sakusei 0.5.9 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f8f86cb0ba1fda1a5536579ffc06db171359b7d839537bef66a7622dabed68be
-  data.tar.gz: 1eeb757166832e05c87fa8ae7d8a654a4cf2c5abab097b82e4466245d99830d1
+  metadata.gz: 51f82cf68852e0f6c9e8ada98c58a804de32dabb7511e5c390c24cbea42e9c4b
+  data.tar.gz: 4c4f527519dcd4bba30cd39946c6605e8ea1701594f50e6139509200241cda50
 SHA512:
-  metadata.gz: e6d8145acd491414bdaea711ba249557aa887a049b0d7c59788825d1b8946cb93f33a4f5e87be5b3843f2ef8703577fe34dd7c0ec7681f9b55216c897e3aad17
-  data.tar.gz: 07ead103bda8c9d269501f6384f2d42d37efaf718f66237b006a0dc2430974535696d3eb1e1fb1b46b82683afa0eed437dd6a0a590692c01b6fd53f42f0daafa
+  metadata.gz: a6e76264d45720805eb3aaea1b2267bd58e5cb7dd980ee2f53fa6e42dbfffa2cff42c6e6ce9004ab51ea811b139e375511530c6bb8fa63a32fd0101bf83fceb1
+  data.tar.gz: f27568e7685b2c0f28fe3938fe1bf865d15a6b5ad250758a659c565b66e8bd538a929ac73fb34caf9ab6e7c9430e0dea7bb50064125c38c223c2e14192e3e07a

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    sakusei (0.5.9)
+    sakusei (0.6.0)
       erb (~> 4.0)
       listen (~> 3.8)
       thor (~> 1.2)

data/examples/meridian-proposal.md

@@ -8,8 +8,6 @@
   />
 
 
-Report Generated <%= today %>
-
 ## Opportunity
 
 Meridian Property Group manages a portfolio of 340 residential and commercial tenancies across Southeast Queensland. The business runs on strong fundamentals, but operational bandwidth is a growing constraint: leasing coordinators spend the majority of their week on routine correspondence, manual data entry, and chasing approvals through email chains. This is work that AI and automation can largely eliminate.

data/lib/sakusei/builder.rb

@@ -53,11 +53,16 @@ module Sakusei
       style_pack = discover_style_pack
       $stderr.puts "[sakusei] style pack: #{style_pack.name} (#{style_pack.path})"
 
-      $stderr.puts "[sakusei] resolving file includes..."
-      resolved_content = resolve_files
+      if sandboxed?
+        $stderr.puts "[sakusei] sandboxed: skipping file includes and ERB"
+        processed_content = File.read(@source_file)
+      else
+        $stderr.puts "[sakusei] resolving file includes..."
+        resolved_content = resolve_files
 
-      $stderr.puts "[sakusei] processing ERB..."
-      processed_content = process_erb(resolved_content)
+        $stderr.puts "[sakusei] processing ERB..."
+        processed_content = process_erb(resolved_content)
+      end
 
       processed_content = expand_break_syntax(processed_content)
       processed_content = process_vue(processed_content, style_pack)
@@ -66,6 +71,10 @@ module Sakusei
       [style_pack, processed_content]
     end
 
+    def sandboxed?
+      !!@options[:sandboxed]
+    end
+
     def discover_style_pack
       StylePack.discover(@options[:source_dir] || @source_dir, @options[:style])
     end

data/lib/sakusei/cli.rb

@@ -24,6 +24,7 @@ module Sakusei
     option :stylesheet, aliases: '-css', desc: 'Path to CSS stylesheet'
     option :page_breaks, aliases: '-p', type: :boolean, default: false, desc: 'Add page breaks between files'
     option :open, type: :boolean, default: false, desc: 'Open the PDF after building'
+    option :sandboxed, type: :boolean, default: false, desc: 'Treat input as inert markdown: no ERB, no @include, images restricted to the source directory'
     def build(*files)
       raise Error, 'No input files provided' if files.empty?
 

data/lib/sakusei/converter_base.rb

@@ -18,6 +18,9 @@ module Sakusei
 
       image_paths.each do |rel_path|
         src = File.expand_path(rel_path, @source_dir)
+        # Sandboxed builds must not read files outside the source directory
+        # (image_paths already excludes absolute paths; this blocks ../ escapes).
+        next if sandboxed? && !src.start_with?(File.expand_path(@source_dir) + File::SEPARATOR)
         next unless File.exist?(src)
 
         dest = File.join(temp_dir, rel_path)
@@ -26,6 +29,10 @@ module Sakusei
       end
     end
 
+    def sandboxed?
+      !!@options[:sandboxed]
+    end
+
     def image_paths
       paths = []
       @content.scan(/!\[[^\]]*\]\(([^)]+)\)/) { |m| paths << m[0].strip }

data/lib/sakusei/multi_file_builder.rb

@@ -60,11 +60,12 @@ module Sakusei
       parts = []
 
       @files.each do |file|
-        content = File.read(file)
-
-        # Resolve includes within each file
-        resolver = FileResolver.new(file)
-        resolved = resolver.resolve
+        resolved = if @options[:sandboxed]
+                     File.read(file)
+                   else
+                     # Resolve includes within each file
+                     FileResolver.new(file).resolve
+                   end
 
         parts << resolved
 

data/lib/sakusei/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Sakusei
-  VERSION = '0.5.9'
+  VERSION = '0.6.0'
 end

data/lib/sakusei/vue_processor.rb

@@ -164,7 +164,7 @@ module Sakusei
     end
 
     def vue_renderer_script
-      File.expand_path('../vue_renderer.js', __FILE__)
+      File.expand_path('../vue_renderer.cjs', __FILE__)
     end
 
     def parse_attributes(attrs_string)

data/sakusei.gemspec

@@ -14,7 +14,14 @@ Gem::Specification.new do |spec|
   spec.required_ruby_version = '>= 3.0.0'
 
   spec.files = Dir.chdir(File.expand_path(__dir__)) do
-    `git ls-files -z`.split("\x0").reject { |f| f.match(%r{\A(?:test|spec|features)/}) }
+    if File.directory?('.git') && system('git --version', out: File::NULL, err: File::NULL)
+      `git ls-files -z`.split("\x0").reject { |f| f.match(%r{\A(?:test|spec|features)/}) }
+    else
+      # No git (e.g. vendored via `git archive` inside a Docker image) —
+      # glob the shipped tree instead.
+      Dir.glob('{lib,bin,examples}/**/*', File::FNM_DOTMATCH).select { |f| File.file?(f) } +
+        Dir.glob('*').select { |f| File.file?(f) }
+    end
   end
   spec.bindir        = 'bin'
   spec.executables   = %w[sakusei sakusei-preview]

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: sakusei
 version: !ruby/object:Gem::Version
-  version: 0.5.9
+  version: 0.6.0
 platform: ruby
 authors:
 - Keith Rowell
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2026-05-04 00:00:00.000000000 Z
+date: 2026-07-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: thor
@@ -137,7 +137,7 @@ files:
 - lib/sakusei/style_preview.rb
 - lib/sakusei/version.rb
 - lib/sakusei/vue_processor.rb
-- lib/sakusei/vue_renderer.js
+- lib/sakusei/vue_renderer.cjs
 - lib/templates/base.css
 - lib/templates/default_style_pack/.gitignore
 - lib/templates/default_style_pack/components/HelloWorld.vue