@brianmsm/quarto-bento 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Brian Norman Peña Calero
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,94 @@
-# Temporary Holding Version
+# Quarto-Bento
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Quarto-Bento connects [Quarto](https://quarto.org/) authoring and computation
+with [Bento](https://github.com/nyblnet/bento) slide design. It provides a local
+Studio, reviewed QMD synchronization and an offline standalone Bento HTML
+output.
+
+This npm CLI package is named `@brianmsm/quarto-bento` and currently targets
+**Linux only**. Version `0.1.1` is a development release, not a stable v1.
+
+## Requirements
+
+- Linux.
+- Node.js 22 or later to run the `qbento` command launcher.
+- Deno 2.9.6 on `PATH` to execute the bundled TypeScript runtime.
+- Quarto 1.10.19 for rendering and computation.
+- Any language engines, packages and local inputs used by your QMD documents.
+
+The npm package bundles Quarto-Bento's runtime and does not download JavaScript
+dependencies during installation or execution. It does not install or manage
+Node, Deno, Quarto, Chromium or computation environments. Only run QMD and
+executable code you trust.
+
+## Install from npm
+
+With Node, Deno and Quarto already installed, install the pinned CLI version:
+
+```sh
+npm install -g @brianmsm/quarto-bento@0.1.1
+qbento --version
+qbento doctor
+```
+
+If your npm global prefix is not writable, use a user-owned prefix instead:
+
+```sh
+npm install -g --prefix "$HOME/.local" \
+  @brianmsm/quarto-bento@0.1.1
+export PATH="$HOME/.local/bin:$PATH"
+```
+
+## Install with mise
+
+Mise can manage Node, Deno and the npm CLI together. Quarto remains a separate
+user-installed dependency:
+
+```sh
+mise use -g node@26.10.0 deno@2.9.6 \
+  'npm:@brianmsm/quarto-bento[allow_low_downloads=true]@0.1.1'
+qbento doctor
+```
+
+Recent mise versions require explicit approval for new or low-download packages.
+`allow_low_downloads=true` approves only this package after checking its name
+and publisher; it does not enable build scripts or change global security
+settings. See
+[mise npm reputation checks](https://mise.jdx.dev/dev-tools/backends/npm#low-download-and-new-packages).
+
+The package has no npm install hooks or JavaScript package dependencies. The
+[installation guide](https://github.com/brianmsm/quarto-bento/blob/main/docs/NPM.md)
+also covers local tarball installation, requirements and supported scope.
+
+## Basic use
+
+```sh
+qbento render /absolute/path/to/presentation.qmd
+qbento edit /absolute/path/to/presentation.qmd
+```
+
+`edit` prints a local Studio URL. Studio saves design and pending content to
+`.qbento/` without silently rewriting QMD. Review proposed source changes before
+applying synchronization. Recalculation executes QMD again and retains saved
+design. See the
+[English usage guide](https://github.com/brianmsm/quarto-bento/blob/main/docs/USAGE.md)
+for the workflow and recovery behavior.
+
+## Project and license scope
+
+The Linux implementation supports bounded QMD syntax and documented workflows;
+it is not a general converter for arbitrary Quarto projects. Read the
+[acceptance limits](https://github.com/brianmsm/quarto-bento/blob/main/docs/ACCEPTANCE_GAPS.md)
+before relying on unsupported constructs. Windows and macOS have not been
+qualified for this npm package.
+
+Quarto-Bento's authored code and documentation use the MIT License. The
+distribution also contains Bento and other third-party assets under their own
+terms. Four historical complete package-license-source gaps remain documented;
+their presence is not resolved by packaging. See the
+[license audit](https://github.com/brianmsm/quarto-bento/blob/main/docs/evidence/RUNTIME-LICENSE-SOURCE-AUDIT.md)
+and the bundled notices.
+
+For current implementation status, contribution instructions and security
+reporting, see the
+[project repository](https://github.com/brianmsm/quarto-bento).

package/bin/qbento-npm.mjs

@@ -0,0 +1,62 @@
+#!/usr/bin/env node
+import { spawn } from "node:child_process";
+import { readFileSync, realpathSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+// Resolve the installed file, not the npm/mise symlink or the caller's cwd.
+const packageRoot = resolve(
+  dirname(realpathSync(fileURLToPath(import.meta.url))),
+  "..",
+);
+const args = process.argv.slice(2);
+if (args.length === 1 && args[0] === "--version") {
+  const metadata = JSON.parse(
+    readFileSync(resolve(packageRoot, "package.json"), "utf8"),
+  );
+  console.log(`qbento ${metadata.version}`);
+} else {
+  const cli = resolve(packageRoot, "distribution/runtime/src/cli.ts");
+  const child = spawn("deno", [
+    "run",
+    "--no-config",
+    "--no-remote",
+    "--no-npm",
+    "--allow-read",
+    "--allow-write",
+    "--allow-run",
+    "--allow-env",
+    "--allow-net=127.0.0.1",
+    cli,
+    ...args,
+  ], { stdio: "inherit", shell: false });
+  const forward = (signal) => {
+    try {
+      child.kill(signal);
+    } catch { /* Child may already have exited. */ }
+  };
+  const interrupt = () => forward("SIGINT");
+  const terminate = () => forward("SIGTERM");
+  process.on("SIGINT", interrupt);
+  process.on("SIGTERM", terminate);
+  child.once("error", (error) => {
+    if (error.code === "ENOENT") {
+      console.error(
+        "QBENTO_DENO_REQUIRED: Install Deno and make it available on PATH (tested: 2.9.6). Quarto must also be installed for rendering.",
+      );
+      process.exitCode = 127;
+    } else {
+      console.error(`QBENTO_START_FAILED: ${error.message}`);
+      process.exitCode = 1;
+    }
+  });
+  child.once("close", (code, signal) => {
+    process.removeListener("SIGINT", interrupt);
+    process.removeListener("SIGTERM", terminate);
+    if (signal) {
+      process.kill(process.pid, signal);
+    } else if (code !== null && process.exitCode === undefined) {
+      process.exitCode = code;
+    }
+  });
+}

package/distribution/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Brian Norman Peña Calero
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/distribution/PACKAGING.md

@@ -0,0 +1,59 @@
+# Using the portable development directory
+
+This directory is a local development build, not a public v1 release or an
+installer. Keep the complete directory together when moving it. It requires
+installed Deno 2, Quarto and the language packages used by your QMD. It does not
+install or manage computation environments. Only run trusted QMD and code.
+
+From your project directory, use the launcher's absolute path (quote spaces):
+
+```sh
+'/path/to/qbento development/bin/qbento' doctor
+'/path/to/qbento development/bin/qbento' render 'presentation.qmd'
+'/path/to/qbento development/bin/qbento' edit 'presentation.qmd'
+```
+
+On Windows, the corresponding launcher is `bin\qbento.cmd`. Its presence does
+not establish native Windows validation. This build has local Linux evidence;
+macOS/Windows execution remains future work. The public source repository has a
+manual Linux smoke workflow; no hosted result is inferred from its presence.
+Preserve the Unix executable bit when archiving, or invoke `bin/qbento` with
+`sh`.
+
+`edit` prints a local Studio URL. **Guardar proyecto** saves design and pending
+content to `.qbento/`, leaving QMD unchanged. Review the proposed source changes
+before applying sync; **Recalcular** executes QMD and combines its results with
+saved design. Save, sync and render are separate operations. Capture edits made
+to a standalone HTML copy with `capture presentation.qmd edited-copy.html`
+before rendering; capture requires a matching project publication receipt.
+
+For reconstruction, keep QMD, input data/assets and versioned `.qbento/`
+project/state files, plus any design registry or widget resources your project
+uses. The generated HTML is rebuildable. Computation dependencies remain your
+responsibility; cross-platform pixel identity is not promised.
+
+`init presentation.qmd` installs the self-contained Quarto extension into the
+project without replacing existing configuration. Ordinary `quarto render`
+integration is currently validated only on Linux. The installed extension is
+independent of this portable directory after successful initialization.
+
+The root `manifest.json` records the source revision and each payload's path,
+size, hash and executable flag. It is an integrity inventory, not a signature.
+Quarto-Bento's own code and documentation use the MIT License, copyright (c)
+2026 Brian Norman Peña Calero. The full terms are in the root `LICENSE` and
+`runtime/LICENSE`; initialization also copies them into the installed
+extension's `runtime/LICENSE`. Generated HTML retains the full project license
+with a separate `Quarto-Bento` label. Bento's pinned licenses/notices, font
+texts and dependency provenance remain under `runtime/vendor/bento/` with their
+own terms. The complete third-party review and versioned v1 scope remain open.
+The public source repository documents current Linux behavior and these
+remaining provenance limits; public source availability does not declare a
+stable release.
+
+The full source checkout contains development, acceptance and CI documentation.
+Those source-only files and verification artifacts are not part of this portable
+directory. The separate
+[npm CLI package](https://github.com/brianmsm/quarto-bento/blob/main/docs/NPM.md)
+wraps the portable runtime with a `qbento` launcher. Version `0.1.0` is
+available for Linux through npm and mise; see that guide for installation
+commands and external Node, Deno and Quarto requirements.

package/distribution/bin/qbento

@@ -0,0 +1,5 @@
+#!/bin/sh
+# Portable development launcher: keep caller's working directory and arguments.
+set -eu
+qbento_bin=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd -P)
+exec deno run --no-config --no-remote --no-npm --allow-read --allow-write --allow-run --allow-env --allow-net=127.0.0.1 "$qbento_bin/../runtime/src/cli.ts" "$@"

package/distribution/bin/qbento.cmd

@@ -0,0 +1,4 @@
+@echo off
+setlocal
+deno run --no-config --no-remote --no-npm --allow-read --allow-write --allow-run --allow-env --allow-net=127.0.0.1 "%~dp0..\runtime\src\cli.ts" %*
+exit /b %errorlevel%