Import Common Cartridge and SCORM packages

[swilla]

Summary

• Add Common Cartridge import: parse imsmanifest.xml, build courses/lessons/steps from cartridge structure, and extract Articulate Storyline slide content into document steps where possible.
• Add SCORM / HTML5 package support: store extracted packages, serve them via authenticated routes, and embed them in document steps (Articulate Rise, Storyline HTML5, and cartridges that bundle Articulate content).
• Expose imports from the admin UI (course list header action) and a new filament-lms:import-cartridges Artisan command (sync or queued), with completion notifications and config under common_cartridge_import.

Test plan

• Run vendor/bin/pest tests/Feature/CommonCartridgeImportTest.php tests/Feature/ImportCartridgesCommandTest.php tests/Feature/ScormPackageServingTest.php
• Publish/run the new document migration stub (scorm_package_* columns on lms_documents)
• Import a Common Cartridge ZIP from Courses → Import cartridge and confirm course/lesson/step structure
• Import Articulate Rise / Storyline HTML5 ZIPs via CLI (filament-lms:import-cartridges --file=... --sync) and verify SCORM content loads in a document step
• Confirm SCORM asset URLs require auth and return expected MIME types

Made with Cursor

---

Note

High Risk
Large feature touching course completion, authenticated file serving, and client-side SCORM bridges; incorrect progress or auth checks could mark courses complete prematurely or expose package files.

Overview
Adds Common Cartridge / SCORM / Articulate import and learner playback: ZIP packages are parsed (imsmanifest.xml or Storyline frame.xml), courses are created via a queued job or filament-lms:import-cartridges, and retained packages are stored on documents with new schema columns.

Embedded player mode (embedded_player, completion_mode on courses) hides LMS step navigation, serves package assets through authenticated ScormPackageController, and syncs progress via ScormCommitController plus in-page SCORM 1.2 / HTML5 bridges. ScormProgressService enforces minimum session time and guards manual completion.

Admin gains Import SCORM Package on the course list, course fields for embedded player settings, and a backfill command for existing package documents. Learner UX updates include full-width interactive iframes, optional exit-with-complete flow, LmsTestFormShow for card-style knowledge checks, and sanitized step text rendering.

^{Reviewed by Cursor Bugbot for commit a7ac69e. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 3 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit a7ac69e. Configure here.}

[cursor]

Single-slide HTML5 auto-completes

Medium Severity

The HTML5 package bridge treats GetCurrentSlideIndex() >= GetSlideCount() - 1 as course completion. When a Storyline export has only one slide, that condition is true on the first poll, so the parent player posts completion before the learner has meaningfully progressed.

 

^{Reviewed by Cursor Bugbot for commit a7ac69e. Configure here.}

[cursor]

Embedded courses hide certificate nav

Medium Severity

Imported SCORM/HTML5 courses enable embedded player mode and clear sidebar navigation, including the Certificate group. linkToCurrentStep always returns the launch step URL for embedded courses, so learners who finish via the player have no in-panel path to the completion or certificate page.

Additional Locations (1)

• src/Models/Course.php#L152-L158

 

^{Reviewed by Cursor Bugbot for commit a7ac69e. Configure here.}

[cursor]

Launch step fallback ignores lesson order

Medium Severity

launchStep() falls back to $this->steps()->first() when no document has a retained SCORM package. The steps() relation orders only by lms_steps.order, not lesson order, so the chosen step can be the wrong lesson’s step or a non-document step in multi-lesson embedded courses.

 

^{Reviewed by Cursor Bugbot for commit a7ac69e. Configure here.}