gutterpress 0.11.10 → 0.11.11-alpha.2

package/dist/{new-994trd8k.js → new-7w4ezfpy.js}

@@ -7,16 +7,16 @@ import {
   TARGET_IDS,
   scaffoldExtension,
   scaffoldProject
-} from "./cli-mv1mhpkk.js";
+} from "./cli-d2he8zph.js";
 import {
   resolveGhostscript
-} from "./cli-79tsqp3p.js";
+} from "./cli-1kdtzgxm.js";
 import {
   UsageError,
   rejectExtraPositionals,
   rejectUnknownFlags
-} from "./cli-b36za51e.js";
-import"./cli-30j93gzt.js";
+} from "./cli-ny50k8md.js";
+import"./cli-tjhn2mdn.js";
 import {
   EXIT_CODES
 } from "./cli-46ycxe6r.js";

package/dist/platform.d.ts

@@ -2,22 +2,19 @@
  * Platform abstraction contract (GitHub #41).
  *
  * The desktop talks to its host through ONE seam so that the app code never
- * branches on `electron` vs `web` directly. Today the only host is Electron
- * (IPC + native dialogs). When the PWA lands (0.6.0, #...), a `WebAdapter`
- * backed by the File System Access API drops in behind the same interface and
- * the app code does not change.
+ * branches on the host directly. The only host is Electron (IPC + native
+ * dialogs).
  *
  * This module is **types only** — it is imported by the browser SPA via
  * `import type`, so it must never pull in a Node runtime dependency.
  *
  * Canonical home: `gutterpress`. The desktop re-exports these types
- * from `src/lib/platform/` and implements them in `electron-adapter.ts` /
- * `web-adapter.ts`. Keep the implementations in lockstep with this contract.
+ * from `src/lib/platform/` and implements them in `electron-adapter.ts`.
+ * Keep the implementation in lockstep with this contract.
  */
 /**
- * The narrow set of capabilities whose implementation genuinely differs between
- * a desktop (Electron) host and a browser (PWA) host: native dialogs, raw file
- * IO, filesystem watching, and OS-keychain-backed secrets.
+ * The narrow set of host file primitives: raw file IO and filesystem
+ * watching.
  *
  * Host RPC services that are *also* host-divergent (preview/build/doctor/prefs/
  * updater) are modelled separately as {@link HostServices} so this primitive
@@ -45,56 +42,26 @@ export interface FileWriteResult {
     mtimeMs: number;
 }
 export interface PlatformAdapter {
-    /** Which host backs this adapter. Lets the rare unavoidable branch be explicit. */
-    readonly platform: "electron" | "web";
-    /**
-     * Prompt the user to choose a project folder.
-     * @returns the absolute path, or `null` if the user cancelled.
-     * Electron: native directory dialog. Web: File System Access API.
-     */
-    openFolder(): Promise<string | null>;
     /**
      * Read a UTF-8 text file by absolute path.
-     * Editor seam for #38/#39 — no current consumer in 0.4.0.
      */
     readFile(path: string): Promise<string>;
     /**
      * Write a UTF-8 text file by absolute path, creating/overwriting it.
      * Resolves with the post-write {@link FileWriteResult} (`{ mtimeMs }`) so the
-     * editor (#44) can record the on-disk baseline mtime; callers that ignore the
-     * value are unaffected (additive widening — was `Promise<void>`).
+     * editor (#44) can record the on-disk baseline mtime.
      */
     writeFile(path: string, content: string): Promise<FileWriteResult>;
-    /**
-     * List the immediate entries of a directory (single level, no recursion).
-     * @returns each entry's `name`, absolute `path`, and whether it `isDir`.
-     * Editor seam for #38 (file-tree sidebar). Electron: `node:fs/promises`
-     * `readdir`. Web: File System Access API (0.6.0).
-     */
-    listDir(path: string): Promise<Array<{
-        name: string;
-        path: string;
-        isDir: boolean;
-    }>>;
     /**
      * Stat a file by absolute path (GitHub #44). Used by the editor to confirm a
      * `watchFolder` event reflects a real on-disk change (mtime moved) versus the
      * self-echo of our own `writeFile`. Resolves with `exists: false` rather than
-     * rejecting when the path is absent. Web throws until 0.6.0 (FS Access API).
+     * rejecting when the path is absent.
      */
     statFile(path: string): Promise<FileStat>;
     /**
      * Watch a folder for changes, invoking `cb` on each change.
      * @returns an unsubscribe function.
-     * Web has no general recursive-watch primitive — `WebAdapter` throws here
-     * until 0.6.0. Electron wiring lands with the in-app editor (#38).
      */
     watchFolder(path: string, cb: () => void): () => void;
-    /**
-     * Read a secret by key (e.g. a GitHub token). Lands with #12.
-     * Electron: OS keychain via `safeStorage`. Web: encrypted localStorage.
-     */
-    getSecret(key: string): Promise<string | null>;
-    /** Store a secret by key. Lands with #12. */
-    setSecret(key: string, value: string): Promise<void>;
 }

package/dist/{preflight-2rtrakyf.js → preflight-f3h6arjp.js}

@@ -2,16 +2,16 @@ import {
   executeValidation,
   publishTargetFor,
   reportMissingTools
-} from "./cli-mv1mhpkk.js";
+} from "./cli-d2he8zph.js";
 import {
   log
-} from "./cli-79tsqp3p.js";
+} from "./cli-1kdtzgxm.js";
 import {
   UsageError,
   rejectExtraPositionals,
   rejectUnknownFlags
-} from "./cli-b36za51e.js";
-import"./cli-30j93gzt.js";
+} from "./cli-ny50k8md.js";
+import"./cli-tjhn2mdn.js";
 import {
   EXIT_CODES
 } from "./cli-46ycxe6r.js";

package/dist/preview/file-watcher.d.ts

@@ -125,11 +125,9 @@ export declare function externalWatchTargets(projectDir: string, config: {
  * Create and configure a file watcher for the project's input directory plus
  * the book's declared external dependencies (see {@link externalWatchTargets}).
  *
- * Nothing is mirrored anywhere: the old external-asset-root watching (a sibling
- * `../_shared` directory copied under its own name into the temp dir) went away
- * with `copyAssets` and the manifest's `source.assets` field it depended on.
- * The project is served straight from disk and stylesheets are inlined at
- * render time, so an external dependency needs watching, not staging.
+ * Nothing is mirrored anywhere: the project is served straight from disk and
+ * stylesheets are inlined at render time, so an external dependency needs
+ * watching, not staging.
  */
 export declare function createFileWatcher(state: ServerState): FSWatcher;
 /**

package/dist/preview/lifecycle.d.ts

@@ -9,9 +9,8 @@ import type { ServerState } from './server-context';
 /**
  * Initialize the preview's temp directory.
  *
- * SERVE-IN-PLACE (this replaces the old whole-tree `copyDirectory(inputPath,
- * tempDir)` + manifest-asset `copyAssets` call): the temp dir is no longer a
- * mirror of the project. It holds ONLY files gutterpress itself generates — right
+ * SERVE-IN-PLACE: the temp dir is not a mirror of the project. It holds ONLY
+ * files gutterpress itself generates — right
  * now that's `book.html` (written later by {@link generateAndWriteHtml}) and
  * the PID marker file below. Every other path the served HTML asks for
  * (images, anything else under the project) is read straight from the
@@ -23,12 +22,8 @@ import type { ServerState } from './server-context';
  * so there is no separate copy step that can drift from what a build actually
  * ships (the "works in preview, broken in the PDF" bug class). It also means
  * a project's `.env`, `.git`, or any other dotfile is never duplicated into a
- * world-readable temp dir the way the old whole-tree copy did — see
- * http-server.ts's dotfile guard, which is what stands between a request and
- * the project's real dotfiles now that the project is served directly.
- *
- * No longer takes `inputPath`/`config` — both were needed only for the copy
- * steps removed above, and there is nothing left to configure here.
+ * world-readable temp dir — see http-server.ts's dotfile guard, which is what
+ * stands between a request and the project's real dotfiles.
  */
 export declare function initializePreviewDirectories(): Promise<string>;
 /**
@@ -46,14 +41,11 @@ export declare function initializeConfiguration(inputPath: string): Promise<Reso
 /**
  * Restart the preview server with a new input directory.
  *
- * SERVE-IN-PLACE makes this trivially correct where the old copy-based
- * version was not: the HTTP server (http-server.ts) reads `state.
- * currentInputPath` fresh on every request instead of serving a stale mirror,
- * so repointing that one field IS the switch — there is no per-project copy
- * to redo, and therefore no old project's files left behind in the (now
- * shared-nothing, generated-files-only) temp dir the way the previous
- * `copyDirectory(newInputPath, state.tempDir)` could leave a stale mix of two
- * projects' content if it partially failed.
+ * SERVE-IN-PLACE makes this trivially correct: the HTTP server
+ * (http-server.ts) reads `state.currentInputPath` fresh on every request
+ * instead of serving a mirror, so repointing that one field IS the switch —
+ * there is no per-project copy to redo, and no old project's files left
+ * behind in the generated-files-only temp dir.
  */
 export declare function restartPreview(newInputPath: string, state: ServerState): Promise<void>;
 /**

package/dist/{preview-bridge-b4jbtb79.js → preview-bridge-8jhd1wpb.js}

@@ -67,7 +67,7 @@
   window.addEventListener('renderingComplete', function (e) {
     post({ type: 'gutterpress:event', name: 'renderingComplete', detail: e.detail });
   });
-  // ADR 0005: source-position sync + click-to-source.
+  // source-position sync + click-to-source.
   window.addEventListener('sourceLineChanged', function (e) {
     post({ type: 'gutterpress:event', name: 'sourceLineChanged', detail: e.detail });
   });

package/dist/{preview-interface-9rwz21yw.js → preview-interface-twd6nsf5.js}

@@ -82,16 +82,18 @@
     return (bestArea > 0 ? best : nearest) + 1;
   }
 
-  function scrollToCurrentPage() {
+  function scrollToCurrentPage(smooth) {
     if (pages.length === 0) return;
     var page = clampPage(currentPage);
     currentPage = page;
-    ignoreScrollUntil = Date.now() + 300;
+    // A smooth scroll is still moving when the plain 300ms guard expires, and
+    // detectVisiblePage would then report the page it is passing through.
+    ignoreScrollUntil = Date.now() + (smooth ? 700 : 300);
     // Native's rows can be wider than the viewport (a long chapter scrolls
     // horizontally within its own row) — align the target sheet's left edge
     // to the viewport's left edge (matching detectVisiblePage's `refX`).
     pages[page - 1].scrollIntoView({
-      behavior: 'instant',
+      behavior: smooth ? 'smooth' : 'instant',
       block: 'start',
       inline: 'start'
     });
@@ -102,7 +104,7 @@
     return (mode || currentViewMode) === 'single' ? 1 : 2;
   }
 
-  // ── Source-mapping helpers (ADR 0005) ──────────────────────────────────────
+  // ── Source-mapping helpers ──────────────────────────────────────
   // Every block element carries data-source-line (markdown-it-source-map). These
   // map rendered DOM <-> markdown source line and rendered DOM <-> page. The
   // native fragmenter MOVES elements into strips, it does not clone them, so
@@ -360,7 +362,7 @@
   // plate UNDER the page's own text (gutterpress-css.ts's depth ladder) —
   // hit-tests beneath the covering paragraph boxes and the annotated
   // `.page`/`.section` containers too, so document.elementFromPoint() can
-  // NEVER return it. Every right-click used to resolve the covering element
+  // NEVER return it: a right-click would resolve the covering element
   // instead, leaving the image's context menu unreachable at EVERY point.
   // Probe the full hit stack for the first (= top-most in paint order, so
   // the upper of two overlapping plates wins) image layered at negative z.
@@ -632,13 +634,11 @@
   // swapped for that block's markdown source under
   // `contenteditable="plaintext-only"`, so the caret sits in the real page, in
   // the book's own typography, and Chromium's fragmenter re-flows the pages
-  // around it as the author types. This replaced a floating CodeMirror panel
-  // positioned in host-SPA coordinates; `getRectsFor()`/`setEditMask()` existed
-  // ONLY to serve that panel and went with it (protocol v8).
+  // around it as the author types.
   //
   // Three properties of the native viewer are what make this work, each
-  // spike-verified rather than assumed (plan §2) — the floating panel existed
-  // because none of them can be assumed of a paginator that pre-cuts the DOM:
+  // verified rather than assumed (plan §2) — none of them can be assumed of
+  // a paginator that pre-cuts the DOM:
   //   1. A block spanning a page break is ONE element with several client
   //      rects, so it takes ONE contenteditable and the caret crosses the
   //      break natively (ArrowDown walks into the next page).
@@ -1064,7 +1064,7 @@
       return api.notifyPageChange();
     },
 
-    // ── ADR 0005 generic primitives ─────────────────────────────────────────
+    // ── Generic primitives ─────────────────────────────────────────
     // Bumped whenever a command/event is added so a hot-updated SPA can
     // feature-detect against an older bundled lib.
     // v6 (WORK PACKAGE B item 2): getRectsFor()/setEditMask() dropped the
@@ -1360,7 +1360,7 @@
 
   // Click-to-source: emit elementActivated when the user clicks a source-mapped
   // block. Never preventDefault (links/selection keep working); the host decides
-  // whether to act. (ADR 0005)
+  // whether to act.
   if (typeof document.addEventListener === 'function') {
     document.addEventListener('click', function (e) {
       var el = e.target && e.target.closest ? e.target.closest('[data-source-line]') : null;
@@ -1472,7 +1472,7 @@
       currentPage = page;
       if (!silent) api.notifyPageChange();
     }
-    // Emit finer-grained source position for editor sync (ADR 0005).
+    // Emit finer-grained source position for editor sync.
     var pos = visibleSourcePosition();
     var sl = pos ? pos.line : null;
     var chapter = pos ? chapterOf(pos.el) : null;
@@ -1505,6 +1505,67 @@
   });
   window.addEventListener('resize', scheduleViewportChanged);
 
+  // Wheel / trackpad page flip (#301). Viewer tooling, not pagination: it
+  // only chooses which already-laid-out page to show. It lives here, in the
+  // book document, because wheel events over a cross-origin iframe never
+  // reach the host page.
+  //
+  // One flick turns one step — the same 1 page (single view) or 2 pages
+  // (spread) the arrow keys move. A gesture is every wheel event until the
+  // wheel has been quiet for WHEEL_GESTURE_IDLE_MS, so a fast mouse spin or a
+  // trackpad's inertia tail turns exactly one step.
+  //
+  // A page taller than the viewport (fit-width on a short window, high zoom)
+  // is READ first: while there is more of it in the wheel's direction, the
+  // wheel scrolls normally, and only a gesture that starts at its edge turns
+  // the page. The choice is made once per gesture, so the momentum of reading
+  // down to a page's end never turns the page by itself. Pinch / Ctrl+wheel
+  // (zoom), sideways swipes and in-place editing are left alone.
+  var WHEEL_FLIP_PX = 50;
+  var WHEEL_GESTURE_IDLE_MS = 220;
+  var wheelGesture = null; // null | 'scroll' | 'flip'
+  var wheelAccum = 0;
+  var wheelTurned = false;
+  var wheelIdleTimer = null;
+  function wheelDeltaPx(e) {
+    if (e.deltaMode === 1) return e.deltaY * 16; // lines
+    if (e.deltaMode === 2) return e.deltaY * window.innerHeight; // pages
+    return e.deltaY;
+  }
+  // More of the current page lies beyond the viewport edge in direction `dir`.
+  function pageContinuesPastViewport(dir) {
+    if (pages.length === 0) refreshPages();
+    var sheet = pages[clampPage(currentPage) - 1];
+    if (!sheet) return false;
+    var r = sheet.getBoundingClientRect();
+    return dir > 0 ? r.bottom > window.innerHeight + 1 : r.top < -1;
+  }
+  window.addEventListener('wheel', function (e) {
+    if (e.ctrlKey || edit || e.deltaY === 0 || Math.abs(e.deltaX) > Math.abs(e.deltaY)) return;
+    if (wheelIdleTimer) clearTimeout(wheelIdleTimer);
+    wheelIdleTimer = setTimeout(function () {
+      wheelIdleTimer = null;
+      wheelGesture = null;
+      wheelAccum = 0;
+      wheelTurned = false;
+    }, WHEEL_GESTURE_IDLE_MS);
+    if (wheelGesture === null) {
+      wheelGesture = pageContinuesPastViewport(e.deltaY > 0 ? 1 : -1) ? 'scroll' : 'flip';
+    }
+    if (wheelGesture === 'scroll') return;
+    e.preventDefault();
+    if (wheelTurned) return;
+    wheelAccum += wheelDeltaPx(e);
+    if (Math.abs(wheelAccum) < WHEEL_FLIP_PX) return;
+    wheelTurned = true;
+    refreshPages();
+    var target = clampPage(currentPage + (wheelAccum > 0 ? 1 : -1) * pageStep());
+    if (target === currentPage) return;
+    currentPage = target;
+    scrollToCurrentPage(true);
+    api.notifyPageChange();
+  }, { passive: false });
+
   // Reset to page 1, scroll to top, and announce completion once the native
   // viewer's pagination finishes.
   function onRenderingComplete() {

package/dist/{preview-shell-tqndvhbx.js → preview-shell-y8yrm3f0.js}

@@ -288,27 +288,16 @@
     armPendingSwap();
   }
 
-  // Incremental chapter splice used to live here (spliceChapter): it grafted
-  // a freshly-paginated replacement into a chapter's live page range. It was
-  // tried and removed (2026-08-08 review), and the standing reason is
-  // PERFORMANCE, not soundness: measured end-to-end (file write -> change
-  // visible, 5 samples, 34pp field guide) the plain full reload (`swap`,
-  // below) is 509ms avg vs the incremental splice's 998ms avg. The server
-  // now sends ONE update kind, `full-reload`, and every one goes straight to
-  // `swap()`; the `/__chapter` route and `content-update` message that fed
-  // the splice were deleted with it.
+  // The server sends ONE update kind, `full-reload`, and every one goes
+  // straight to `swap()` (below). An incremental chapter splice was measured
+  // SLOWER, not unsound: end-to-end (file write -> change visible, 5 samples,
+  // 34pp field guide) the full reload is 509ms avg vs the splice's 998ms avg.
   //
-  // CORRECTED 2026-08-24: the 2026-08-08 review ALSO recorded a soundness
-  // objection — that `refresh()` -> `relayout()` "only re-measures the
-  // EXISTING strips", silently dropping any page context the edit
-  // introduces. That is false against the current `fragment.ts`, whose
-  // `relayout()` unwraps the strips and re-runs `buildStrips()` from
-  // scratch before re-measuring, precisely so a mutation that adds or
-  // removes a page-context run is seen. Do not cite the old objection as a
-  // reason a DOM mutation cannot be re-paginated — it can, and the inline
+  // A DOM mutation CAN be re-paginated: `refresh()` -> `relayout()` unwraps
+  // the strips and re-runs `buildStrips()` from scratch before re-measuring,
+  // so a mutation that adds or removes a page-context run is seen. The inline
   // editing work depends on it (docs/inline-editing-plan.md, ADR 0009
-  // decision 4 as revised). The perf comparison above still stands on its
-  // own for the full-document reload path.
+  // decision 4).
 
   function markActiveReady() {
     onReady(active, function () {

package/dist/{preview-n9s46142.js → preview-y39jrpbs.js}

@@ -6,10 +6,10 @@ import {
   runBuild,
   splitOutPath,
   startPreviewServer
-} from "./cli-mv1mhpkk.js";
+} from "./cli-d2he8zph.js";
 import {
   log
-} from "./cli-79tsqp3p.js";
+} from "./cli-1kdtzgxm.js";
 import {
   UsageError,
   parseFormat,
@@ -17,8 +17,8 @@ import {
   rejectExtraPositionals,
   rejectUnknownFlags,
   resolvePort
-} from "./cli-b36za51e.js";
-import"./cli-30j93gzt.js";
+} from "./cli-ny50k8md.js";
+import"./cli-tjhn2mdn.js";
 import {
   BuildError
 } from "./cli-46ycxe6r.js";

package/dist/{publish-wte9548r.js → publish-tvj3xh8m.js}

@@ -11,17 +11,17 @@ import {
   publishProviderFor,
   resolvePublishFormat,
   runPublish
-} from "./cli-mv1mhpkk.js";
+} from "./cli-d2he8zph.js";
 import {
   FileTokenStore,
   log
-} from "./cli-79tsqp3p.js";
+} from "./cli-1kdtzgxm.js";
 import {
   UsageError,
   rejectExtraPositionals,
   rejectUnknownFlags
-} from "./cli-b36za51e.js";
-import"./cli-30j93gzt.js";
+} from "./cli-ny50k8md.js";
+import"./cli-tjhn2mdn.js";
 import {
   EXIT_CODES
 } from "./cli-46ycxe6r.js";

package/dist/render.d.ts

@@ -1,13 +1,13 @@
 /**
  * gutterpress/render — the PURE, node-free render core.
  *
- * §1/§8 / ADR 0004: this entry deliberately exposes ONLY the browser-safe
+ * §1/§8: this entry deliberately exposes ONLY the browser-safe
  * markdown→HTML→book.html pieces. It transitively imports markdown-it + its
  * plugins, Gutterpress's inlined marker parser (`markers.js`), and pure helpers
- * — and NOTHING from `node:*`/`fs`/`path`/`url`. This is what the desktop's WebAdapter imports
- * (a *value* import that stays PWA-clean), so the in-browser live preview (#33)
- * can render the opened project entirely client-side with no localhost server
- * and no headless Chromium.
+ * — and NOTHING from `node:*`/`fs`/`path`/`url`. It has no browser consumer
+ * today; it is kept node-free (scripts/check-render-pure.mjs) because any
+ * future browser build of the app needs to render a book client-side, and that
+ * discipline is far harder to restore than to keep.
  *
  * The CLI build path keeps using `renderChapters` / `renderChaptersToFile` from
  * `./lib/markdown/index.ts` (the node wrapper around this same core).

package/dist/render.js

@@ -894,8 +894,8 @@ var GUTTERPRESS_CSS = `
 
 /* the per-shape decisions the paragraph above deliberately leaves to the
    author, named instead of left as raw CSS every book was reinventing
-   (2026-09-01 CSS architecture review, findings C1/C7 — CLAUDE.md §0:
-   "behavior broadly useful to non-technical authors belongs in core").
+   (CLAUDE.md §0: "behavior broadly useful to non-technical authors belongs
+   in core").
    Permanent vocabulary, standard properties verbatim — same rationale as
    the column/grid runs above. One name each, no aliases:
      .gp-columns-all       column-span: all      a heading or block that

package/dist/schema/manifest.types.d.ts

@@ -206,11 +206,11 @@ export interface ResolvedExtensionConfig {
 }
 /**
  * Fully-resolved config. Every field is a concrete default with one
- * deliberate exception: `styles` (ARCH finding #2). There is no preset
+ * deliberate exception: `styles`. There is no preset
  * default for it — `undefined` means "the manifest didn't set one", and
  * `resolveActiveStyles` (style-resolver.ts) is the single source of truth for
  * what that resolves to (styles/book.css, else the first discovered `.css`,
- * else `[]`). Baking a preset default in here defeated that fallback chain.
+ * else `[]`). Baking a preset default in here would defeat that fallback chain.
  */
 export interface ResolvedConfig {
     title: string;

package/dist/utils/logger.d.ts

@@ -10,8 +10,7 @@
  *   - The `log` facade object (`log.info`/`log.warn`/`log.error`/`log.success`)
  *     — clean, prefix-styled command output used by the CLI commands and
  *     re-exported from `index.ts` for the desktop. Always emitted (it carries
- *     user-facing command results, not diagnostic chatter), preserving the
- *     historical `lib/logger` behavior verbatim.
+ *     user-facing command results, not diagnostic chatter).
  */
 export type LogLevel = 'DEBUG' | 'INFO' | 'WARN' | 'ERROR';
 /**

package/dist/{validate-jfsh3m1c.js → validate-9enr4ecc.js}

@@ -1,15 +1,15 @@
 import {
   executeAndReport
-} from "./cli-mv1mhpkk.js";
+} from "./cli-d2he8zph.js";
 import {
   log
-} from "./cli-79tsqp3p.js";
+} from "./cli-1kdtzgxm.js";
 import {
   UsageError,
   rejectExtraPositionals,
   rejectUnknownFlags
-} from "./cli-b36za51e.js";
-import"./cli-30j93gzt.js";
+} from "./cli-ny50k8md.js";
+import"./cli-tjhn2mdn.js";
 import {
   EXIT_CODES
 } from "./cli-46ycxe6r.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gutterpress",
-  "version": "0.11.10",
+  "version": "0.11.11-alpha.2",
   "description": "Markdown-to-PDF converter for professional print layout using a native Chromium print engine and Ghostscript.",
   "author": "itlackey",
   "license": "MPL-2.0",
@@ -67,7 +67,7 @@
     "glob": "^13.0.0",
     "htmlhint": "^1.9.2",
     "isomorphic-git": "^1.38.4",
-    "markdown-it": "^14.1.0",
+    "markdown-it": "^14.3.2",
     "markdown-it-abbr": "^2.0.0",
     "markdown-it-attrs": "^4.3.0",
     "markdown-it-deflist": "^3.0.1",
@@ -81,7 +81,7 @@
     "postcss": "^8.5.18",
     "resolve.exports": "2.0.3",
     "semver": "7.8.0",
-    "tar": "7.5.20",
+    "tar": "7.5.22",
     "unpdf": "^1.6.2",
     "ws": "^8.21.0",
     "yaml": "^2.8.2"