Import Common Cartridge and SCORM packages

[swilla]

Summary

• Add Common Cartridge import: parse imsmanifest.xml, build courses/lessons/steps from cartridge structure, and extract Articulate Storyline slide content into document steps where possible.
• Add SCORM / HTML5 package support: store extracted packages, serve them via authenticated routes, and embed them in document steps (Articulate Rise, Storyline HTML5, and cartridges that bundle Articulate content).
• Expose imports from the admin UI (course list header action) and a new filament-lms:import-cartridges Artisan command (sync or queued), with completion notifications and config under common_cartridge_import.

Test plan

• Run vendor/bin/pest tests/Feature/CommonCartridgeImportTest.php tests/Feature/ImportCartridgesCommandTest.php tests/Feature/ScormPackageServingTest.php
• Publish/run the new document migration stub (scorm_package_* columns on lms_documents)
• Import a Common Cartridge ZIP from Courses → Import cartridge and confirm course/lesson/step structure
• Import Articulate Rise / Storyline HTML5 ZIPs via CLI (filament-lms:import-cartridges --file=... --sync) and verify SCORM content loads in a document step
• Confirm SCORM asset URLs require auth and return expected MIME types

Made with Cursor

---

Note

High Risk
Large feature touching course completion, authenticated file serving, and client-side SCORM bridges; incorrect progress or auth checks could mark courses complete prematurely or expose package files.

Overview
Adds Common Cartridge / SCORM / Articulate import and learner playback: ZIP packages are parsed (imsmanifest.xml or Storyline frame.xml), courses are created via a queued job or filament-lms:import-cartridges, and retained packages are stored on documents with new schema columns.

Embedded player mode (embedded_player, completion_mode on courses) hides LMS step navigation, serves package assets through authenticated ScormPackageController, and syncs progress via ScormCommitController plus in-page SCORM 1.2 / HTML5 bridges. ScormProgressService enforces minimum session time and guards manual completion.

Admin gains Import SCORM Package on the course list, course fields for embedded player settings, and a backfill command for existing package documents. Learner UX updates include full-width interactive iframes, optional exit-with-complete flow, LmsTestFormShow for card-style knowledge checks, and sanitized step text rendering.

^{Reviewed by Cursor Bugbot for commit a7ac69e. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 2 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 355b975. Configure here.}