error(`${fileRel}: question id "${idProp.value}" collides with a prior id after SCORM 1.2 sanitization ("${sane}")`);
 				seenSanitized.add(sane);
 			}
 			seenIds.add(idProp.value);
 		}
 		const weightProp = props.get("weight");
-		if (weightProp?.kind === "string") warnings.push(`${fileRel}: <${name}> weight="${weightProp.value}" is a string and is ignored (treated as 1) — pass a number: weight={${weightProp.value}}`);
+		if (weightProp?.kind === "string") d.warn(`${fileRel}: <${name}> weight="${weightProp.value}" is a string and is ignored (treated as 1) — pass a number: weight={${weightProp.value}}`);
 		else {
 			const weight = staticNumber(weightProp);
 			if (weight !== null) {
-				if (!Number.isFinite(weight)) errors.push(`${fileRel}: <${name}> weight must be finite — a non-finite weight makes the weighted score NaN, got ${weight}`);
-				else if (!(weight > 0)) warnings.push(`${fileRel}: <${name}> weight ${weight} is not positive and is ignored (treated as 1)`);
+				if (!Number.isFinite(weight)) d.error(`${fileRel}: <${name}> weight must be finite — a non-finite weight makes the weighted score NaN, got ${weight}`);
+				else if (!(weight > 0)) d.warn(`${fileRel}: <${name}> weight ${weight} is not positive and is ignored (treated as 1)`);
 			}
 		}
 		if (name === "MultipleChoice") {
 			const options = staticArray(props.get("options"));
 			const correct = staticNumber(props.get("correct"));
 			if (options && correct !== null) {
-				if (!Number.isInteger(correct) || correct < 0 || correct >= options.length) errors.push(`${fileRel}: <MultipleChoice> correct={${correct}} is out of range for ${options.length} options (valid: 0–${options.length - 1})`);
+				if (!Number.isInteger(correct) || correct < 0 || correct >= options.length) d.error(`${fileRel}: <MultipleChoice> correct={${correct}} is out of range for ${options.length} options (valid: 0–${options.length - 1})`);
 			}
 			const optionFeedback = staticArray(props.get("optionFeedback"));
-			if (options && optionFeedback && optionFeedback.length > options.length) warnings.push(`${fileRel}: <MultipleChoice> optionFeedback has ${optionFeedback.length} entries but only ${options.length} options — the extra entries can never be shown`);
+			if (options && optionFeedback && optionFeedback.length > options.length) d.warn(`${fileRel}: <MultipleChoice> optionFeedback has ${optionFeedback.length} entries but only ${options.length} options — the extra entries can never be shown`);
 		} else if (name === "Sorting") {
 			const items = staticArray(props.get("items"));
 			const targets = staticArray(props.get("targets"));
 			const correct = staticArray(props.get("correct"));
-			if (items && correct && correct.length !== items.length) errors.push(`${fileRel}: <Sorting> correct has ${correct.length} entries but items has ${items.length} — they must be parallel arrays`);
+			if (items && correct && correct.length !== items.length) d.error(`${fileRel}: <Sorting> correct has ${correct.length} entries but items has ${items.length} — they must be parallel arrays`);
 			if (targets && correct) {
 				for (const idx of correct) if (typeof idx !== "number" || !Number.isInteger(idx) || idx < 0 || idx >= targets.length) {
-					errors.push(`${fileRel}: <Sorting> correct contains ${JSON.stringify(idx)}, out of range for ${targets.length} targets (valid: 0–${targets.length - 1})`);
+					d.error(`${fileRel}: <Sorting> correct contains ${JSON.stringify(idx)}, out of range for ${targets.length} targets (valid: 0–${targets.length - 1})`);
 					break;
 				}
 			}
 		} else if (name === "Matching") {
 			const pairs = staticArray(props.get("pairs"));
 			if (pairs) {
-				if (pairs.some((p) => typeof p !== "object" || p === null || typeof p.left !== "string" || typeof p.right !== "string")) errors.push(`${fileRel}: <Matching> pairs must be an array of { left: string, right: string } objects`);
+				if (pairs.some((p) => typeof p !== "object" || p === null || typeof p.left !== "string" || typeof p.right !== "string")) d.error(`${fileRel}: <Matching> pairs must be an array of { left: string, right: string } objects`);
 			}
 		} else if (name === "FillInTheBlank") {
 			const answers = staticArray(props.get("answers"));
 			if (answers) {
-				if (answers.length === 0) errors.push(`${fileRel}: <FillInTheBlank> answers must not be empty`);
-				else if (answers.some((a) => typeof a !== "string")) errors.push(`${fileRel}: <FillInTheBlank> answers must be an array of strings`);
+				if (answers.length === 0) d.error(`${fileRel}: <FillInTheBlank> answers must not be empty`);
+				else if (answers.some((a) => typeof a !== "string")) d.error(`${fileRel}: <FillInTheBlank> answers must be an array of strings`);
 			}
 		}
 	}
@@ -1238,11 +1323,11 @@ function stripRepeated(input, patterns) {
 }
 /**
 * Sibling to validateQuestionComponents kept out of QUESTION_COMPONENT_REQUIRED
-* so media isn't treated as gradable questions. Declares `warnings` directly.
+* so media isn't treated as gradable questions.
 * Non-static (kind 'expr') values are skipped, matching the rest of the linter.
 */
-function validateMediaComponents(content, fileRel, errors, warnings) {
-	const components = findComponents(content, new Set([
+function validateMediaComponents(content, fileRel, d) {
+	const components = findComponents(content, /* @__PURE__ */ new Set([
 		"Image",
 		"Video",
 		"Audio"
@@ -1253,23 +1338,23 @@ function validateMediaComponents(content, fileRel, errors, warnings) {
 			const alt = props.get("alt");
 			const decorative = props.get("decorative");
 			if (decorative?.kind === "string") {
-				errors.push(tag(A11Y_IDS.imageAlt, `${fileRel}: <Image> "decorative" must be a boolean — use decorative or decorative={true}, not the string ${JSON.stringify(decorative.value)}`));
+				d.error(tag(A11Y_IDS.imageAlt, `${fileRel}: <Image> "decorative" must be a boolean — use decorative or decorative={true}, not the string ${JSON.stringify(decorative.value)}`));
 				continue;
 			}
 			const hasDecorative = decorative?.kind === "bool" || decorative?.kind === "expr" && decorative.raw.trim() === "true";
 			const altIsEmpty = alt?.kind === "string" && alt.value.trim() === "";
-			if (!hasDecorative && !hasSpread && (alt === void 0 || altIsEmpty)) errors.push(tag(A11Y_IDS.imageAlt, `${fileRel}: <Image> needs alt text, or mark it decorative={true} if purely ornamental`));
-			if (hasDecorative && alt?.kind === "string" && alt.value.trim() !== "") warnings.push(tag(A11Y_IDS.imageAlt, `${fileRel}: <Image> is decorative but also has alt text — the alt will be dropped`));
+			if (!hasDecorative && !hasSpread && (alt === void 0 || altIsEmpty)) d.error(tag(A11Y_IDS.imageAlt, `${fileRel}: <Image> needs alt text, or mark it decorative={true} if purely ornamental`));
+			if (hasDecorative && alt?.kind === "string" && alt.value.trim() !== "") d.warn(tag(A11Y_IDS.imageAlt, `${fileRel}: <Image> is decorative but also has alt text — the alt will be dropped`));
 			continue;
 		}
 		const title = props.get("title");
 		const titleIsEmpty = title?.kind === "string" && title.value.trim() === "";
-		if (!hasSpread && (title === void 0 || titleIsEmpty)) errors.push(tag(A11Y_IDS.mediaTitle, `${fileRel}: <${name}> needs a title — it's the accessible name for the player`));
+		if (!hasSpread && (title === void 0 || titleIsEmpty)) d.error(tag(A11Y_IDS.mediaTitle, `${fileRel}: <${name}> needs a title — it's the accessible name for the player`));
 		const src = props.get("src");
 		const isEmbed = src?.kind === "string" && isVideoEmbed(src.value);
-		if (name === "Video" && !hasSpread && isEmbed && props.get("transcript") === void 0) warnings.push(tag(A11Y_IDS.mediaTranscript, `${fileRel}: <Video> embeds can't carry caption tracks — provide a transcript for WCAG 1.2`));
-		if (name === "Video" && !hasSpread && src?.kind === "string" && !isEmbed && props.get("tracks") === void 0 && props.get("transcript") === void 0) warnings.push(tag(A11Y_IDS.mediaCaptions, `${fileRel}: native <Video> has no caption tracks or transcript — add tracks={[…]} or a transcript for WCAG 1.2.2`));
-		if (name === "Audio" && !hasSpread && props.get("transcript") === void 0) warnings.push(tag(A11Y_IDS.mediaTranscript, `${fileRel}: <Audio> has no transcript — required for WCAG 1.2.1`));
+		if (name === "Video" && !hasSpread && isEmbed && props.get("transcript") === void 0) d.warn(tag(A11Y_IDS.mediaTranscript, `${fileRel}: <Video> embeds can't carry caption tracks — provide a transcript for WCAG 1.2`));
+		if (name === "Video" && !hasSpread && src?.kind === "string" && !isEmbed && props.get("tracks") === void 0 && props.get("transcript") === void 0) d.warn(tag(A11Y_IDS.mediaCaptions, `${fileRel}: native <Video> has no caption tracks or transcript — add tracks={[…]} or a transcript for WCAG 1.2.2`));
+		if (name === "Audio" && !hasSpread && props.get("transcript") === void 0) d.warn(tag(A11Y_IDS.mediaTranscript, `${fileRel}: <Audio> has no transcript — required for WCAG 1.2.1`));
 	}
 }
 /**
@@ -1279,11 +1364,11 @@ function validateMediaComponents(content, fileRel, errors, warnings) {
 * components emit headings a static scan can't see; that belongs to the Tier-2
 * audit.
 */
-function validateHeadingOrder(content, fileRel, warnings) {
+function validateHeadingOrder(content, fileRel, d) {
 	const levels = [...stripRepeated(content, [SCRIPT_STYLE_RE, HTML_COMMENT_RE]).matchAll(/<h([1-6])\b/gi)].map((h) => Number(h[1]));
 	let prevSeen = null;
 	for (const level of levels) {
-		if (prevSeen !== null && level - prevSeen > 1) warnings.push(tag(A11Y_IDS.headingOrder, `${fileRel}: heading level jumps from h${prevSeen} to h${level} — don't skip levels (WCAG 1.3.1)`));
+		if (prevSeen !== null && level - prevSeen > 1) d.warn(tag(A11Y_IDS.headingOrder, `${fileRel}: heading level jumps from h${prevSeen} to h${level} — don't skip levels (WCAG 1.3.1)`));
 		prevSeen = level;
 	}
 }
@@ -1297,9 +1382,9 @@ const HAS_LOCAL_SVELTE_IMPORT_RE = /from\s+['"][^'"]+\.svelte['"]/;
 * source text for known escape hatches — they never inspect course content,
 * so they constrain how you wire things up, not what you build.
 */
-function validateContractBypass(content, fileRel, errors) {
-	if (QUIZ_COMPLETE_DISPATCH_RE.test(content)) errors.push(`${fileRel}: dispatches "tessera-quiz-complete" directly — submit through useQuiz().submit() so the result reaches the LMS`);
-	if (RUNTIME_INTERNAL_IMPORT_RE.test(content)) errors.push(`${fileRel}: imports from tessera-learn/runtime/* — use the public hooks (useQuiz, useQuestion, useNavigation, …) instead`);
+function validateContractBypass(content, fileRel, d) {
+	if (QUIZ_COMPLETE_DISPATCH_RE.test(content)) d.error(`${fileRel}: dispatches "tessera-quiz-complete" directly — submit through useQuiz().submit() so the result reaches the LMS`);
+	if (RUNTIME_INTERNAL_IMPORT_RE.test(content)) d.error(`${fileRel}: imports from tessera-learn/runtime/* — use the public hooks (useQuiz, useQuestion, useNavigation, …) instead`);
 }
 const ASSET_REF_RE = /\$assets\/([^\s"'`)]+)/g;
 /** Match $assets/... refs in any context (src attrs, import statements, url() etc) and dedupe. */
@@ -1310,7 +1395,7 @@ function collectAssetRefs(content) {
 	while ((match = ASSET_REF_RE.exec(content)) !== null) seen.add(match[1].replace(/[?#].*$/, ""));
 	return [...seen];
 }
-function validateAssetRefs(content, fileRel, assetsDir, warnings, existsCache) {
+function validateAssetRefs(content, fileRel, assetsDir, d, existsCache) {
 	for (const assetPath of collectAssetRefs(content)) {
 		const fullAssetPath = resolve(assetsDir, assetPath);
 		let exists = existsCache.get(fullAssetPath);
@@ -1318,24 +1403,24 @@ function validateAssetRefs(content, fileRel, assetsDir, warnings, existsCache) {
 			exists = existsSync(fullAssetPath);
 			existsCache.set(fullAssetPath, exists);
 		}
-		if (!exists) warnings.push(`${fileRel}: "$assets/${assetPath}" not found in assets/ directory`);
+		if (!exists) d.warn(`${fileRel}: "$assets/${assetPath}" not found in assets/ directory`);
 	}
 }
-function crossValidate(config, pageResults, errors, warnings) {
-	if (config.completion?.mode === "quiz" && !pageResults.hasGradedQuiz && !pageResults.hasParseErrors) errors.push("completion.mode is \"quiz\" but no pages have quiz config with graded: true");
-	if (config.completion?.mode === "quiz" && config.scoring?.passingScore === void 0) warnings.push("completion.mode is \"quiz\" but scoring.passingScore is not set — defaulting to 70%. Set it explicitly to be sure.");
+function crossValidate(config, pageResults, d) {
+	if (config.completion?.mode === "quiz" && !pageResults.hasGradedQuiz && !pageResults.hasParseErrors) d.error("completion.mode is \"quiz\" but no pages have quiz config with graded: true");
+	if (config.completion?.mode === "quiz" && config.scoring?.passingScore === void 0) d.warn("completion.mode is \"quiz\" but scoring.passingScore is not set — defaulting to 70%. Set it explicitly to be sure.");
 	const isManual = config.completion?.mode === "manual";
 	const completesOnPages = pageResults.pages.filter((p) => p.completesOnView);
-	if (isManual && config.completion?.trigger === "page" && completesOnPages.length === 0 && !pageResults.hasParseErrors) errors.push("completion.mode is \"manual\" with trigger: \"page\", but no page declares pageConfig.completesOn: \"view\". Either add a completesOn page or remove the trigger field to drop the static check.");
+	if (isManual && config.completion?.trigger === "page" && completesOnPages.length === 0 && !pageResults.hasParseErrors) d.error("completion.mode is \"manual\" with trigger: \"page\", but no page declares pageConfig.completesOn: \"view\". Either add a completesOn page or remove the trigger field to drop the static check.");
 	if (isManual) {
-		for (const page of pageResults.pages) if (page.hasGradedQuiz) warnings.push(`${page.fileRel}: quiz.graded is true under completion.mode: "manual". The score will be reported to the LMS for transcripts, but it will not drive completion or success status — \`markComplete()\` / completesOn does. If that's not what you want, set graded: false or change completion.mode.`);
+		for (const page of pageResults.pages) if (page.hasGradedQuiz) d.warn(`${page.fileRel}: quiz.graded is true under completion.mode: "manual". The score will be reported to the LMS for transcripts, but it will not drive completion or success status — \`markComplete()\` / completesOn does. If that's not what you want, set graded: false or change completion.mode.`);
 	}
-	if (isManual && config.completion?.percentageThreshold !== void 0) warnings.push("course.config.js: \"completion.percentageThreshold\" is ignored under completion.mode: \"manual\"");
-	if (!isManual) for (const page of completesOnPages) warnings.push(`${page.fileRel}: pageConfig.completesOn is ignored — completion.mode is "${config.completion?.mode ?? "percentage"}"`);
-	for (const page of pageResults.pages) if (page.completesOnView && page.hasQuiz) warnings.push(`${page.fileRel}: completion fires on view, before the quiz can be answered — likely a mistake`);
+	if (isManual && config.completion?.percentageThreshold !== void 0) d.warn("course.config.js: \"completion.percentageThreshold\" is ignored under completion.mode: \"manual\"");
+	if (!isManual) for (const page of completesOnPages) d.warn(`${page.fileRel}: pageConfig.completesOn is ignored — completion.mode is "${config.completion?.mode ?? "percentage"}"`);
+	for (const page of pageResults.pages) if (page.completesOnView && page.hasQuiz) d.warn(`${page.fileRel}: completion fires on view, before the quiz can be answered — likely a mistake`);
 	if (isManual) {
 		const firstPage = pageResults.pages.find((p) => p.navIndex === 0);
-		if (firstPage?.completesOnView) warnings.push(`${firstPage.fileRel}: pageConfig.completesOn: "view" is on the first page — the course will complete immediately on launch, before the learner sees any other content.`);
+		if (firstPage?.completesOnView) d.warn(`${firstPage.fileRel}: pageConfig.completesOn: "view" is on the first page — the course will complete immediately on launch, before the learner sees any other content.`);
 	}
 	if (config.export?.standard === "scorm12") {
 		let visitedChars = 0;
@@ -1345,7 +1430,7 @@ function crossValidate(config, pageResults, errors, warnings) {
 		const chunkBytes = pageResults.totalPages * 12;
 		const standaloneBytes = pageResults.totalPages * 30;
 		const estimatedSize = overhead + visitedChars + quizBytes + chunkBytes + standaloneBytes + 256;
-		if (estimatedSize > 3200) warnings.push(`Course has ${pageResults.totalPages} pages with ${pageResults.totalQuizzes} quizzes — estimated SCORM 1.2 suspend_data ~${estimatedSize} bytes may exceed the 4096-byte limit when fully populated (visited + chunks + standalone scores + usePersistence). Consider using "scorm2004" or "cmi5".`);
+		if (estimatedSize > 3200) d.warn(`Course has ${pageResults.totalPages} pages with ${pageResults.totalQuizzes} quizzes — estimated SCORM 1.2 suspend_data ~${estimatedSize} bytes may exceed the 4096-byte limit when fully populated (visited + chunks + standalone scores + usePersistence). Consider using "scorm2004" or "cmi5".`);
 	}
 }
 //#endregion
@@ -1574,7 +1659,7 @@ async function runAudit(projectRoot, workspaceRoot, options = {}) {
 	const disableRules = axeIgnoreRules(settings.ignore);
 	const manifest = generateManifest(resolve(projectRoot, "pages"));
 	const vite = await import("vite");
-	const { resolveTesseraConfig } = await import("./inline-config-DqAKsCNl.js");
+	const { resolveTesseraConfig } = await import("./inline-config-DVvOCKht.js");
 	const auditBaseConfig = await resolveTesseraConfig(projectRoot, workspaceRoot, {
 		command: "build",
 		mode: "production"
@@ -1725,6 +1810,6 @@ function printSummary(report, reportPath) {
 	}
 }
 //#endregion
-export { isPlausibleLanguageTag as a, validateProject as c, isIgnored as i, generateManifest as l, runAudit as n, normalizeA11y as o, resolvePackageRoot as r, reportValidationIssues as s, AUDIT_ENV_FLAG as t, readCourseConfig as u };
+export { isIgnored as a, reportValidationIssues as c, courseIdentity as d, generateManifest as f, VALID_EXPORT_STANDARDS as i, validateProject as l, readResolvedConfig as m, runAudit as n, isPlausibleLanguageTag as o, readCourseConfig as p, resolvePackageRoot as r, normalizeA11y as s, AUDIT_ENV_FLAG as t, buildCsp as u };
 
-//# sourceMappingURL=audit--fSWIOgK.js.map
+//# sourceMappingURL=audit-DsYqXbqm.js.map