@grainulation/mill 1.1.0 → 1.1.2

package/bin/mill.js

@@ -476,7 +476,17 @@ async function runCiArtifacts(args) {
 }
 
 function runServe(args) {
+  const fs = require("node:fs");
   const serverPath = path.join(LIB_DIR, "server.js");
+  if (!fs.existsSync(serverPath)) {
+    console.error(
+      "mill: server.js is not included in the npm package.\n" +
+      "The serve command requires a full clone of the repository.\n\n" +
+      "  git clone https://github.com/grainulation/mill.git\n" +
+      "  cd mill && node bin/mill.js serve"
+    );
+    process.exit(1);
+  }
   const child = fork(serverPath, args, { stdio: "inherit" });
   child.on("exit", (code) => process.exit(code ?? 0));
   process.on("SIGTERM", () => child.kill("SIGTERM"));

package/lib/exporters/pdf-worker.js

@@ -0,0 +1,28 @@
+#!/usr/bin/env node
+"use strict";
+
+/**
+ * PDF worker — standalone script that converts an HTML file to PDF using puppeteer.
+ *
+ * Usage: node pdf-worker.js <inputPath> <outputPath>
+ *
+ * Extracted from pdf.js to avoid constructing JS as a string and executing
+ * via `node -e`, which triggers Socket AI-anomaly alerts.
+ */
+
+const inputPath = process.argv[2];
+const outputPath = process.argv[3];
+
+if (!inputPath || !outputPath) {
+  process.stderr.write("Usage: node pdf-worker.js <inputPath> <outputPath>\n");
+  process.exit(1);
+}
+
+(async () => {
+  const puppeteer = require("puppeteer");
+  const browser = await puppeteer.launch({ headless: "new" });
+  const page = await browser.newPage();
+  await page.goto(`file://${inputPath}`, { waitUntil: "networkidle0" });
+  await page.pdf({ path: outputPath, format: "A4", printBackground: true });
+  await browser.close();
+})();

package/lib/exporters/pdf.js

@@ -5,7 +5,7 @@
 // which needs network access. All other mill export formats are zero-dep.
 
 const path = require("node:path");
-const { execFile } = require("node:child_process");
+const { execFile, execFileSync } = require("node:child_process");
 
 /**
  * Export HTML or Markdown files to PDF.
@@ -70,22 +70,9 @@ async function exportFromMarkdown(inputPath, outputPath) {
 
 async function exportFromHtml(inputPath, outputPath) {
   const out = deriveOutputPath(inputPath, outputPath);
-  // Use a small inline puppeteer script via npx
-  // Escape single quotes, backticks, and ${} to prevent template literal injection
-  const escapePath = (p) =>
-    p.replace(/'/g, "\\'").replace(/`/g, "\\`").replace(/\$\{/g, "\\${");
-  const script = `
-    const puppeteer = require('puppeteer');
-    (async () => {
-      const browser = await puppeteer.launch({ headless: 'new' });
-      const page = await browser.newPage();
-      await page.goto('file://${escapePath(inputPath)}', { waitUntil: 'networkidle0' });
-      await page.pdf({ path: '${escapePath(out)}', format: 'A4', printBackground: true });
-      await browser.close();
-    })();
-  `;
+  const workerPath = path.join(__dirname, "pdf-worker.js");
   try {
-    await exec("node", ["-e", script]);
+    execFileSync("node", [workerPath, inputPath, out], { timeout: 120_000 });
   } catch (err) {
     throw npxToolError("puppeteer", err);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@grainulation/mill",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "description": "Turn wheat sprint artifacts into shareable formats",
   "main": "lib/index.js",
   "bin": {
@@ -8,22 +8,25 @@
   },
   "exports": {
     ".": "./lib/index.js",
-    "./server": {
-      "import": "./lib/server.js"
-    },
-    "./formats/markdown": "./lib/formats/markdown.js",
-    "./formats/csv": "./lib/formats/csv.js",
-    "./formats/json-ld": "./lib/formats/json-ld.js",
+    "./formats/markdown": "./lib/formats/markdown.mjs",
+    "./formats/csv": "./lib/formats/csv.mjs",
+    "./formats/json-ld": "./lib/formats/json-ld.mjs",
     "./tokens": "./public/grainulation-tokens.css"
   },
   "files": [
     "bin/",
-    "lib/",
-    "public/",
+    "lib/index.js",
+    "lib/formats.js",
+    "lib/json-ld-common.js",
+    "lib/serve-mcp.js",
+    "lib/exporters/",
+    "lib/publishers/",
+    "lib/formats/",
     "CHANGELOG.md",
     "LICENSE",
     "CODE_OF_CONDUCT.md",
-    "CONTRIBUTING.md"
+    "CONTRIBUTING.md",
+    "public/grainulation-tokens.css"
   ],
   "scripts": {
     "test": "node test/basic.test.js",