x

Author: svincent240

README.md

@@ -10,11 +10,10 @@ If you want the guided, button-based workflow, start on the Desktop site:
 
 ## Download (Beta)
 
-You can download installers directly here to avoid extra steps:
+Use the Desktop site for the current installers, release notes, and checksums:
 
-- **macOS (Apple Silicon + Intel, beta):** [Download `.dmg` (v0.10.0-beta.1)](https://github.com/course-code-framework/coursecode-desktop/releases/download/v0.10.0-beta.1/CourseCode-Desktop-v0.10.0-beta.1-mac.dmg)
-- **Windows 10/11 x64 (beta):** [Download `.exe` (v0.10.0-beta.1)](https://github.com/course-code-framework/coursecode-desktop/releases/download/v0.10.0-beta.1/CourseCode-Desktop-v0.10.0-beta.1-win.exe)
-- **Release notes + checksums:** [GitHub Release v0.10.0-beta.1](https://github.com/course-code-framework/coursecode-desktop/releases/tag/v0.10.0-beta.1)
+- **Latest downloads:** [coursecodedesktop.com/download](https://coursecodedesktop.com/download)
+- **GitHub Releases:** [course-code-framework/coursecode-desktop/releases](https://github.com/course-code-framework/coursecode-desktop/releases)
 
 ## Temporary Beta Note (Unsigned Apps)
 

USER_GUIDE.md

@@ -74,6 +74,7 @@ Typical actions:
 - `Preview` (start/stop local preview server)
 - `Export` (build LMS package locally)
 - `Deploy` (publish to CourseCode Cloud, optional)
+- Cloud deployment management for linked courses
 - open in editor / reveal in Finder / open terminal
 
 ### Settings
@@ -114,7 +115,9 @@ Cloud is most helpful when you want to spend less time on packaging and file sha
 
 What Cloud gives you:
 - a hosted course version you can access online after deploy
-- shareable preview links for reviewers and stakeholders
+- a main preview link for reviewers and stakeholders
+- password-protected preview sharing by default, with passwordless sharing as an explicit choice
+- Production and Preview pointers so you can stage review versions without changing what learners see
 - LMS format downloads later (SCORM/cmi5) from the same uploaded build
 - simpler updates (redeploy once, then use Cloud for future downloads/sharing)
 - cloud-managed runtime services (reporting/channel) without manual endpoint setup
@@ -150,9 +153,39 @@ If you sign in to CourseCode Cloud, Desktop can also support:
 Typical non-technical workflow:
 1. Build and test in Desktop with `Preview`
 2. Click `Deploy` to publish to Cloud
-3. Share the Cloud preview link with reviewers
-4. Make fixes in Desktop and deploy again
-5. Download the LMS package you need from Cloud when approved
+3. Keep `Require password` on for the main preview link unless you intentionally want a passwordless review URL
+4. Share the Cloud preview link with reviewers
+5. Make fixes in Desktop and deploy again
+6. Use the Cloud Deployments panel to move the Preview pointer for review or Production pointer when approved
+7. Download the LMS package you need from Cloud when approved
+
+### Managing Cloud Deployments in Desktop
+
+For a linked Cloud course, Project Detail includes a Cloud Deployments panel. It is a focused Desktop subset of the Cloud web app.
+
+Use it to:
+- create, enable, disable, copy, or open the main preview link
+- add, change, or remove the preview password
+- extend preview expiry by seven days
+- see the current Production and Preview pointer versions
+- view recent deployments
+- move the Preview pointer to a selected deployment
+- move the Production pointer to a selected deployment when the course is not GitHub-linked
+
+The main preview link follows the Preview pointer. That means the shared URL can stay the same while you choose which deployment reviewers see.
+
+Desktop keeps advanced Cloud workflows in the Cloud web app, including multiple pinned stakeholder preview links, cleanup, analytics, and detailed audit exploration.
+
+### GitHub-Linked Courses
+
+If a course is linked to a GitHub repository, production deploys are managed by GitHub. Push to the repo to update Production.
+
+Desktop still supports:
+- preview-only deploys
+- Preview pointer changes
+- main preview link password/expiry management
+
+Desktop disables Production pointer changes for GitHub-linked courses to avoid conflicting with the repository workflow.
 
 Cloud features should always be labeled optional in Desktop UI/docs.
 

main/cloud-client.js

@@ -6,6 +6,7 @@ import { getChildEnv, isLocalMode, getCLISpawnArgs, getProjectCLISpawnArgs } fro
 import { createLogger } from './logger.js';
 
 const log = createLogger('cloud');
+const CLOUD_BASE_URL = isLocalMode() ? 'http://localhost:3000' : 'https://www.coursecodecloud.com';
 
 /**
  * Strip ANSI escape codes from a string.
@@ -88,6 +89,31 @@ function createCloudCliError(message, extra = {}) {
     return err;
 }
 
+async function cloudApiFetch(path, options = {}) {
+    const token = loadToken();
+    if (!token) throw new Error('Not authenticated. Please sign in to CourseCode Cloud.');
+    const res = await fetch(`${CLOUD_BASE_URL}${path}`, {
+        ...options,
+        headers: {
+            Authorization: `Bearer ${token}`,
+            ...(options.body ? { 'Content-Type': 'application/json' } : {}),
+            ...(options.headers || {})
+        }
+    });
+    const data = await res.json().catch(() => ({}));
+    if (!res.ok) {
+        throw new Error(typeof data?.error === 'string' ? data.error : `Cloud request failed (${res.status})`);
+    }
+    return data;
+}
+
+async function getCloudCourseRef(projectPath) {
+    const status = await getDeployStatus(projectPath);
+    if (!status?.slug) throw new Error('This project is not linked to a Cloud course.');
+    const orgQuery = status.orgId ? `?orgId=${encodeURIComponent(status.orgId)}` : '';
+    return { slug: status.slug, orgQuery };
+}
+
 // CLI manages credentials at ~/.coursecode/credentials.json (or credentials.local.json in local mode)
 function getCredentialsPath() {
     const filename = isLocalMode() ? 'credentials.local.json' : 'credentials.json';
@@ -276,6 +302,7 @@ export async function cloudDeploy(projectPath, webContents, options = {}) {
         if (options.message) args.push('-m', options.message);
         if (options.promote) args.push('--promote');
         if (options.preview) args.push('--preview');
+        if (options.password) args.push('--password', options.password);
         if (options.repairBinding) args.push('--repair-binding');
         const { command, args: cliArgs } = getProjectCLISpawnArgs(projectPath, args);
         const useShell = process.platform === 'win32' && command === 'coursecode';
@@ -448,6 +475,35 @@ export async function updatePreviewLink(projectPath, options = {}) {
     return runCLI(args, { cwd: projectPath, projectPath });
 }
 
+/**
+ * List recent immutable deployments for a linked Cloud course.
+ */
+export async function listDeployments(projectPath) {
+    if (!loadToken()) throw new Error('Not authenticated. Please sign in to CourseCode Cloud.');
+    const { slug, orgQuery } = await getCloudCourseRef(projectPath);
+    return cloudApiFetch(`/api/cli/courses/${encodeURIComponent(slug)}/versions${orgQuery}`);
+}
+
+/**
+ * Move the production or preview pointer to an existing deployment.
+ */
+export async function promoteDeployment(projectPath, options = {}) {
+    if (!loadToken()) throw new Error('Not authenticated. Please sign in to CourseCode Cloud.');
+    if (!options.deploymentId) throw new Error('Deployment ID is required.');
+    if (options.target !== 'production' && options.target !== 'preview') {
+        throw new Error('Promotion target must be production or preview.');
+    }
+    const { slug } = await getCloudCourseRef(projectPath);
+    return cloudApiFetch(`/api/cli/courses/${encodeURIComponent(slug)}/promote`, {
+        method: 'POST',
+        body: JSON.stringify({
+            deployment_id: options.deploymentId,
+            target: options.target,
+            reason: options.message || `Promoted to ${options.target} from Desktop`
+        })
+    });
+}
+
 /**
  * Delete a course from CourseCode Cloud via CLI.
  * Cloud-only: does not touch local files.

main/ipc-handlers.js

@@ -3,7 +3,7 @@ import { getAllSettings, saveSetting } from './settings.js';
 import { scanProjects, createProject, openProject, deleteProject, clearCloudBinding, upgradeProject } from './project-manager.js';
 import { startPreview, stopPreview, getPreviewStatus, getPreviewPort, getAllPreviewStatuses } from './preview-manager.js';
 import { exportBuild } from './build-manager.js';
-import { cloudLogin, cloudLogout, getCloudUser, cloudDeploy, getDeployStatus, updatePreviewLink } from './cloud-client.js';
+import { cloudLogin, cloudLogout, getCloudUser, cloudDeploy, getDeployStatus, updatePreviewLink, listDeployments, promoteDeployment } from './cloud-client.js';
 import { getSetupStatus, installCLI, getDownloadUrl, getLatestFrameworkVersion } from './cli-installer.js';
 import {
     sendMessage, stopGeneration, clearConversation, loadHistory,
@@ -61,6 +61,8 @@ export function registerIpcHandlers() {
     handle('cloud:deploy', (e, projectPath, options) => cloudDeploy(projectPath, e.sender, options));
     handle('cloud:getDeployStatus', (_e, projectPath, options) => getDeployStatus(projectPath, options));
     handle('cloud:updatePreviewLink', (_e, projectPath, options) => updatePreviewLink(projectPath, options));
+    handle('cloud:listDeployments', (_e, projectPath) => listDeployments(projectPath));
+    handle('cloud:promoteDeployment', (_e, projectPath, options) => promoteDeployment(projectPath, options));
 
     // --- Settings ---
     handle('settings:get', () => getAllSettings());

preload/index.js

@@ -59,6 +59,8 @@ contextBridge.exposeInMainWorld('api', {
         deploy: (projectPath, options) => ipcRenderer.invoke('cloud:deploy', projectPath, options),
         getDeployStatus: (projectId, options) => ipcRenderer.invoke('cloud:getDeployStatus', projectId, options),
         updatePreviewLink: (projectPath, options) => ipcRenderer.invoke('cloud:updatePreviewLink', projectPath, options),
+        listDeployments: (projectPath) => ipcRenderer.invoke('cloud:listDeployments', projectPath),
+        promoteDeployment: (projectPath, options) => ipcRenderer.invoke('cloud:promoteDeployment', projectPath, options),
         onLoginProgress: (callback) => {
             const handler = (_event, data) => callback(data);
             ipcRenderer.on('cloud:loginProgress', handler);

renderer/src/components/PreviewPasswordControl.svelte

@@ -0,0 +1,109 @@
+<script>
+  import { generatePreviewPassword } from '../lib/preview-password.js';
+
+  let {
+    id = 'preview-password',
+    requirePassword = $bindable(true),
+    password = $bindable(''),
+    disabled = false
+  } = $props();
+
+  function suggestPassword() {
+    password = generatePreviewPassword();
+  }
+</script>
+
+<div class="preview-password-control">
+  <label class="preview-password-toggle">
+    <input type="checkbox" bind:checked={requirePassword} {disabled} />
+    <span>Require password</span>
+  </label>
+
+  {#if requirePassword}
+    <div class="preview-password-row">
+      <input
+        {id}
+        class="preview-password-input"
+        type="text"
+        bind:value={password}
+        disabled={disabled}
+        autocomplete="off"
+        spellcheck="false"
+      />
+      <button type="button" class="preview-password-suggest" disabled={disabled} onclick={suggestPassword}>
+        Suggest
+      </button>
+    </div>
+  {/if}
+</div>
+
+<style>
+  .preview-password-control {
+    display: flex;
+    flex-direction: column;
+    gap: 8px;
+    padding: 10px;
+    border: 1px solid var(--border);
+    border-radius: 8px;
+    background: var(--bg-secondary);
+  }
+
+  .preview-password-toggle {
+    display: inline-flex;
+    align-items: center;
+    gap: 8px;
+    font-size: 12px;
+    font-weight: 600;
+    color: var(--text-primary);
+  }
+
+  .preview-password-toggle input {
+    margin: 0;
+  }
+
+  .preview-password-row {
+    display: grid;
+    grid-template-columns: minmax(0, 1fr) auto;
+    gap: 8px;
+  }
+
+  .preview-password-input {
+    min-width: 0;
+    height: 32px;
+    padding: 0 10px;
+    border: 1px solid var(--border);
+    border-radius: 6px;
+    background: var(--bg-primary);
+    color: var(--text-primary);
+    font: 12px ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
+  }
+
+  .preview-password-input:focus {
+    outline: none;
+    border-color: var(--accent);
+    box-shadow: 0 0 0 2px var(--accent-subtle);
+  }
+
+  .preview-password-suggest {
+    height: 32px;
+    padding: 0 10px;
+    border: 1px solid var(--border);
+    border-radius: 6px;
+    background: var(--bg-primary);
+    color: var(--text-primary);
+    font-size: 12px;
+    font-weight: 600;
+    cursor: pointer;
+  }
+
+  .preview-password-suggest:hover:not(:disabled) {
+    background: var(--bg-secondary);
+  }
+
+  .preview-password-suggest:disabled,
+  .preview-password-input:disabled,
+  .preview-password-toggle input:disabled + span {
+    opacity: 0.6;
+    cursor: not-allowed;
+  }
+</style>

renderer/src/lib/preview-password.js

@@ -0,0 +1,11 @@
+const PASSWORD_CHARS = 'ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz23456789';
+
+export function generatePreviewPassword(length = 16) {
+  const bytes = new Uint8Array(length);
+  if (globalThis.crypto?.getRandomValues) {
+    globalThis.crypto.getRandomValues(bytes);
+  } else {
+    for (let i = 0; i < bytes.length; i += 1) bytes[i] = Math.floor(Math.random() * 256);
+  }
+  return Array.from(bytes, (byte) => PASSWORD_CHARS[byte % PASSWORD_CHARS.length]).join('');
+}