gutterpress 0.11.10-alpha.2 → 0.11.10-alpha.6

package/dist/{cli-pfczdbyd.js → cli-5qr3z0qa.js}

@@ -148,42 +148,14 @@ function formatData(data, clean) {
 }
 
 // src/lib/plugin-vendor.ts
-import { createHash } from "node:crypto";
-import { createReadStream } from "node:fs";
-import { lstat, readFile, readdir, realpath } from "node:fs/promises";
+import { lstat, readFile, realpath } from "node:fs/promises";
 import path2 from "node:path";
 import { exports as resolveExports } from "resolve.exports";
-import { satisfies, validRange } from "semver";
-
-// src/lib/npm-registry.ts
-var DEFAULT_NPM_REGISTRY = "https://registry.npmjs.org";
-var ENV_OVERRIDE = "GUTTERPRESS_NPM_REGISTRY";
-function npmRegistryUrl() {
-  const configured = process.env[ENV_OVERRIDE]?.trim();
-  if (!configured)
-    return DEFAULT_NPM_REGISTRY;
-  let scheme;
-  try {
-    scheme = new URL(configured).protocol;
-  } catch {
-    throw new Error(`Invalid ${ENV_OVERRIDE} URL "${configured}".`);
-  }
-  if (scheme !== "http:" && scheme !== "https:") {
-    throw new Error(`${ENV_OVERRIDE} must be an http(s) URL — got "${scheme}".`);
-  }
-  return configured.replace(/\/+$/, "");
-}
-
-// src/lib/plugin-vendor.ts
 var PLUGINS_DIR = "plugins";
 var VENDORED_NPM_DIR = "npm";
-var VENDOR_RECEIPT_FILE = ".gutterpress-install.json";
-var VENDOR_RECEIPT_VERSION = 2;
 var NPM_SEGMENT = /^[a-z0-9][a-z0-9._~-]*$/;
 var EXACT_VERSION = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;
 var WINDOWS_RESERVED = /^(con|prn|aux|nul|clock\$|conin\$|conout\$|com[1-9¹²³]|lpt[1-9¹²³])(?:\..*)?$/i;
-var MAX_VERIFIED_FILES = 50000;
-var MAX_VERIFIED_BYTES = 512 * 1024 * 1024;
 function isValidNpmPackageName(name) {
   if (!name || name.length > 214 || name !== name.toLowerCase())
     return false;
@@ -236,10 +208,6 @@ function vendoredNpmPluginPackageDir(installRoot, name) {
 function toPosixPath(value) {
   return value.split(path2.sep).join("/");
 }
-function packageEntryFormat(manifest, relativeEntry) {
-  const extension = path2.posix.extname(relativeEntry);
-  return extension === ".cjs" || extension === ".json" || extension !== ".mjs" && manifest.type !== "module" ? "commonjs" : "module";
-}
 function assertWindowsSafeRelativePath(relative) {
   if (!relative || relative.includes("\\") || relative.startsWith("/") || /^[a-zA-Z]:/.test(relative)) {
     throw new Error(`Unsafe package path: ${relative || "(empty)"}`);
@@ -258,12 +226,6 @@ function assertWindowsSafeRelativePath(relative) {
 function windowsPathKey(relative) {
   return relative.normalize("NFKC").toLowerCase();
 }
-function safeReceiptPath(relative, label) {
-  if (typeof relative !== "string")
-    throw new Error(`${label} must be a string.`);
-  assertWindowsSafeRelativePath(relative);
-  return relative;
-}
 function isContained(root, candidate) {
   const relative = path2.relative(root, candidate);
   return relative === "" || !relative.startsWith("..") && !path2.isAbsolute(relative);
@@ -271,38 +233,6 @@ function isContained(root, candidate) {
 function object(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
-function stringMap(value) {
-  const map = object(value);
-  if (!map)
-    return {};
-  const result = {};
-  for (const [name, selector] of Object.entries(map)) {
-    if (typeof selector === "string" && selector.trim())
-      result[name] = selector.trim();
-  }
-  return result;
-}
-function dependencyDeclarations(manifest) {
-  const required = stringMap(manifest.dependencies);
-  const optional = stringMap(manifest.optionalDependencies);
-  for (const name of Object.keys(optional))
-    delete required[name];
-  const peers = stringMap(manifest.peerDependencies);
-  const peerMeta = object(manifest.peerDependenciesMeta) ?? {};
-  const optionalPeers = {};
-  for (const [name, selector] of Object.entries(peers)) {
-    if (name in required || name in optional)
-      continue;
-    if (object(peerMeta[name])?.optional === true)
-      optionalPeers[name] = selector;
-    else
-      required[name] = selector;
-  }
-  return { required, optional, optionalPeers };
-}
-function unsupportedRegistrySelector(selector) {
-  return /^(?:file:|git\+|https?:|ssh:|github:|workspace:|link:|npm:)/i.test(selector);
-}
 async function readPackageJson(packageDir) {
   const packageJsonPath = path2.join(packageDir, "package.json");
   const info = await lstat(packageJsonPath);
@@ -314,26 +244,6 @@ async function readPackageJson(packageDir) {
     throw new Error(`Package metadata is not an object: ${packageJsonPath}`);
   return parsed;
 }
-async function verifyReceiptEntry(installRoot, packagePath, entry, label) {
-  if (entry === undefined)
-    return;
-  const relative = safeReceiptPath(entry, label);
-  if (!relative.startsWith(`${packagePath}/`)) {
-    throw new Error(`${label} is outside its package.`);
-  }
-  const packageDir = path2.resolve(installRoot, ...packagePath.split("/"));
-  const entryPath = path2.resolve(installRoot, ...relative.split("/"));
-  const [realPackageDir, realEntry] = await Promise.all([
-    realpath(packageDir),
-    realpath(entryPath)
-  ]);
-  if (!isContained(realPackageDir, realEntry))
-    throw new Error(`${label} escapes its package.`);
-  const info = await lstat(realEntry);
-  if (!info.isFile() || info.isSymbolicLink())
-    throw new Error(`${label} is not a regular file.`);
-  return realEntry;
-}
 function packageResolutionTargets(manifest, subpath, condition) {
   if (manifest.exports !== undefined) {
     try {
@@ -401,112 +311,16 @@ async function resolveEntryCandidate(packageDir, resolution) {
   }
   return null;
 }
-async function resolvePackageEntry(packageDir, packageJson, condition = "import") {
+async function resolvePackageEntry(packageDir, packageJson) {
   const manifest = packageJson ?? await readPackageJson(packageDir);
-  for (const target of packageResolutionTargets(manifest, "", condition)) {
-    const resolved = await resolveEntryCandidate(packageDir, target);
-    if (resolved)
-      return resolved;
-  }
-  throw new Error("Package has no contained JavaScript entry point for ESM import.");
-}
-async function listTreeEntries(root) {
-  const out = [];
-  async function visit(dir) {
-    const entries = await readdir(dir, { withFileTypes: true });
-    entries.sort((a, b) => a.name.localeCompare(b.name));
-    for (const entry of entries) {
-      const absolute = path2.join(dir, entry.name);
-      const relative = toPosixPath(path2.relative(root, absolute));
-      if (relative === VENDOR_RECEIPT_FILE)
-        continue;
-      if (entry.isSymbolicLink())
-        throw new Error(`Vendor tree contains a symbolic link: ${relative}`);
-      if (entry.isDirectory()) {
-        out.push({ relative, directory: true });
-        await visit(absolute);
-      } else if (entry.isFile())
-        out.push({ relative, directory: false });
-      else
-        throw new Error(`Vendor tree contains an unsupported filesystem entry: ${relative}`);
+  for (const condition of ["import", "require"]) {
+    for (const target of packageResolutionTargets(manifest, "", condition)) {
+      const resolved = await resolveEntryCandidate(packageDir, target);
+      if (resolved)
+        return resolved;
     }
   }
-  await visit(root);
-  return out;
-}
-async function computeVendorTreeDigest(root) {
-  const entries = await listTreeEntries(root);
-  const files = entries.filter((entry) => !entry.directory);
-  if (files.length > MAX_VERIFIED_FILES) {
-    throw new Error(`Vendor tree contains more than ${MAX_VERIFIED_FILES} files.`);
-  }
-  const seen = new Set;
-  const hash = createHash("sha256");
-  let bytes = 0;
-  for (const entry of entries) {
-    const { relative } = entry;
-    assertWindowsSafeRelativePath(relative);
-    const key = windowsPathKey(relative);
-    if (seen.has(key))
-      throw new Error(`Vendor tree has a Windows-colliding path: ${relative}`);
-    seen.add(key);
-    if (entry.directory)
-      continue;
-    const absolute = path2.join(root, ...relative.split("/"));
-    const info = await lstat(absolute);
-    if (!info.isFile() || info.isSymbolicLink() || info.nlink !== 1) {
-      throw new Error(`Vendor tree file is not an independent regular file: ${relative}`);
-    }
-    bytes += info.size;
-    if (bytes > MAX_VERIFIED_BYTES) {
-      throw new Error(`Vendor tree exceeds ${Math.round(MAX_VERIFIED_BYTES / 1024 / 1024)}MB.`);
-    }
-    hash.update(`${Buffer.byteLength(relative)}:${relative}:${info.size}\x00`);
-    for await (const chunk of createReadStream(absolute))
-      hash.update(chunk);
-  }
-  return { digest: hash.digest("hex"), files: files.length, bytes };
-}
-async function assertVendorPackageOwnership(root, packagePaths) {
-  const packages = packagePaths.map((relative) => ({
-    relative,
-    key: windowsPathKey(relative),
-    parts: relative.split("/").length
-  })).sort((a, b) => b.key.length - a.key.length);
-  for (const entry of await listTreeEntries(root)) {
-    const actualParts = entry.relative.split("/");
-    for (const part of actualParts) {
-      if (part.normalize("NFKC").toLowerCase() === "node_modules" && part !== "node_modules") {
-        throw new Error(`Vendor tree contains a non-canonical node_modules path: ${entry.relative}`);
-      }
-    }
-    const key = windowsPathKey(entry.relative);
-    const structural = packages.some((pkg) => pkg.key === key || pkg.key.startsWith(`${key}/`));
-    if (entry.directory && structural)
-      continue;
-    const owner = packages.find((pkg) => key.startsWith(`${pkg.key}/`));
-    if (!owner)
-      throw new Error(`Vendor tree path is not owned by a receipt package: ${entry.relative}`);
-    const packageRelative = actualParts.slice(owner.parts);
-    const nodeModulesAt = packageRelative.findIndex((part) => part.normalize("NFKC").toLowerCase() === "node_modules");
-    if (nodeModulesAt < 0)
-      continue;
-    const generatedEmptyDirectory = entry.directory && nodeModulesAt === 0 && (packageRelative.length === 1 || packageRelative.length === 2 && packageRelative[1].startsWith("@"));
-    if (!generatedEmptyDirectory) {
-      throw new Error(`Package contains bundled node_modules content: ${entry.relative}`);
-    }
-  }
-}
-async function recomputeReceiptEntry(packageDir, packagePath, manifest, condition) {
-  try {
-    const entry = await resolvePackageEntry(packageDir, manifest, condition);
-    return `${packagePath}/${entry}`;
-  } catch (error) {
-    if (error instanceof Error && error.message.includes("no contained JavaScript entry point")) {
-      return;
-    }
-    throw error;
-  }
+  throw new Error("Package has no contained JavaScript entry point.");
 }
 async function resolveVendoredPluginInstallRoot(projectDir, expectedName, expectedVersion) {
   const requestedProjectRoot = path2.resolve(projectDir);
@@ -531,214 +345,6 @@ async function resolveVendoredPluginInstallRoot(projectDir, expectedName, expect
   }
   return installRoot;
 }
-function reconcileReceiptGraph(receipt, packages, manifests) {
-  if (!Array.isArray(receipt.skipped))
-    throw new Error("Vendor receipt skipped list is invalid.");
-  const declarations = new Map;
-  for (const [packagePath, manifest] of manifests) {
-    declarations.set(packagePath, dependencyDeclarations(manifest));
-  }
-  const skippedByEdge = new Map;
-  for (const skipped of receipt.skipped) {
-    if (!packages.has(skipped.from) || !isValidNpmPackageName(skipped.name) || typeof skipped.selector !== "string" || !["optional", "optional-peer"].includes(skipped.kind) || typeof skipped.reason !== "string") {
-      throw new Error("Vendor receipt contains an invalid skipped dependency.");
-    }
-    const declared = declarations.get(skipped.from);
-    const expectedSelector = skipped.kind === "optional" ? declared.optional[skipped.name] : declared.optionalPeers[skipped.name];
-    if (expectedSelector !== skipped.selector) {
-      throw new Error(`Skipped dependency is not declared as ${skipped.kind}: ${skipped.name}`);
-    }
-    const key = `${skipped.from}\x00${skipped.name}`;
-    if (skippedByEdge.has(key))
-      throw new Error(`Duplicate skipped dependency: ${skipped.name}`);
-    skippedByEdge.set(key, skipped);
-  }
-  for (const pkg of receipt.packages) {
-    if (!object(pkg.dependencies))
-      throw new Error(`Invalid dependency map for ${pkg.name}.`);
-    const declared = declarations.get(pkg.path);
-    for (const [dependency, target] of Object.entries(pkg.dependencies)) {
-      const targetPackage = packages.get(target);
-      if (!isValidNpmPackageName(dependency) || !targetPackage || targetPackage.name !== dependency) {
-        throw new Error(`Broken dependency edge ${pkg.name} -> ${dependency}.`);
-      }
-      const selector = declared.required[dependency] ?? declared.optional[dependency];
-      if (!selector)
-        throw new Error(`Undeclared dependency edge ${pkg.name} -> ${dependency}.`);
-      if (unsupportedRegistrySelector(selector)) {
-        throw new Error(`Unsupported selector on dependency edge ${pkg.name} -> ${dependency}.`);
-      }
-      const range = validRange(selector);
-      if (range && !satisfies(targetPackage.version, range)) {
-        throw new Error(`Dependency edge ${pkg.name} -> ${dependency}@${targetPackage.version} does not satisfy ${selector}.`);
-      }
-      if (skippedByEdge.has(`${pkg.path}\x00${dependency}`)) {
-        throw new Error(`Dependency is both installed and skipped: ${pkg.name} -> ${dependency}.`);
-      }
-    }
-    for (const dependency of Object.keys(declared.required)) {
-      if (!(dependency in pkg.dependencies)) {
-        throw new Error(`Missing required dependency edge ${pkg.name} -> ${dependency}.`);
-      }
-    }
-    for (const dependency of Object.keys(declared.optional)) {
-      if (!(dependency in pkg.dependencies) && !skippedByEdge.has(`${pkg.path}\x00${dependency}`)) {
-        throw new Error(`Optional dependency is neither installed nor skipped: ${pkg.name} -> ${dependency}.`);
-      }
-    }
-    for (const dependency of Object.keys(declared.optionalPeers)) {
-      if (!skippedByEdge.has(`${pkg.path}\x00${dependency}`)) {
-        throw new Error(`Optional peer dependency is not recorded as skipped: ${pkg.name} -> ${dependency}.`);
-      }
-    }
-  }
-}
-async function verifyVendoredPlugin(projectDir, expectedName, expectedVersion) {
-  try {
-    const installRoot = await resolveVendoredPluginInstallRoot(projectDir, expectedName, expectedVersion);
-    if (!installRoot)
-      return null;
-    const receiptPath = path2.join(installRoot, VENDOR_RECEIPT_FILE);
-    let raw;
-    try {
-      const info = await lstat(receiptPath);
-      if (!info.isFile() || info.isSymbolicLink() || info.nlink !== 1 || info.size > 1024 * 1024) {
-        throw new Error("Vendor receipt is not a small regular file.");
-      }
-      raw = await readFile(receiptPath, "utf8");
-    } catch (error) {
-      if (error.code === "ENOENT")
-        return null;
-      throw error;
-    }
-    const receipt = JSON.parse(raw);
-    if (receipt.schemaVersion !== VENDOR_RECEIPT_VERSION) {
-      throw new Error(`Unsupported vendor receipt schema ${String(receipt.schemaVersion)}.`);
-    }
-    if (receipt.root?.name !== expectedName || receipt.root?.version !== expectedVersion) {
-      throw new Error("Vendor receipt identity does not match the manifest entry.");
-    }
-    if (!Array.isArray(receipt.packages) || receipt.packages.length === 0) {
-      throw new Error("Vendor receipt has no package graph.");
-    }
-    const tree = await computeVendorTreeDigest(installRoot);
-    if (receipt.tree?.algorithm !== "sha256" || receipt.tree.digest !== tree.digest || receipt.tree.files !== tree.files || receipt.tree.bytes !== tree.bytes) {
-      throw new Error("Vendor tree hash does not match its receipt.");
-    }
-    const packages = new Map;
-    const manifests = new Map;
-    const verifiedPackages = [];
-    const pathKeys = new Set;
-    for (const pkg of receipt.packages) {
-      const relative = safeReceiptPath(pkg.path, "Package receipt path");
-      const key = windowsPathKey(relative);
-      if (pathKeys.has(key))
-        throw new Error(`Duplicate package receipt path: ${relative}`);
-      pathKeys.add(key);
-      if (!isValidNpmPackageName(pkg.name) || !isExactNpmVersion(pkg.version)) {
-        throw new Error(`Invalid package identity in receipt: ${pkg.name}@${pkg.version}`);
-      }
-      const expectedSuffix = `node_modules/${pkg.name}`;
-      if (relative !== expectedSuffix && !relative.endsWith(`/${expectedSuffix}`)) {
-        throw new Error(`Package receipt path does not match ${pkg.name}: ${relative}`);
-      }
-      if (typeof pkg.integrity !== "string" || !/^(?:sha512|sha384|sha256|sha1)-(?:hex-)?[A-Za-z0-9+/=]+$/.test(pkg.integrity) || typeof pkg.legacySha1 !== "boolean" || pkg.legacySha1 !== pkg.integrity.startsWith("sha1-")) {
-        throw new Error(`Package receipt is missing provenance: ${pkg.name}@${pkg.version}`);
-      }
-      const tarball = new URL(pkg.tarball);
-      if (tarball.origin !== new URL(npmRegistryUrl()).origin || tarball.username || tarball.password) {
-        throw new Error(`Package receipt has an invalid tarball URL: ${pkg.name}@${pkg.version}`);
-      }
-      const packageDir = path2.resolve(installRoot, ...relative.split("/"));
-      if (!isContained(installRoot, packageDir))
-        throw new Error(`Package escapes vendor root: ${relative}`);
-      const realPackageDir2 = await realpath(packageDir);
-      if (!isContained(installRoot, realPackageDir2)) {
-        throw new Error(`Package resolves outside the vendor root: ${relative}`);
-      }
-      const manifest = await readPackageJson(packageDir);
-      if (manifest.name !== pkg.name || manifest.version !== pkg.version) {
-        throw new Error(`Installed package identity changed: ${pkg.name}@${pkg.version}`);
-      }
-      const [expectedEntry, expectedRequireEntry] = await Promise.all([
-        recomputeReceiptEntry(packageDir, relative, manifest, "import"),
-        recomputeReceiptEntry(packageDir, relative, manifest, "require")
-      ]);
-      if (pkg.entry !== expectedEntry || pkg.requireEntry !== expectedRequireEntry) {
-        throw new Error(`Recorded package entries do not match package.json: ${pkg.name}@${pkg.version}`);
-      }
-      packages.set(relative, pkg);
-      manifests.set(relative, manifest);
-      verifiedPackages.push({
-        path: relative,
-        name: pkg.name,
-        packageDir: realPackageDir2,
-        manifest,
-        entryPath: await verifyReceiptEntry(installRoot, relative, pkg.entry, "Package import entry"),
-        requireEntryPath: await verifyReceiptEntry(installRoot, relative, pkg.requireEntry, "Package require entry"),
-        dependencies: pkg.dependencies
-      });
-    }
-    await assertVendorPackageOwnership(installRoot, receipt.packages.map((pkg) => pkg.path));
-    reconcileReceiptGraph(receipt, packages, manifests);
-    const rootPackagePath = safeReceiptPath(receipt.root.packagePath, "Root package path");
-    const rootPackage = packages.get(rootPackagePath);
-    if (!rootPackage || rootPackage.name !== expectedName || rootPackage.version !== expectedVersion) {
-      throw new Error("Vendor receipt root package is missing.");
-    }
-    const reachablePackages = new Set([rootPackagePath]);
-    const pendingPackages = [rootPackagePath];
-    while (pendingPackages.length > 0) {
-      const current = packages.get(pendingPackages.pop());
-      for (const target of Object.values(current.dependencies)) {
-        if (reachablePackages.has(target))
-          continue;
-        reachablePackages.add(target);
-        pendingPackages.push(target);
-      }
-    }
-    if (reachablePackages.size !== receipt.packages.length) {
-      throw new Error("Vendor receipt contains a package that is not reachable from its root.");
-    }
-    const rootManifest = manifests.get(rootPackagePath);
-    if (receipt.root.format !== "module" && receipt.root.format !== "commonjs") {
-      throw new Error("Vendor receipt root format is invalid.");
-    }
-    const entryRelative = safeReceiptPath(receipt.root.entry, "Plugin entry path");
-    if (!entryRelative.startsWith(`${rootPackagePath}/`)) {
-      throw new Error("Plugin entry is outside its package.");
-    }
-    const expectedRootEntry = receipt.root.format === "commonjs" ? rootPackage.requireEntry ?? rootPackage.entry : rootPackage.entry;
-    if (entryRelative !== expectedRootEntry) {
-      throw new Error("Plugin entry does not match the package graph entry.");
-    }
-    if (packageEntryFormat(rootManifest, entryRelative) !== receipt.root.format) {
-      throw new Error("Plugin entry format does not match its package metadata.");
-    }
-    const entryPath = path2.resolve(installRoot, ...entryRelative.split("/"));
-    const rootPackageDir = path2.resolve(installRoot, ...rootPackagePath.split("/"));
-    const [realPackageDir, realEntry] = await Promise.all([
-      realpath(rootPackageDir),
-      realpath(entryPath)
-    ]);
-    if (!isContained(installRoot, realEntry) || !isContained(realPackageDir, realEntry)) {
-      throw new Error("Plugin entry resolves outside the verified vendor tree.");
-    }
-    const entryInfo = await lstat(realEntry);
-    if (!entryInfo.isFile() || entryInfo.isSymbolicLink()) {
-      throw new Error("Plugin entry is not a regular file.");
-    }
-    return {
-      installRoot,
-      entryPath: realEntry,
-      format: receipt.root.format,
-      packages: verifiedPackages,
-      receipt
-    };
-  } catch (error) {
-    throw new Error(`Vendored plugin "${expectedName}@${expectedVersion}" failed verification: ` + `${error instanceof Error ? error.message : String(error)} Reinstall it before building.`, { cause: error });
-  }
-}
 
 // src/lib/source-provider.ts
 var noopLogger = {
@@ -1103,7 +709,7 @@ async function countUnversionedChanges(projectDir) {
   const appWritten = `${bookPrefix}${PLUGINS_DIR}/${VENDORED_NPM_DIR}/`;
   return withRepoLock(dir, async () => {
     const { adds, removes } = await listWorkdirChanges(dir);
-    const mine = new Set([...adds, ...removes].filter((f) => f.startsWith(bookPrefix) && !f.startsWith(appWritten) && path3.posix.basename(f) !== VENDOR_RECEIPT_FILE));
+    const mine = new Set([...adds, ...removes].filter((f) => f.startsWith(bookPrefix) && !f.startsWith(appWritten)));
     return { changedFiles: mine.size, stale: gitFs.existsSync(snapshotStagingMarkerPath(dir)) };
   });
 }
@@ -1279,4 +885,4 @@ async function switchBranch(options) {
   });
 }
 
-export { npmRegistryUrl, PLUGINS_DIR, VENDORED_NPM_DIR, VENDOR_RECEIPT_FILE, VENDOR_RECEIPT_VERSION, isValidNpmPackageName, parseNpmPluginSpec, isExactNpmVersion, vendoredNpmPluginRoot, vendoredNpmPluginPackageDir, packageEntryFormat, assertWindowsSafeRelativePath, windowsPathKey, packageResolutionTargets, resolvePackageEntry, computeVendorTreeDigest, resolveVendoredPluginInstallRoot, verifyVendoredPlugin, gitScopeFor, HISTORY_PAGE_LIMIT, withRepoLock, whenGitIdle, __repoLockQueueSizeForTests, resolveGitAuthor, listWorkdirChanges, stageChanges, hasPendingChanges, hasUncommittedChanges, snapshotWorkingTreeUnlocked, isNoChangesError, countUnversionedChanges, providerFor, gitDirFor, snapshotStagingMarkerPath, RESTORE_BACKUP_MESSAGE, AUTO_SNAPSHOT_MESSAGE, restoreVersionWithBackup, SWITCH_BRANCH_SNAPSHOT_MESSAGE, listLocalBranches, switchBranch };
+export { PLUGINS_DIR, VENDORED_NPM_DIR, isValidNpmPackageName, parseNpmPluginSpec, isExactNpmVersion, vendoredNpmPluginRoot, vendoredNpmPluginPackageDir, assertWindowsSafeRelativePath, windowsPathKey, packageResolutionTargets, safePackageTarget, resolvePackageEntry, resolveVendoredPluginInstallRoot, gitScopeFor, HISTORY_PAGE_LIMIT, withRepoLock, whenGitIdle, __repoLockQueueSizeForTests, resolveGitAuthor, listWorkdirChanges, stageChanges, hasPendingChanges, hasUncommittedChanges, snapshotWorkingTreeUnlocked, isNoChangesError, countUnversionedChanges, providerFor, gitDirFor, snapshotStagingMarkerPath, RESTORE_BACKUP_MESSAGE, AUTO_SNAPSHOT_MESSAGE, restoreVersionWithBackup, SWITCH_BRANCH_SNAPSHOT_MESSAGE, listLocalBranches, switchBranch };

package/dist/{cli-c41yr7he.js → cli-7fkhgtfn.js}

@@ -137,6 +137,9 @@ async function findTool(tool) {
   }
 }
 
+// src/lib/chromium.ts
+import { existsSync } from "node:fs";
+
 // src/lib/install-hints.ts
 var INSTALL_HINTS = {
   chromium: {
@@ -165,7 +168,6 @@ ${hint.body}`;
 }
 
 // src/lib/chromium.ts
-import { existsSync } from "node:fs";
 var SYSTEM_PATHS = [
   process.env.CHROMIUM_PATH,
   process.env.PUPPETEER_EXECUTABLE_PATH,

package/dist/{cli-k2hwrp7s.js → cli-97bdz5k0.js}

@@ -4,7 +4,7 @@ import {
 // package.json
 var package_default = {
   name: "gutterpress",
-  version: "0.11.10-alpha.2",
+  version: "0.11.10-alpha.6",
   description: "Markdown-to-PDF converter for professional print layout using a native Chromium print engine and Ghostscript.",
   author: "itlackey",
   license: "MPL-2.0",
@@ -64,11 +64,9 @@ var package_default = {
     node: ">=22.0.0"
   },
   dependencies: {
-    acorn: "8.16.0",
     chokidar: "^5.0.0",
     citty: "^0.2.0",
     diff3: "0.0.3",
-    "es-module-lexer": "2.0.0",
     fflate: "0.8.3",
     glob: "^13.0.0",
     htmlhint: "^1.9.2",
@@ -85,7 +83,6 @@ var package_default = {
     markdownlint: "^0.40.0",
     "pdf-lib": "^1.17.1",
     postcss: "^8.5.18",
-    "puppeteer-core": "^25.0.4",
     "resolve.exports": "2.0.3",
     semver: "7.8.0",
     tar: "7.5.20",