Lucas WintherandClaude Opus 5.5
777ae2cc37
Contracts and core: - Feature gains auth and stop; FeatureFactory; core composeServer builds the context, runs the factories, then the job queue from the union of their jobs (R8/R14). startServer uses it; main.ts composes learner, import, studio, AI. - AppConfig/loadConfig own the layout and settings: courseDirs include <dataDir>/courses and <dataDir>/worktrees, studioReposDir, cacheDir, importRoots, uploadMaxMb, aiAllowedBaseUrls, transcribeUrl, python. resolveConfig derives the same for tests; cachePaths shares the importer's cache layout. - canView: the global author role views every course (R14); the learner, studio and AI packages all call it. - migrate(db, packages): core first, then packages in name order. - Media: nosniff on every response, a sandbox CSP on svg/html/js; a Range on an empty file is 416. - courseUrl/lessonUrl and the lesson route patterns live in @stc/contracts. Packages: - import, studio and AI read AppConfig instead of process.env; the importer refuses ids used by studio/repos. - learner migrations run through core migrate; library covers fall back to the importer's cached candidate behind a canView-checked route. - studio preview renders through the learner LessonView (anchors honoured, draft URLs); AI drafts go to the studio draft branch for studio courses (as the requesting user) and to <dataDir>/drafts otherwise, and the generator page says which. Web: tsconfig paths for @stc/<feature>/web browser entries; features.ts imports them by package name; nav.roles hides links by role. Tests: compose, config, canView, media headers, migrations order, covers, preview, nav, SPA bundle without server code, and an end-to-end flow on SQLite and Postgres. Co-Authored-By: Claude Opus 5.5 <[email protected]>
29 lines
1.9 KiB
TypeScript
29 lines
1.9 KiB
TypeScript
import { expect, test } from "bun:test";
|
|
import { renderToString } from "react-dom/server";
|
|
import LearnerLessonPreview from "../src/ui/learnerPreview";
|
|
|
|
const md = "# Intro\n\nHello \n\n## Part two\n\nOnly this <b>part</b>.\n\n## Part three\n\nNot this.\n";
|
|
const draft = (rel: string) => `/api/studio/courses/c1/raw/${rel}`;
|
|
|
|
test("the studio preview renders through the learner LessonView, with draft URLs", () => {
|
|
const html = renderToString(<LearnerLessonPreview courseId="c1" markdown={md} lesson={{ id: "l1", title: "Lesson one", type: "text" }} file="lessons/one.md" resolveCourseUrl={draft} resolveUrl={() => "/wrong"} />);
|
|
expect(html).toContain('class="lr lr-lesson"');
|
|
expect(html).toContain("Lesson one");
|
|
expect(html).toContain('src="/api/studio/courses/c1/raw/lessons/img/a.png"');
|
|
expect(html).not.toContain("/api/media/");
|
|
});
|
|
|
|
test("an anchored lesson previews only its section; a missing anchor says so", () => {
|
|
const one = renderToString(<LearnerLessonPreview courseId="c1" markdown={md} lesson={{ id: "l1", title: "T", type: "text", anchor: "part-two" }} file="lessons/one.md" resolveCourseUrl={draft} resolveUrl={draft} />);
|
|
expect(one).toContain("Only this");
|
|
expect(one).not.toContain("Not this");
|
|
const missing = renderToString(<LearnerLessonPreview courseId="c1" markdown={md} lesson={{ id: "l1", title: "T", type: "text", anchor: "nope" }} file="lessons/one.md" resolveCourseUrl={draft} resolveUrl={draft} />);
|
|
expect(missing).toContain("was not found");
|
|
});
|
|
|
|
test("raw HTML in a draft is sanitised by the learner pipeline", () => {
|
|
const html = renderToString(<LearnerLessonPreview courseId="c1" markdown={"# T\n\n<img src=x onerror=alert(1)><script>alert(2)</script>"} lesson={{ id: "l1", title: "T", type: "text" }} file="a.md" resolveCourseUrl={draft} resolveUrl={draft} />);
|
|
expect(html).not.toContain("onerror");
|
|
expect(html).not.toContain("<script>");
|
|
});
|