@cenk1cenk2/md-printer 3.0.0 → 3.1.1

package/README.md

@@ -141,7 +141,7 @@ md-printer document.md out.pdf --preview --no-open
 ```
 
 - `-p, --preview` rebuilds when the input file, the template (components, imports, `settings.json`, translations) or a local asset used by the page changes. Every build rewrites the output file, the same one a normal run writes; reading from stdin without an output argument only previews. `-O` is not supported.
-- It starts a local preview server and opens it in an app window of the discovered browser, using a throwaway profile. The page has HTML, Split and PDF tabs. Build errors, such as Svelte compile errors, are shown in an overlay and cleared by the next successful build. Closing the window ends the session, as does Ctrl+C.
+- It starts a local preview server and opens it in an app window of the discovered browser, using a throwaway profile. The page has HTML, Split and PDF tabs. Build errors, such as Svelte compile errors, are shown in an overlay and cleared by the next successful build. Closing the window ends the session. Ctrl+C ends it too, after closing the browser, the preview server and the watcher, and exits with 130; a second Ctrl+C exits at once.
   - `--host` sets the loopback host, default `127.0.0.1`.
   - `--port` sets the port, default `0` (random). A port in use fails the run with an error.
   - It serves the files next to the input, except dotfiles such as `.env`.
@@ -303,7 +303,7 @@ USAGE
     silent|direct|fatal|error|warn|info|verbose|debug|trace] [-I] [-f
     md|yaml|yml] [-F pdf|html] [-O] [-t <value>] [-T <value>] [-l <value>] [-b
     <value>] [--continuous] [-p] [--host 127.0.0.1|localhost|::1] [--port
-    <value>] [--open] [--sign] [--sign-provider <value>] [--sign-certificate
+    <value>] [--open] [--sign] [--sign-provider a-trust] [--sign-certificate
     <value>]
 
 ARGUMENTS
@@ -349,9 +349,10 @@ FLAGS
       --sign-certificate=<value>  Signer certificate (DER or PEM) used for the
                                   visible signature block and to verify the
                                   returned signature.
-      --sign-provider=<value>     Signature provider, defaults to a-trust.
+      --sign-provider=<option>    Signature provider, defaults to a-trust.
                                   Overwrites the one defined in front-matter and
                                   template settings.
+                                  <options: a-trust>
 
 CLI FLAGS
   --log-level=<option>  [default: INFO, env: LOG_LEVEL] Set the log level of the

package/bin/dev.js

@@ -26,8 +26,6 @@ async function main() {
 
   await import('source-map-support').then((lib) => lib.install())
 
-  await import('@cenk1cenk2/oclif-common').then((mod) => mod.setup())
-
   const { execute } = await import('@oclif/core')
 
   return execute({ development: true, dir: import.meta.url })

package/bin/run.js

@@ -4,7 +4,6 @@ async function main() {
   const { execute } = await import('@oclif/core')
 
   await import('source-map-support').then((lib) => lib.install())
-  await import('@cenk1cenk2/oclif-common').then((lib) => lib.setup())
 
   await execute({ dir: import.meta.url })
 }

package/dist/commands/index.mjs

@@ -1,190 +1,39 @@
-import { InputFileType, OutputFileType } from "../constants/file.constants.mjs";
-import { BrowserService } from "../services/renderer/browser.service.mjs";
-import { PrinterService } from "../services/printer.service.mjs";
-import { PreviewService } from "../services/session/preview.service.mjs";
-import { SessionService } from "../services/session/session.service.mjs";
-import { PrinterModule } from "../services/printer.module.mjs";
-import "../services/index.mjs";
-import { mkdir } from "fs/promises";
-import { dirname } from "path";
-import { text } from "stream/consumers";
-import writeFileAtomic from "write-file-atomic";
-import { Args, CliModule, Command, Flags, JsonParser, ParserService, YamlParser } from "@cenk1cenk2/oclif-common";
+import __decorate from "../_virtual/_@oxc-project_runtime@0.153.0/helpers/esm/decorate.mjs";
+import { MdPrinterHandler } from "../modules/md-printer/md-printer.handler.mjs";
+import { MdPrinterModule } from "../modules/md-printer/md-printer.module.mjs";
+import { MdPrinterSchema } from "../modules/md-printer/md-printer.schema.mjs";
+import { Args, Command, Flags, UseHandler } from "@cenk1cenk2/oclif-common";
 //#region src/commands/index.ts
-var MDPrinter = class extends Command {
+let MDPrinter = class MDPrinter extends Command {
 	static description = "Renders a markdown or yaml file through a Svelte template into a PDF or HTML document.";
 	static flags = {
-		stdin: Flags.boolean({
-			char: "I",
-			description: "Read the input from stdin."
-		}),
-		["input-filetype"]: Flags.string({
-			char: "f",
-			options: Object.values(InputFileType),
-			description: "Input file type. Detected from the file extension, markdown for stdin and unknown extensions."
-		}),
-		["output-filetype"]: Flags.string({
-			char: "F",
-			options: Object.values(OutputFileType),
-			description: "Output file type, defaults to pdf. Overwrites the one defined in front-matter."
-		}),
-		stdout: Flags.boolean({
-			char: "O",
-			description: "Write the output to stdout instead of a file."
-		}),
-		template: Flags.string({
-			char: "t",
-			description: "Built-in template name or path to a template directory, defaults to \"default\". Overwrites the one defined in front-matter."
-		}),
-		title: Flags.string({
-			char: "T",
-			description: "Document title. Overwrites the one defined in front-matter or the template."
-		}),
-		language: Flags.string({
-			char: "l",
-			description: "Language for template translations. Overwrites the one defined in front-matter and template settings."
-		}),
-		browser: Flags.string({
-			char: "b",
-			description: "Browser executable used for printing. Discovered automatically when omitted (Brave, Chrome, Chromium, Edge)."
-		}),
-		continuous: Flags.boolean({ description: "Render the PDF as a single continuous page without page breaks." }),
-		preview: Flags.boolean({
-			char: "p",
-			description: "Rebuild whenever the input, the template or its assets change, show the HTML and the PDF in a live preview and rewrite the output file when there is one."
-		}),
-		host: Flags.string({
-			description: "Loopback host for the preview server, it serves the files next to the input and is never exposed to the network.",
-			options: [
-				"127.0.0.1",
-				"localhost",
-				"::1"
-			],
-			default: "127.0.0.1"
-		}),
-		port: Flags.integer({
-			description: "Port for the preview server, random when 0.",
-			default: 0
-		}),
-		open: Flags.boolean({
-			description: "Open the preview window, --no-open keeps rebuilding and writing without one.",
-			default: true,
-			allowNo: true
-		}),
-		sign: Flags.boolean({ description: "Sign the PDF with a qualified electronic signature through ID Austria (A-Trust)." }),
-		["sign-provider"]: Flags.string({ description: "Signature provider, defaults to a-trust. Overwrites the one defined in front-matter and template settings." }),
-		["sign-certificate"]: Flags.string({ description: "Signer certificate (DER or PEM) used for the visible signature block and to verify the returned signature." })
+		stdin: Flags.boolean({ char: "I" }),
+		["input-filetype"]: Flags.string({ char: "f" }),
+		["output-filetype"]: Flags.string({ char: "F" }),
+		stdout: Flags.boolean({ char: "O" }),
+		template: Flags.string({ char: "t" }),
+		title: Flags.string({ char: "T" }),
+		language: Flags.string({ char: "l" }),
+		browser: Flags.string({ char: "b" }),
+		continuous: Flags.boolean(),
+		preview: Flags.boolean({ char: "p" }),
+		host: Flags.string(),
+		port: Flags.integer(),
+		open: Flags.boolean({ allowNo: true }),
+		sign: Flags.boolean(),
+		["sign-provider"]: Flags.string(),
+		["sign-certificate"]: Flags.string()
 	};
 	static args = {
-		file: Args.string({
-			description: "Markdown or yaml file to render.",
-			ignoreStdin: true
-		}),
-		output: Args.string({
-			description: "Output file. Overwrites the one defined in front-matter.",
-			required: false,
-			ignoreStdin: true
-		})
+		file: Args.string({ ignoreStdin: true }),
+		output: Args.string({ ignoreStdin: true })
 	};
-	printer;
-	browser;
-	register(_cli, options) {
-		const cli = CliModule.forRoot({
-			...options,
-			logger: { stderr: true }
-		});
-		cli.imports.push(PrinterModule.forRoot({ browser: this.flags.browser }));
-		return cli;
-	}
-	async shouldRunBefore() {
-		await this.app.get(ParserService).register(JsonParser, YamlParser);
-		this.printer = this.app.get(PrinterService);
-		this.browser = this.app.get(BrowserService);
-	}
-	async run() {
-		const flags = {
-			file: this.flags.stdin ? void 0 : this.args.file,
-			output: this.flags.stdin ? this.args.output ?? this.args.file : this.args.output,
-			stdin: this.flags.stdin ? await text(process.stdin) : void 0,
-			inputFiletype: this.flags["input-filetype"],
-			outputFiletype: this.flags["output-filetype"],
-			stdout: this.flags.stdout,
-			template: this.flags.template,
-			title: this.flags.title,
-			language: this.flags.language,
-			continuous: this.flags.continuous,
-			sign: this.flags.sign,
-			signProvider: this.flags["sign-provider"],
-			signCertificate: this.flags["sign-certificate"]
-		};
-		if (this.flags.preview) await this.session(flags);
-		else await this.print(flags);
-	}
-	async print(flags) {
-		const input = await this.printer.input(flags);
-		const ctx = {
-			input,
-			options: await this.printer.options(flags, input)
-		};
-		this.logger.debug("Options: %o", ctx.options);
-		await this.printer.prepare(ctx);
-		const document = await this.printer.document(ctx, await this.printer.bundle(ctx.options));
-		let { content } = await this.printer.output(ctx, document);
-		if (ctx.signature) {
-			content = await this.printer.sign(ctx, content);
-			this.logger.info("Document is signed.");
-		}
-		await this.write(ctx, content);
-	}
-	async session(flags) {
-		if (flags.stdout) throw new Error("Writing to stdout is not supported with --preview.");
-		const session = this.app.get(SessionService);
-		const preview = this.app.get(PreviewService);
-		let writes = Promise.resolve();
-		session.on("building", () => preview.building());
-		session.on("failed", (err) => {
-			this.logger.error(err.message);
-			preview.failed(err);
-		});
-		session.on("ready", async (build) => {
-			preview.ready(build);
-			if (!build.ctx.options.dest) {
-				this.logger.info("Rebuilt in %dms.", build.ms);
-				return;
-			}
-			session.ignore(build.ctx.options.dest);
-			writes = writes.then(() => this.write(build.ctx, build.output)).catch((err) => this.logger.error(err.message));
-			await writes;
-		});
-		if (flags.sign) this.logger.warn("Signing is skipped while previewing, run without --preview to sign the document.");
-		process.removeAllListeners("SIGINT");
-		process.removeAllListeners("SIGTERM");
-		const stopped = new Promise((resolve) => {
-			process.once("SIGINT", () => resolve());
-			process.once("SIGTERM", () => resolve());
-		});
-		await session.start(flags);
-		const url = await preview.listen({
-			host: this.flags.host,
-			port: this.flags.port
-		});
-		this.logger.info("Preview is running at %s, press Ctrl+C to stop.", url);
-		await Promise.race([stopped, this.flags.open ? preview.open(this.browser.executable(), url) : new Promise(() => void 0)]);
-		await preview.close();
-		await session.stop();
-		await writes;
-	}
-	async write(ctx, content) {
-		const { dest } = ctx.options;
-		if (!dest) {
-			if (!this.flags.stdout) throw new Error("No output file to write, pass an output argument, set dest in front-matter or use --stdout.");
-			process.stdout.write(content);
-			return;
-		}
-		await mkdir(dirname(dest), { recursive: true });
-		await writeFileAtomic(dest, content);
-		this.logger.info("Written: %s", dest);
-	}
 };
+MDPrinter = __decorate([UseHandler({
+	module: MdPrinterModule,
+	handler: MdPrinterHandler,
+	schema: MdPrinterSchema
+})], MDPrinter);
+var commands_default = MDPrinter;
 //#endregion
-export { MDPrinter as default };
+export { commands_default as default };

package/dist/constants/index.mjs

@@ -1,3 +1,5 @@
 import { ContextKey, DEFAULT_HIGHLIGHT_STYLE, DEFAULT_LANGUAGE, DEFAULT_PDF_OPTIONS, DEFAULT_TEMPLATE, DIRECTIVE_TAG, Directory, I18N_ACCEPTED_TYPES, MediaType, ModuleSpecifier, PAGE_BREAK_CLASS, PRINTER_MODULE_OPTIONS, RenderMode, TAILWIND_STYLE_LANG, TemplateFiles } from "./template.constants.mjs";
 import { InputFileType, OutputFileType } from "./file.constants.mjs";
-export { ContextKey, DEFAULT_HIGHLIGHT_STYLE, DEFAULT_LANGUAGE, DEFAULT_PDF_OPTIONS, DEFAULT_TEMPLATE, DIRECTIVE_TAG, Directory, I18N_ACCEPTED_TYPES, InputFileType, MediaType, ModuleSpecifier, OutputFileType, PAGE_BREAK_CLASS, PRINTER_MODULE_OPTIONS, RenderMode, TAILWIND_STYLE_LANG, TemplateFiles };
+import { PreviewHost } from "./preview.constants.mjs";
+import { SignatureProvider } from "./signature.constants.mjs";
+export { ContextKey, DEFAULT_HIGHLIGHT_STYLE, DEFAULT_LANGUAGE, DEFAULT_PDF_OPTIONS, DEFAULT_TEMPLATE, DIRECTIVE_TAG, Directory, I18N_ACCEPTED_TYPES, InputFileType, MediaType, ModuleSpecifier, OutputFileType, PAGE_BREAK_CLASS, PRINTER_MODULE_OPTIONS, PreviewHost, RenderMode, SignatureProvider, TAILWIND_STYLE_LANG, TemplateFiles };

package/dist/constants/preview.constants.mjs

@@ -0,0 +1,9 @@
+//#region src/constants/preview.constants.ts
+let PreviewHost = /* @__PURE__ */ function(PreviewHost) {
+	PreviewHost["IPV4"] = "127.0.0.1";
+	PreviewHost["LOCALHOST"] = "localhost";
+	PreviewHost["IPV6"] = "::1";
+	return PreviewHost;
+}({});
+//#endregion
+export { PreviewHost };

package/dist/constants/signature.constants.mjs

@@ -0,0 +1,7 @@
+//#region src/constants/signature.constants.ts
+let SignatureProvider = /* @__PURE__ */ function(SignatureProvider) {
+	SignatureProvider["A_TRUST"] = "a-trust";
+	return SignatureProvider;
+}({});
+//#endregion
+export { SignatureProvider };

package/dist/modules/md-printer/md-printer.handler.mjs

@@ -0,0 +1,113 @@
+import __decorateMetadata from "../../_virtual/_@oxc-project_runtime@0.153.0/helpers/esm/decorateMetadata.mjs";
+import __decorate from "../../_virtual/_@oxc-project_runtime@0.153.0/helpers/esm/decorate.mjs";
+import { BrowserService } from "../../services/renderer/browser.service.mjs";
+import { PrinterService } from "../../services/printer.service.mjs";
+import { PreviewService } from "../../services/session/preview.service.mjs";
+import { SessionService } from "../../services/session/session.service.mjs";
+import "../../services/index.mjs";
+import { Injectable } from "@nestjs/common";
+import { mkdir } from "fs/promises";
+import { dirname } from "path";
+import { text } from "stream/consumers";
+import writeFileAtomic from "write-file-atomic";
+import { LoggerService } from "@cenk1cenk2/oclif-common";
+//#region src/modules/md-printer/md-printer.handler.ts
+let MdPrinterHandler = class MdPrinterHandler {
+	logger;
+	printer;
+	browser;
+	session;
+	preview;
+	constructor(logger, printer, browser, session, preview) {
+		this.logger = logger;
+		this.printer = printer;
+		this.browser = browser;
+		this.session = session;
+		this.preview = preview;
+	}
+	async run(context) {
+		const { flags, args } = context;
+		const options = {
+			...args.file !== void 0 ? { file: args.file } : { stdin: await text(process.stdin) },
+			output: args.output,
+			inputFiletype: flags["input-filetype"],
+			outputFiletype: flags["output-filetype"],
+			stdout: flags.stdout,
+			template: flags.template,
+			title: flags.title,
+			language: flags.language,
+			continuous: flags.continuous,
+			sign: flags.sign,
+			signProvider: flags["sign-provider"],
+			signCertificate: flags["sign-certificate"]
+		};
+		if (flags.preview) await this.watch(context, options);
+		else await this.print(options);
+	}
+	async print(flags) {
+		const input = await this.printer.input(flags);
+		const ctx = {
+			input,
+			options: await this.printer.options(flags, input)
+		};
+		this.logger.debug("Options: %o", ctx.options);
+		await this.printer.prepare(ctx);
+		const document = await this.printer.document(ctx, await this.printer.bundle(ctx.options));
+		let { content } = await this.printer.output(ctx, document);
+		if (ctx.signature) {
+			content = await this.printer.sign(ctx, content);
+			this.logger.info("Document is signed.");
+		}
+		await this.write(ctx, content, flags.stdout);
+	}
+	async watch({ flags, signal }, options) {
+		let writes = Promise.resolve();
+		this.session.on("building", () => this.preview.building());
+		this.session.on("failed", (err) => {
+			this.logger.error(err.message);
+			this.preview.failed(err);
+		});
+		this.session.on("ready", async (build) => {
+			this.preview.ready(build);
+			if (!build.ctx.options.dest) {
+				this.logger.info("Rebuilt in %dms.", build.ms);
+				return;
+			}
+			this.session.ignore(build.ctx.options.dest);
+			writes = writes.then(() => this.write(build.ctx, build.output, options.stdout)).catch((err) => this.logger.error(err.message));
+			await writes;
+		});
+		if (options.sign) this.logger.warn("Signing is skipped while previewing, run without --preview to sign the document.");
+		const stopped = new Promise((resolve) => signal.addEventListener("abort", () => resolve(), { once: true }));
+		await this.session.start(options);
+		const url = await this.preview.listen({
+			host: flags.host,
+			port: flags.port
+		});
+		this.logger.info("Preview is running at %s, press Ctrl+C to stop.", url);
+		await Promise.race([stopped, flags.open ? this.preview.open(this.browser.executable(), url) : new Promise(() => void 0)]);
+		await this.preview.close();
+		await this.session.stop();
+		await writes;
+	}
+	async write(ctx, content, stdout) {
+		const { dest } = ctx.options;
+		if (!dest) {
+			if (!stdout) throw new Error("No output file to write, pass an output argument, set dest in front-matter or use --stdout.");
+			process.stdout.write(content);
+			return;
+		}
+		await mkdir(dirname(dest), { recursive: true });
+		await writeFileAtomic(dest, content);
+		this.logger.info("Written: %s", dest);
+	}
+};
+MdPrinterHandler = __decorate([Injectable(), __decorateMetadata("design:paramtypes", [
+	typeof LoggerService === "undefined" ? Object : LoggerService,
+	typeof PrinterService === "undefined" ? Object : PrinterService,
+	typeof BrowserService === "undefined" ? Object : BrowserService,
+	typeof SessionService === "undefined" ? Object : SessionService,
+	typeof PreviewService === "undefined" ? Object : PreviewService
+])], MdPrinterHandler);
+//#endregion
+export { MdPrinterHandler };

package/dist/modules/md-printer/md-printer.module.mjs

@@ -0,0 +1,21 @@
+import __decorate from "../../_virtual/_@oxc-project_runtime@0.153.0/helpers/esm/decorate.mjs";
+import { PrinterModule } from "../../services/printer.module.mjs";
+import "../../services/index.mjs";
+import { MdPrinterHandler } from "./md-printer.handler.mjs";
+import { Module } from "@nestjs/common";
+import { CommandContext, LogLevels, LoggerModule, LogoModule } from "@cenk1cenk2/oclif-common";
+//#region src/modules/md-printer/md-printer.module.ts
+let MdPrinterModule = class MdPrinterModule {};
+MdPrinterModule = __decorate([Module({
+	imports: [
+		LoggerModule.forRoot({ stderr: Object.values(LogLevels) }),
+		LogoModule.forRoot(),
+		PrinterModule.forRootAsync({
+			inject: [CommandContext],
+			useFactory: ({ flags }) => ({ browser: flags.browser })
+		})
+	],
+	providers: [MdPrinterHandler]
+})], MdPrinterModule);
+//#endregion
+export { MdPrinterModule };

package/dist/modules/md-printer/md-printer.schema.mjs

@@ -0,0 +1,50 @@
+import { InputFileType, OutputFileType } from "../../constants/file.constants.mjs";
+import { PreviewHost } from "../../constants/preview.constants.mjs";
+import { SignatureProvider } from "../../constants/signature.constants.mjs";
+import { z } from "zod";
+//#region src/modules/md-printer/md-printer.schema.ts
+const MdPrinterSchema = z.object({
+	flags: z.object({
+		stdin: z.boolean().default(false).describe("Read the input from stdin."),
+		["input-filetype"]: z.enum(InputFileType).optional().describe("Input file type. Detected from the file extension, markdown for stdin and unknown extensions."),
+		["output-filetype"]: z.enum(OutputFileType).optional().describe("Output file type, defaults to pdf. Overwrites the one defined in front-matter."),
+		stdout: z.boolean().default(false).describe("Write the output to stdout instead of a file."),
+		template: z.string().optional().describe("Built-in template name or path to a template directory, defaults to \"default\". Overwrites the one defined in front-matter."),
+		title: z.string().optional().describe("Document title. Overwrites the one defined in front-matter or the template."),
+		language: z.string().optional().describe("Language for template translations. Overwrites the one defined in front-matter and template settings."),
+		browser: z.string().optional().describe("Browser executable used for printing. Discovered automatically when omitted (Brave, Chrome, Chromium, Edge)."),
+		continuous: z.boolean().default(false).describe("Render the PDF as a single continuous page without page breaks."),
+		preview: z.boolean().default(false).describe("Rebuild whenever the input, the template or its assets change, show the HTML and the PDF in a live preview and rewrite the output file when there is one."),
+		host: z.enum(PreviewHost).default("127.0.0.1").describe("Loopback host for the preview server, it serves the files next to the input and is never exposed to the network."),
+		port: z.number().int().min(0).max(65535).default(0).describe("Port for the preview server, random when 0."),
+		open: z.boolean().default(true).describe("Open the preview window, --no-open keeps rebuilding and writing without one."),
+		sign: z.boolean().default(false).describe("Sign the PDF with a qualified electronic signature through ID Austria (A-Trust)."),
+		["sign-provider"]: z.enum(SignatureProvider).optional().describe("Signature provider, defaults to a-trust. Overwrites the one defined in front-matter and template settings."),
+		["sign-certificate"]: z.string().optional().describe("Signer certificate (DER or PEM) used for the visible signature block and to verify the returned signature.")
+	}),
+	args: z.object({
+		file: z.string().optional().describe("Markdown or yaml file to render."),
+		output: z.string().optional().describe("Output file. Overwrites the one defined in front-matter.")
+	})
+}).superRefine(({ flags, args }, ctx) => {
+	if (!flags.stdin && !args.file) ctx.addIssue({
+		code: "custom",
+		message: "Either --stdin or file argument must be provided."
+	});
+	if (flags.stdin && args.output) ctx.addIssue({
+		code: "custom",
+		message: "Reading from --stdin takes only the output file argument."
+	});
+	if (flags.stdout && flags.preview) ctx.addIssue({
+		code: "custom",
+		message: "Writing to stdout is not supported with --preview."
+	});
+}).transform(({ flags, args }) => ({
+	flags,
+	args: flags.stdin ? {
+		file: void 0,
+		output: args.file
+	} : args
+}));
+//#endregion
+export { MdPrinterSchema };

package/dist/services/i18n.service.mjs

@@ -1,17 +1,18 @@
 import { I18N_ACCEPTED_TYPES } from "../constants/template.constants.mjs";
 import __decorateMetadata from "../_virtual/_@oxc-project_runtime@0.153.0/helpers/esm/decorateMetadata.mjs";
 import __decorate from "../_virtual/_@oxc-project_runtime@0.153.0/helpers/esm/decorate.mjs";
-import { basename, extname, join } from "path";
-import { ConfigService, FileSystemService } from "@cenk1cenk2/oclif-common";
 import { Injectable } from "@nestjs/common";
+import { readdir } from "fs/promises";
+import { basename, extname, join } from "path";
+import { FileSystemService, ParserService } from "@cenk1cenk2/oclif-common";
 import i18next from "i18next";
 //#region src/services/i18n.service.ts
 let I18nService = class I18nService {
 	fs;
-	cs;
-	constructor(fs, cs) {
+	parser;
+	constructor(fs, parser) {
 		this.fs = fs;
-		this.cs = cs;
+		this.parser = parser;
 	}
 	async load(directory, options) {
 		const instance = i18next.createInstance();
@@ -25,12 +26,12 @@ let I18nService = class I18nService {
 	}
 	async resources(directory) {
 		const resources = {};
-		await Promise.all((await this.fs.extra.readdir(directory)).filter((file) => I18N_ACCEPTED_TYPES.includes(extname(file))).map(async (file) => {
-			resources[basename(file, extname(file))] = { translation: await this.cs.read(join(directory, file)) };
+		await Promise.all((await readdir(directory)).filter((file) => I18N_ACCEPTED_TYPES.includes(extname(file))).map(async (file) => {
+			resources[basename(file, extname(file))] = { translation: await this.parser.read(join(directory, file)) };
 		}));
 		return resources;
 	}
 };
-I18nService = __decorate([Injectable(), __decorateMetadata("design:paramtypes", [typeof FileSystemService === "undefined" ? Object : FileSystemService, typeof ConfigService === "undefined" ? Object : ConfigService])], I18nService);
+I18nService = __decorate([Injectable(), __decorateMetadata("design:paramtypes", [typeof FileSystemService === "undefined" ? Object : FileSystemService, typeof ParserService === "undefined" ? Object : ParserService])], I18nService);
 //#endregion
 export { I18nService };

package/dist/services/printer.module.mjs

@@ -10,32 +10,30 @@ import { TemplateService } from "./template/template.service.mjs";
 import { PrinterService } from "./printer.service.mjs";
 import { PreviewService } from "./session/preview.service.mjs";
 import { SessionService } from "./session/session.service.mjs";
-import { Module } from "@nestjs/common";
+import { ConfigurableModuleBuilder, Module } from "@nestjs/common";
+import { FilesystemModule, JsonParser, ParserModule, YamlParser } from "@cenk1cenk2/oclif-common";
 //#region src/services/printer.module.ts
-var _PrinterModule;
-let PrinterModule = _PrinterModule = class PrinterModule {
-	static forRoot(options) {
-		return {
-			module: _PrinterModule,
-			providers: [
-				{
-					provide: PRINTER_MODULE_OPTIONS,
-					useValue: options
-				},
-				I18nService,
-				MarkdownService,
-				TemplateService,
-				BrowserService,
-				RendererService,
-				ATrustAdapter,
-				SignatureService,
-				PrinterService,
-				SessionService,
-				PreviewService
-			]
-		};
-	}
-};
-PrinterModule = _PrinterModule = __decorate([Module({})], PrinterModule);
+let PrinterModule = class PrinterModule extends new ConfigurableModuleBuilder({ optionsInjectionToken: PRINTER_MODULE_OPTIONS }).setClassMethodName("forRoot").build().ConfigurableModuleClass {};
+PrinterModule = __decorate([Module({
+	imports: [FilesystemModule.forRoot(), ParserModule.forRoot({ parsers: [JsonParser, YamlParser] })],
+	providers: [
+		I18nService,
+		MarkdownService,
+		TemplateService,
+		BrowserService,
+		RendererService,
+		ATrustAdapter,
+		SignatureService,
+		PrinterService,
+		SessionService,
+		PreviewService
+	],
+	exports: [
+		PrinterService,
+		BrowserService,
+		SessionService,
+		PreviewService
+	]
+})], PrinterModule);
 //#endregion
 export { PrinterModule };

package/dist/services/printer.service.mjs

@@ -8,9 +8,10 @@ import { inlineHtml } from "./template/assets.mjs";
 import { RendererService } from "./renderer/renderer.service.mjs";
 import { SignatureService } from "./signature/signature.service.mjs";
 import { TemplateService } from "./template/template.service.mjs";
-import { basename, dirname, extname, join, resolve } from "path";
-import { FileSystemService, LoggerService, MergeStrategy, merge } from "@cenk1cenk2/oclif-common";
 import { Injectable } from "@nestjs/common";
+import { basename, dirname, extname, join, resolve } from "path";
+import { FileSystemService, LoggerService } from "@cenk1cenk2/oclif-common";
+import { cloneDeep, mergeWith, uniq } from "es-toolkit";
 import { parse } from "yaml";
 //#region src/services/printer.service.ts
 let PrinterService = class PrinterService {
@@ -34,12 +35,11 @@ let PrinterService = class PrinterService {
 	async input(flags) {
 		let file;
 		let source;
-		if (flags.file) {
+		if (flags.file !== void 0) {
 			file = resolve(flags.file);
 			if (!this.fs.exists(file)) throw new Error(`File does not exist: ${file}`);
 			source = await this.fs.read(file);
-		} else if (flags.stdin !== void 0) source = flags.stdin;
-		else throw new Error("Either --stdin or file argument must be provided.");
+		} else source = flags.stdin;
 		const type = flags.inputFiletype ?? (file ? extname(file).replace(/^\./, "") : "md");
 		if (type === "yaml" || type === "yml") return {
 			file,
@@ -145,7 +145,7 @@ let PrinterService = class PrinterService {
 		};
 	}
 	pdfOptions(...sources) {
-		const pdf = merge(MergeStrategy.EXTEND, {}, DEFAULT_PDF_OPTIONS, ...sources.map((source) => source ?? {}));
+		const pdf = sources.reduce((merged, source) => mergeWith(merged, source ?? {}, (current, value) => Array.isArray(current) && Array.isArray(value) ? uniq([...current, ...value]) : void 0), cloneDeep(DEFAULT_PDF_OPTIONS));
 		if (typeof pdf.margin === "string") {
 			const [top, right = top, bottom = top, left = right] = pdf.margin.trim().split(/\s+/);
 			pdf.margin = {

package/dist/services/renderer/app-window.mjs

@@ -0,0 +1,44 @@
+import { mkdtemp, rm } from "fs/promises";
+import { join } from "path";
+import { tmpdir } from "os";
+import { spawn } from "child_process";
+import { once } from "events";
+//#region src/services/renderer/app-window.ts
+/**
+* A browser window in app mode with a throwaway profile, so it shares no tabs, cookies or history with the browser of the user.
+*/
+var AppWindow = class AppWindow {
+	process;
+	profile;
+	/**
+	* Resolves when the window exits, rejects when the browser can not be started.
+	*/
+	closed;
+	constructor(process, profile) {
+		this.process = process;
+		this.profile = profile;
+		this.closed = new Promise((resolve, reject) => {
+			process.once("exit", () => resolve());
+			process.once("error", reject);
+		});
+		this.closed.catch(() => void 0);
+	}
+	static async open(executable, url) {
+		const profile = await mkdtemp(join(tmpdir(), "md-printer-window-"));
+		return new AppWindow(spawn(executable, [
+			`--app=${url}`,
+			`--user-data-dir=${profile}`,
+			"--no-first-run",
+			"--no-default-browser-check"
+		], { stdio: "ignore" }), profile);
+	}
+	async close() {
+		if (this.process.exitCode === null && this.process.signalCode === null && this.process.kill()) await once(this.process, "exit");
+		await rm(this.profile, {
+			recursive: true,
+			force: true
+		});
+	}
+};
+//#endregion
+export { AppWindow };

package/dist/services/renderer/browser.service.mjs

@@ -3,8 +3,8 @@ import __decorateMetadata from "../../_virtual/_@oxc-project_runtime@0.153.0/hel
 import __decorate from "../../_virtual/_@oxc-project_runtime@0.153.0/helpers/esm/decorate.mjs";
 import { discoverBrowser } from "./browser.mjs";
 import __decorateParam from "../../_virtual/_@oxc-project_runtime@0.153.0/helpers/esm/decorateParam.mjs";
-import { LoggerService } from "@cenk1cenk2/oclif-common";
 import { Inject, Injectable } from "@nestjs/common";
+import { LoggerService } from "@cenk1cenk2/oclif-common";
 import puppeteer from "puppeteer-core";
 //#region src/services/renderer/browser.service.ts
 let BrowserService = class BrowserService {

package/dist/services/renderer/renderer.service.mjs

@@ -3,10 +3,10 @@ import __decorateMetadata from "../../_virtual/_@oxc-project_runtime@0.153.0/hel
 import __decorate from "../../_virtual/_@oxc-project_runtime@0.153.0/helpers/esm/decorate.mjs";
 import { BrowserService } from "./browser.service.mjs";
 import { mimeType, resolveConfined } from "../template/assets.mjs";
+import { Injectable } from "@nestjs/common";
 import { readFile } from "fs/promises";
 import { resolve } from "path";
 import { LoggerService } from "@cenk1cenk2/oclif-common";
-import { Injectable } from "@nestjs/common";
 import { fileURLToPath, pathToFileURL } from "url";
 //#region src/services/renderer/renderer.service.ts
 var _RendererService;

package/dist/services/session/preview.service.mjs

@@ -3,14 +3,12 @@ import __decorateMetadata from "../../_virtual/_@oxc-project_runtime@0.153.0/hel
 import __decorate from "../../_virtual/_@oxc-project_runtime@0.153.0/helpers/esm/decorate.mjs";
 import { resolveConfined } from "../template/assets.mjs";
 import { isLoopbackRequest } from "../loopback.mjs";
+import { AppWindow } from "../renderer/app-window.mjs";
 import { TemplateService } from "../template/template.service.mjs";
-import { mkdtemp, rm } from "fs/promises";
+import { Injectable } from "@nestjs/common";
 import { join } from "path";
 import { LoggerService } from "@cenk1cenk2/oclif-common";
-import { Injectable } from "@nestjs/common";
 import { fileURLToPath } from "url";
-import { tmpdir } from "os";
-import { spawn } from "child_process";
 import { once } from "events";
 import { createServer } from "http";
 import serveStatic from "serve-static";
@@ -22,7 +20,6 @@ let PreviewService = class PreviewService {
 	clients = /* @__PURE__ */ new Set();
 	build;
 	error;
-	profile;
 	window;
 	constructor(logger, template) {
 		this.logger = logger;
@@ -60,39 +57,26 @@ let PreviewService = class PreviewService {
 		this.send("failed", this.error);
 	}
 	async open(executable, url) {
-		this.profile = await mkdtemp(join(tmpdir(), "md-printer-preview-"));
-		this.window = spawn(executable, [
-			`--app=${url}`,
-			`--user-data-dir=${this.profile}`,
-			"--no-first-run",
-			"--no-default-browser-check"
-		], { stdio: "ignore" });
-		await new Promise((done) => {
-			this.window.on("exit", () => done());
-			this.window.on("error", (err) => {
-				this.logger.warn("Can not open the preview window, open it manually: %s (%s)", url, err.message);
-			});
+		this.window = await AppWindow.open(executable, url);
+		await this.window.closed.catch((err) => {
+			this.logger.warn("Can not open the preview window, open it manually: %s (%s)", url, err.message);
+			return new Promise(() => void 0);
 		});
 	}
 	async onModuleDestroy() {
 		await this.close();
 	}
 	async close() {
-		const { server, window, profile } = this;
+		const { server, window } = this;
 		this.server = void 0;
 		this.window = void 0;
-		this.profile = void 0;
 		for (const client of this.clients) client.end();
 		this.clients.clear();
-		if (window && window.exitCode === null && window.signalCode === null && window.kill()) await once(window, "exit");
+		await window?.close();
 		if (server?.listening) {
 			server.close();
 			await once(server, "close");
 		}
-		if (profile) await rm(profile, {
-			recursive: true,
-			force: true
-		});
 	}
 	async handle(req, res, shell) {
 		if (!isLoopbackRequest(req)) {

package/dist/services/session/session.service.mjs

@@ -2,9 +2,9 @@ import "../../constants/template.constants.mjs";
 import __decorateMetadata from "../../_virtual/_@oxc-project_runtime@0.153.0/helpers/esm/decorateMetadata.mjs";
 import __decorate from "../../_virtual/_@oxc-project_runtime@0.153.0/helpers/esm/decorate.mjs";
 import { PrinterService } from "../printer.service.mjs";
+import { Injectable } from "@nestjs/common";
 import { dirname, join, resolve } from "path";
 import { LoggerService } from "@cenk1cenk2/oclif-common";
-import { Injectable } from "@nestjs/common";
 import { EventEmitter } from "events";
 import { watch } from "chokidar";
 import { debounce } from "perfect-debounce";

package/dist/services/signature/adapters/a-trust.adapter.mjs

@@ -1,10 +1,14 @@
+import "../../../constants/signature.constants.mjs";
 import __decorateMetadata from "../../../_virtual/_@oxc-project_runtime@0.153.0/helpers/esm/decorateMetadata.mjs";
 import __decorate from "../../../_virtual/_@oxc-project_runtime@0.153.0/helpers/esm/decorate.mjs";
+import { BrowserNotFoundError } from "../../renderer/browser.mjs";
+import { BrowserService } from "../../renderer/browser.service.mjs";
 import { isLoopbackRequest } from "../../loopback.mjs";
+import { AppWindow } from "../../renderer/app-window.mjs";
 import { SignatureAdapter } from "../signature.adapter.mjs";
-import { readFile } from "fs/promises";
-import { LoggerService } from "@cenk1cenk2/oclif-common";
 import { Injectable } from "@nestjs/common";
+import { readFile } from "fs/promises";
+import { CommandContext, LoggerService } from "@cenk1cenk2/oclif-common";
 import { spawn } from "child_process";
 import { once } from "events";
 import { createServer } from "http";
@@ -12,10 +16,14 @@ import getRawBody from "raw-body";
 //#region src/services/signature/adapters/a-trust.adapter.ts
 let ATrustAdapter = class ATrustAdapter extends SignatureAdapter {
 	logger;
+	context;
+	browser;
 	name = "a-trust";
-	constructor(logger) {
+	constructor(logger, context, browser) {
 		super();
 		this.logger = logger;
+		this.context = context;
+		this.browser = browser;
 		this.logger.setup(this.constructor.name);
 	}
 	async sign(request) {
@@ -51,8 +59,10 @@ let ATrustAdapter = class ATrustAdapter extends SignatureAdapter {
 	}
 	async collect(login) {
 		let resolve;
-		const result = new Promise((done) => {
+		let reject;
+		const result = new Promise((done, fail) => {
 			resolve = done;
+			reject = fail;
 		});
 		const page = await readFile(new URL("./a-trust.html", import.meta.url));
 		const server = createServer(async (req, res) => {
@@ -84,23 +94,44 @@ let ATrustAdapter = class ATrustAdapter extends SignatureAdapter {
 				return res.end("This does not look like a signature, it should start with MII.");
 			}
 			res.writeHead(200);
-			res.end("Signature received, you can close this tab.");
+			res.end("Signature received.");
 			resolve(Buffer.from(cms, "base64"));
 		});
 		server.listen(0, "127.0.0.1");
 		await once(server, "listening");
 		const url = `http://127.0.0.1:${server.address().port}/`;
 		this.logger.info("Sign the document in the browser, then paste the signature back: %s", url);
-		this.open(url);
-		return result.finally(() => server.close());
+		const window = await this.open(url).catch((err) => {
+			server.close();
+			throw err;
+		});
+		this.context.signal.addEventListener("abort", () => reject(/* @__PURE__ */ new Error("Signing is aborted.")), { once: true });
+		window?.closed.then(() => reject(/* @__PURE__ */ new Error("The signing window is closed before the signature arrived.")), (err) => this.logger.warn("Can not open the signing window, open the link manually: %s (%s)", url, err.message));
+		return result.finally(async () => {
+			server.close();
+			await window?.close();
+		});
 	}
-	open(url) {
-		spawn("xdg-open", [url], {
-			stdio: "ignore",
-			detached: true
-		}).on("error", (err) => this.logger.warn("Can not open the browser, open the link manually: %s", err.message)).unref();
+	async open(url) {
+		let executable;
+		try {
+			executable = this.browser.executable();
+		} catch (err) {
+			if (!(err instanceof BrowserNotFoundError)) throw err;
+			this.logger.warn("Can not find a browser to sign in a window of its own, close the tabs of any earlier signing before you continue. %s", err.message);
+			spawn("xdg-open", [url], {
+				stdio: "ignore",
+				detached: true
+			}).on("error", (err) => this.logger.warn("Can not open the browser, open the link manually: %s", err.message)).unref();
+			return;
+		}
+		return AppWindow.open(executable, url);
 	}
 };
-ATrustAdapter = __decorate([Injectable(), __decorateMetadata("design:paramtypes", [typeof LoggerService === "undefined" ? Object : LoggerService])], ATrustAdapter);
+ATrustAdapter = __decorate([Injectable(), __decorateMetadata("design:paramtypes", [
+	typeof LoggerService === "undefined" ? Object : LoggerService,
+	typeof CommandContext === "undefined" ? Object : CommandContext,
+	typeof BrowserService === "undefined" ? Object : BrowserService
+])], ATrustAdapter);
 //#endregion
 export { ATrustAdapter };

package/dist/services/signature/signature.service.mjs

@@ -1,24 +1,24 @@
 import __decorateMetadata from "../../_virtual/_@oxc-project_runtime@0.153.0/helpers/esm/decorateMetadata.mjs";
 import __decorate from "../../_virtual/_@oxc-project_runtime@0.153.0/helpers/esm/decorate.mjs";
 import { ATrustAdapter } from "./adapters/a-trust.adapter.mjs";
-import { isAbsolute, join } from "path";
-import { FileSystemService } from "@cenk1cenk2/oclif-common";
 import { Injectable } from "@nestjs/common";
+import { readFile } from "fs/promises";
+import { isAbsolute, join } from "path";
 import { plainAddPlaceholder } from "@signpdf/placeholder-plain";
 import { SUBFILTER_ETSI_CADES_DETACHED, findByteRange, removeTrailingNewLine } from "@signpdf/utils";
-import { X509Certificate } from "crypto";
+import { X509Certificate, webcrypto } from "crypto";
 import { homedir } from "os";
+import { ContentInfo, SignedData, getAlgorithmByOID } from "pkijs";
 //#region src/services/signature/signature.service.ts
 var _SignatureService;
 let SignatureService = class SignatureService {
 	static {
 		_SignatureService = this;
 	}
-	fs;
 	static LENGTH = 16384;
+	static MESSAGE_DIGEST = "1.2.840.113549.1.9.4";
 	adapters;
-	constructor(fs, aTrust) {
-		this.fs = fs;
+	constructor(aTrust) {
 		this.adapters = [aTrust];
 	}
 	get providers() {
@@ -26,7 +26,7 @@ let SignatureService = class SignatureService {
 	}
 	async certificate(file, date) {
 		const path = file.replace(/^~(?=\/|$)/, homedir());
-		const certificate = new X509Certificate(await this.fs.extra.readFile(isAbsolute(path) ? path : join(process.cwd(), path)));
+		const certificate = new X509Certificate(await readFile(isAbsolute(path) ? path : join(process.cwd(), path)));
 		if (date < certificate.validFromDate || date > certificate.validToDate) throw new Error(`Signing certificate is not valid at ${date.toISOString()}, it is valid from ${certificate.validFrom} to ${certificate.validTo}.`);
 		return certificate;
 	}
@@ -41,7 +41,7 @@ let SignatureService = class SignatureService {
 	async sign(pdf, options) {
 		const request = this.prepare(pdf, options);
 		const cms = await this.adapter(options.provider).sign(request);
-		if (options.certificate && !cms.includes(options.certificate.raw)) throw new Error("The returned signature was not created with the configured certificate, the signature block would show the wrong signer.");
+		await this.verify(request, cms, options.certificate);
 		return this.embed(request, cms);
 	}
 	adapter(provider) {
@@ -76,6 +76,30 @@ let SignatureService = class SignatureService {
 			excluded: [from, to]
 		};
 	}
+	async verify({ pdf, excluded: [from, to] }, cms, certificate) {
+		const content = new Uint8Array(Buffer.concat([pdf.subarray(0, from), pdf.subarray(to + 1)])).buffer;
+		let signed;
+		try {
+			signed = new SignedData({ schema: ContentInfo.fromBER(new Uint8Array(cms)).content });
+		} catch (err) {
+			throw new Error(`The returned signature is not a CMS signature: ${err.message}`, { cause: err });
+		}
+		const [info] = signed.signerInfos;
+		const digest = info?.signedAttrs?.attributes.find((attribute) => attribute.type === _SignatureService.MESSAGE_DIGEST);
+		if (!digest) throw new Error("The returned signature does not carry the digest of the document it signs.");
+		const algorithm = getAlgorithmByOID(info.digestAlgorithm.algorithmId, true, "digestAlgorithm");
+		if (!Buffer.from(digest.values[0].valueBlock.valueHexView).equals(Buffer.from(await webcrypto.subtle.digest(algorithm.name, content)))) throw new Error("The returned signature belongs to a different document, it is likely left over from an earlier signing.");
+		const { signatureVerified, signerCertificate } = await signed.verify({
+			signer: 0,
+			data: content,
+			extendedMode: true
+		}).catch((err) => {
+			throw new Error(`Can not verify the returned signature: ${err.message}`, { cause: err });
+		});
+		const signer = new X509Certificate(Buffer.from(signerCertificate.toSchema().toBER()));
+		if (certificate && !signer.raw.equals(certificate.raw)) throw new Error([`The returned signature is signed by ${this.identify(signer)}, but the configured certificate is ${this.identify(certificate)}.`, "The signature block would show the wrong signer."].join(" "));
+		if (!signatureVerified) throw new Error(`The returned signature does not verify against the certificate of ${this.identify(signer)}.`);
+	}
 	embed({ pdf, excluded: [from, to] }, cms) {
 		const signature = cms.toString("hex");
 		const length = to - from - 1;
@@ -86,10 +110,13 @@ let SignatureService = class SignatureService {
 			pdf.subarray(to)
 		]);
 	}
+	identify(certificate) {
+		return `${this.commonName(certificate.subject)} (serial ${certificate.serialNumber})`;
+	}
 	commonName(name) {
 		return name.split("\n").find((part) => part.startsWith("CN="))?.slice(3);
 	}
 };
-SignatureService = _SignatureService = __decorate([Injectable(), __decorateMetadata("design:paramtypes", [typeof FileSystemService === "undefined" ? Object : FileSystemService, typeof ATrustAdapter === "undefined" ? Object : ATrustAdapter])], SignatureService);
+SignatureService = _SignatureService = __decorate([Injectable(), __decorateMetadata("design:paramtypes", [typeof ATrustAdapter === "undefined" ? Object : ATrustAdapter])], SignatureService);
 //#endregion
 export { SignatureService };

package/dist/services/template/template.service.mjs

@@ -3,9 +3,9 @@ import __decorateMetadata from "../../_virtual/_@oxc-project_runtime@0.153.0/hel
 import __decorate from "../../_virtual/_@oxc-project_runtime@0.153.0/helpers/esm/decorate.mjs";
 import { inlineCss, inlineHtml } from "./assets.mjs";
 import { sveltePlugin } from "./svelte.plugin.mjs";
+import { Injectable } from "@nestjs/common";
 import { dirname, isAbsolute, join, resolve } from "path";
 import { FileSystemService } from "@cenk1cenk2/oclif-common";
-import { Injectable } from "@nestjs/common";
 import { fileURLToPath } from "url";
 import { homedir } from "os";
 import { compile } from "@tailwindcss/node";

package/oclif.manifest.json

@@ -9,8 +9,7 @@
         },
         "output": {
           "description": "Output file. Overwrites the one defined in front-matter.",
-          "name": "output",
-          "required": false
+          "name": "output"
         }
       },
       "description": "Renders a markdown or yaml file through a Svelte template into a PDF or HTML document.",
@@ -176,6 +175,9 @@
           "name": "sign-provider",
           "hasDynamicHelp": false,
           "multiple": false,
+          "options": [
+            "a-trust"
+          ],
           "type": "option"
         },
         "sign-certificate": {
@@ -196,5 +198,5 @@
       "enableJsonFlag": false
     }
   },
-  "version": "3.0.0"
+  "version": "3.1.1"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cenk1cenk2/md-printer",
-  "version": "3.0.0",
+  "version": "3.1.1",
   "description": "Render markdown or yaml through Svelte templates into PDF or HTML with Puppeteer.",
   "type": "module",
   "repository": {
@@ -29,7 +29,8 @@
       "target": "./dist/commands/index.mjs"
     },
     "plugins": [
-      "@oclif/plugin-help"
+      "@oclif/plugin-help",
+      "@cenk1cenk2/oclif-common"
     ],
     "topicSeparator": " "
   },
@@ -48,7 +49,7 @@
     "cenk1cenk2"
   ],
   "dependencies": {
-    "@cenk1cenk2/oclif-common": "^7.2.0",
+    "@cenk1cenk2/oclif-common": "^8.0.0",
     "@fontsource/montserrat": "^5.3.0",
     "@listr2/manager": "^4.3.1",
     "@nestjs/common": "^12.1.2",
@@ -63,7 +64,7 @@
     "chokidar": "^5.0.0",
     "enhanced-resolve": "^5.26.0",
     "entities": "^8.1.0",
-    "fs-extra": "^11.4.1",
+    "es-toolkit": "^1.52.0",
     "github-markdown-css": "^5.9.0",
     "hast-util-from-html": "^2.0.3",
     "hast-util-to-html": "^9.0.5",
@@ -74,6 +75,7 @@
     "lowlight": "^3.3.0",
     "mime": "^4.1.1",
     "perfect-debounce": "^2.1.0",
+    "pkijs": "^3.4.1",
     "property-information": "^7.2.0",
     "puppeteer-core": "^25.13.0",
     "raw-body": "^4.0.0",
@@ -98,19 +100,20 @@
     "vfile-matter": "^5.0.1",
     "which": "^7.0.0",
     "write-file-atomic": "^8.0.0",
-    "yaml": "^2.9.1"
+    "yaml": "^2.9.1",
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@cenk1cenk2/cz-cc": "^3.0.6",
     "@cenk1cenk2/eslint-config": "^3.3.9",
     "@tsconfig/node24": "^24.0.5",
-    "@types/fs-extra": "^11.0.4",
     "@types/hast": "^3.0.5",
     "@types/mdast": "^4.0.4",
     "@types/node": "^24.19.1",
     "@types/serve-static": "^2.2.0",
     "@types/which": "^3.0.4",
     "@types/write-file-atomic": "^4.0.3",
+    "asn1js": "^3.0.10",
     "eslint": "^10.12.0",
     "eslint-plugin-svelte": "^3.23.1",
     "execa": "^10.1.0",