gutterpress 0.11.13-alpha.1 → 0.11.14-alpha.1

package/dist/api/index.d.ts

@@ -33,8 +33,8 @@ export { listBuiltInTemplates, listCustomTemplates, saveProjectAsTemplate, impor
 export type { TemplateInfo, SaveProjectAsTemplateOptions, } from "../lib/project-templates.ts";
 export { extractVariables, substituteVariables, listSnippets, readSnippet, saveSnippet, deleteSnippet, listMergedSnippets, readExtensionSnippet, SNIPPETS_DIR, } from "../lib/snippets.ts";
 export type { SnippetEntry, SnippetSource } from "../lib/snippets.ts";
-export { listProjectExtensions, describeExtension, addExtension, removeExtension, setExtensionEnabled, reorderExtensions, validateProjectExtensions, readExtensionCss, listBuiltInStyleSets, addBuiltInStyleSet, sameExtension, RECOMMENDED_EXTENSIONS, BUILT_IN_STYLE_SET_IDS, EXTENSIONS_DIR, PLUGINS_DIR, } from "../lib/extension-manager.ts";
-export type { ProjectExtensionEntry, ExtensionValidationResult, RecommendedExtension, ExtensionSourceKind, BuiltInStyleSet, BuiltInStyleSetId, AddExtensionOptions, } from "../lib/extension-manager.ts";
+export { listProjectExtensions, describeExtension, addExtension, checkExtensionUpdates, updateExtensions, removeExtension, setExtensionEnabled, reorderExtensions, validateProjectExtensions, readExtensionCss, listBuiltInStyleSets, addBuiltInStyleSet, sameExtension, RECOMMENDED_EXTENSIONS, BUILT_IN_STYLE_SET_IDS, EXTENSIONS_DIR, PLUGINS_DIR, } from "../lib/extension-manager.ts";
+export type { ProjectExtensionEntry, ExtensionValidationResult, RecommendedExtension, ExtensionSourceKind, BuiltInStyleSet, BuiltInStyleSetId, AddExtensionOptions, ExtensionUpdateCheck, ExtensionUpdateResult, CheckExtensionUpdatesOptions, UpdateExtensionsOptions, } from "../lib/extension-manager.ts";
 export { BUNDLED_EXTENSIONS, isBundledExtension, isPathSpecifier, parseExtensionSpecifier, } from "../lib/extension-specifier.ts";
 export type { ParsedExtensionSpecifier } from "../lib/extension-specifier.ts";
 export { importExtensionFromFile, importExtensionFromUrl } from "../lib/extension-import.ts";

package/dist/api/index.js

@@ -36,6 +36,7 @@ import {
   assertExtensionContained,
   autoSnapshotDelayMs,
   autoSyncDelayMs,
+  checkExtensionUpdates,
   cloneRepository,
   connectGenericHost,
   connectGoogleDrive,
@@ -126,8 +127,9 @@ import {
   substituteVariables,
   syncProject,
   testRemoteAccess,
+  updateExtensions,
   validateProjectExtensions
-} from "../index-3gxxb075.js";
+} from "../index-ch9k0kam.js";
 import {
   BuildError
 } from "../index-mw8b25yx.js";
@@ -162,6 +164,7 @@ import"../index-37x76zdn.js";
 export {
   whenGitIdle,
   validateProjectExtensions,
+  updateExtensions,
   testRemoteAccess,
   syncProject,
   switchBranch,
@@ -264,6 +267,7 @@ export {
   connectGoogleDrive,
   connectGenericHost,
   cloneRepository,
+  checkExtensionUpdates,
   capabilitiesFor,
   autoSyncDelayMs,
   autoSnapshotDelayMs,

package/dist/{build-ncxz7s6y.js → build-9ccmg4jw.js}

@@ -1,17 +1,17 @@
 import {
   runBuild,
   splitOutPath
-} from "./cli-ahhc9qhq.js";
+} from "./cli-s38v88rv.js";
 import {
   log
-} from "./cli-2r5m5wyx.js";
+} from "./cli-cmyfeqg6.js";
 import {
   UsageError,
   parseFormat,
   parsePdfxFlavor,
   rejectExtraPositionals,
   rejectUnknownFlags
-} from "./cli-e9matqtf.js";
+} from "./cli-tctw7rcm.js";
 import"./cli-tjhn2mdn.js";
 import {
   BuildError

package/dist/{cli-2r5m5wyx.js → cli-cmyfeqg6.js}

@@ -1,6 +1,6 @@
 import {
   package_default
-} from "./cli-e9matqtf.js";
+} from "./cli-tctw7rcm.js";
 import {
   execCapture,
   findTool,

package/dist/{cli-ahhc9qhq.js → cli-s38v88rv.js}

@@ -13,12 +13,12 @@ import {
   stampCreator,
   stripAnnotations,
   warn
-} from "./cli-2r5m5wyx.js";
+} from "./cli-cmyfeqg6.js";
 import {
   DEBOUNCE,
   UsageError,
   resolvePort
-} from "./cli-e9matqtf.js";
+} from "./cli-tctw7rcm.js";
 import {
   MARGIN_BOX_IGNORED_PROPERTIES,
   getAssetPath,
@@ -9347,7 +9347,7 @@ var SKIP_ENTRIES = new Set([
 ]);
 
 // src/lib/extension-manager.ts
-import { cp as cp2, mkdir as mkdir8, readFile as readFile26, rm as rm3, stat as stat6 } from "node:fs/promises";
+import { cp as cp2, mkdir as mkdir8, readdir as readdir5, readFile as readFile26, rm as rm3, stat as stat6 } from "node:fs/promises";
 import { existsSync as existsSync12 } from "node:fs";
 import path17 from "node:path";
 import { isSeq as isSeq3, isMap as isMap2, isScalar as isScalar2, YAMLMap, Scalar } from "yaml";
@@ -10013,6 +10013,7 @@ async function rollbackNpmPluginInstall(installed) {
 }
 
 // src/lib/extension-manager.ts
+import { gt as semverGt } from "semver";
 var EXTENSIONS_DIR = "extensions";
 var RECOMMENDED_EXTENSIONS = [
   {
@@ -10377,9 +10378,91 @@ async function addExtensionUnlocked(projectDir, specifier, options) {
   await finalizeNpmPluginInstall(installed).catch((error2) => {
     warnings.push(`The extension was installed, but an old backup could not be removed: ` + `${error2 instanceof Error ? error2.message : String(error2)}`);
   });
+  await pruneOtherVersions(projectDir, installed.name, installed.version).catch((error2) => {
+    warnings.push(`The extension was installed, but a previous version's vendored copy could not be removed: ` + `${error2 instanceof Error ? error2.message : String(error2)}`);
+  });
   const entry = await describeExtension(projectDir, use);
   return warnings.length > 0 ? { ...entry, warnings: [...entry.warnings ?? [], ...warnings] } : entry;
 }
+async function pruneOtherVersions(projectDir, name, keep) {
+  const parent = path17.dirname(vendoredNpmPluginRoot(projectDir, name, keep));
+  let entries;
+  try {
+    entries = await readdir5(parent, { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    if (!entry.isDirectory() || entry.name === keep || !isExactNpmVersion(entry.name))
+      continue;
+    await rm3(path17.join(parent, entry.name), { recursive: true, force: true });
+  }
+}
+var LATEST_LOOKUP_TIMEOUT_MS = 30000;
+var MAX_PACKUMENT_BYTES = 15 * 1024 * 1024;
+async function latestNpmVersion(name, options) {
+  const fetchImpl = options.fetch ?? globalThis.fetch;
+  return withFetchTimeout({
+    timeoutMs: LATEST_LOOKUP_TIMEOUT_MS,
+    signal: options.signal,
+    timeoutMessage: `Looking up ${name} on npm timed out. Check your connection and try again.`,
+    offlineMessage: (cause) => `Looking up ${name} on npm failed (${cause instanceof Error ? cause.message : String(cause)}).`
+  }, async (signal) => {
+    const response = await fetchImpl(`${npmRegistryUrl()}/${encodeURIComponent(name)}`, {
+      signal,
+      redirect: "error",
+      headers: { accept: "application/vnd.npm.install-v1+json" }
+    });
+    if (response.status === 404)
+      throw new FriendlyHttpError(`npm package "${name}" was not found.`);
+    if (!response.ok)
+      throw new FriendlyHttpError(`Looking up ${name} on npm failed (HTTP ${response.status}).`);
+    const bytes = await response.arrayBuffer();
+    if (bytes.byteLength > MAX_PACKUMENT_BYTES) {
+      throw new FriendlyHttpError(`npm metadata for "${name}" is too large to read.`);
+    }
+    let latest;
+    try {
+      latest = JSON.parse(Buffer.from(bytes).toString("utf8"))["dist-tags"]?.latest;
+    } catch {
+      throw new FriendlyHttpError(`npm metadata for "${name}" is not valid JSON.`);
+    }
+    if (typeof latest !== "string" || !isExactNpmVersion(latest)) {
+      throw new FriendlyHttpError(`npm metadata for "${name}" has no latest version.`);
+    }
+    return latest;
+  });
+}
+async function checkExtensionUpdates(projectDir, options = {}) {
+  const entries = await listProjectExtensions(projectDir);
+  const pinned = entries.filter((e) => e.kind === "npm" && e.version);
+  return Promise.all(pinned.map(async (e) => {
+    const current = e.version;
+    const latest = await latestNpmVersion(e.name, options);
+    return { use: e.use, name: e.name, current, latest, outdated: semverGt(latest, current) };
+  }));
+}
+async function updateExtensions(projectDir, options = {}) {
+  let checks2 = await checkExtensionUpdates(projectDir, options);
+  if (options.only) {
+    checks2 = checks2.filter((c) => c.name === options.only);
+    if (checks2.length === 0) {
+      throw new Error(`"${options.only}" is not a pinned npm extension of this book.`);
+    }
+  }
+  const updated = [];
+  for (const check37 of checks2) {
+    if (!check37.outdated)
+      continue;
+    await addExtension(projectDir, pinnedNpmSpecifier(check37.name, check37.latest), {
+      fetch: options.fetch,
+      signal: options.signal,
+      limits: options.limits
+    });
+    updated.push({ name: check37.name, from: check37.current, to: check37.latest });
+  }
+  return updated;
+}
 async function uniqueExtensionId(projectDir, base) {
   const slug = slugify(base) || "extension";
   let candidate = slug;
@@ -11429,7 +11512,7 @@ var drivethrurpgProvider = {
 };
 
 // src/lib/publish/providers/gdrive.ts
-import { mkdtemp as mkdtemp3, readFile as readFile28, readdir as readdir5, rm as rm5, stat as stat7, writeFile as writeFile9 } from "node:fs/promises";
+import { mkdtemp as mkdtemp3, readFile as readFile28, readdir as readdir6, rm as rm5, stat as stat7, writeFile as writeFile9 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
 import path20 from "node:path";
 import { Zip, ZipDeflate } from "fflate";
@@ -11814,7 +11897,7 @@ function zipEntriesNonBlocking(entries, opts) {
   });
 }
 async function collectZipEntries(root, dir, out, onWarn) {
-  const entries = await readdir5(dir, { withFileTypes: true });
+  const entries = await readdir6(dir, { withFileTypes: true });
   for (const entry of entries) {
     const full = path20.join(dir, entry.name);
     if (entry.isDirectory()) {
@@ -12487,7 +12570,7 @@ function publishProviderFor(id) {
 }
 
 // src/lib/publish/run-publish.ts
-import { readdir as readdir6, stat as stat10 } from "node:fs/promises";
+import { readdir as readdir7, stat as stat10 } from "node:fs/promises";
 import path23 from "node:path";
 function resolvePublishFormat(info9, providerConfig) {
   if (info9.formats && info9.formats.length > 0) {
@@ -12583,7 +12666,7 @@ async function htmlDirIssues(dir) {
       message: `${dir} has no ${BOOK_HTML} — it isn't an HTML export. ${HTML_HINT}`
     });
   }
-  const entries = await readdir6(dir).catch(() => []);
+  const entries = await readdir7(dir).catch(() => []);
   const extras = entries.filter((name) => name.toLowerCase().endsWith(".pdf") || name === BUILD_FINGERPRINT_FILENAME);
   if (extras.length > 0) {
     issues.push({
@@ -12899,4 +12982,4 @@ function normalizeProjectKey(projectDir) {
 }
 // src/lib/publish/manifest-publish.ts
 import { isMap as isMap4 } from "yaml";
-export { isPathSpecifier, parseExtensionSpecifier, PRESET_IDS, PRESETS, TARGETS, TARGET_IDS, publishTargetFor, loadManifestWithPath, reportMissingTools, executeValidation, executeAndReport, splitOutPath, runBuild, openPath, startPreviewServer, scaffoldProject, EXTENSION_KINDS, scaffoldExtension, BUILT_IN_TEMPLATE_IDS, BUILT_IN_STYLE_SET_IDS, listProjectExtensions, setExtensionEnabled, removeExtension, addExtension, addBuiltInStyleSet, importExtensionFromFile, importExtensionFromUrl, searchNpmExtensions, publishCredentialKey, publishConnectionStatus, listPublishAccounts, connectGoogleDrive, listPublishProviders, publishProviderFor, resolvePublishFormat, runPublish, connectPublishProvider, disconnectPublishCredential };
+export { isPathSpecifier, parseExtensionSpecifier, PRESET_IDS, PRESETS, TARGETS, TARGET_IDS, publishTargetFor, loadManifestWithPath, reportMissingTools, executeValidation, executeAndReport, splitOutPath, runBuild, openPath, startPreviewServer, scaffoldProject, EXTENSION_KINDS, scaffoldExtension, BUILT_IN_TEMPLATE_IDS, BUILT_IN_STYLE_SET_IDS, listProjectExtensions, setExtensionEnabled, removeExtension, addExtension, checkExtensionUpdates, updateExtensions, addBuiltInStyleSet, importExtensionFromFile, importExtensionFromUrl, searchNpmExtensions, publishCredentialKey, publishConnectionStatus, listPublishAccounts, connectGoogleDrive, listPublishProviders, publishProviderFor, resolvePublishFormat, runPublish, connectPublishProvider, disconnectPublishCredential };

package/dist/{cli-e9matqtf.js → cli-tctw7rcm.js}

@@ -4,7 +4,7 @@ import {
 // package.json
 var package_default = {
   name: "gutterpress",
-  version: "0.11.13-alpha.1",
+  version: "0.11.14-alpha.1",
   description: "Markdown-to-PDF converter for professional print layout using a native Chromium print engine and Ghostscript.",
   author: "itlackey",
   license: "MPL-2.0",

package/dist/cli.js

@@ -6,7 +6,7 @@ import {
   UsageError,
   package_default,
   rejectUnknownFlags
-} from "./cli-e9matqtf.js";
+} from "./cli-tctw7rcm.js";
 import {
   EXIT_CODES
 } from "./cli-46ycxe6r.js";
@@ -18,14 +18,14 @@ import {
 import { defineCommand, parseArgs, runMain } from "citty";
 import { statSync } from "node:fs";
 var SUBCOMMANDS = {
-  new: () => import("./new-f7b04mv4.js").then((m) => m.default),
-  preview: () => import("./preview-5b8vk6vc.js").then((m) => m.default),
-  build: () => import("./build-ncxz7s6y.js").then((m) => m.default),
-  publish: () => import("./publish-0zrtaezn.js").then((m) => m.default),
-  validate: () => import("./validate-yagx07vv.js").then((m) => m.default),
-  preflight: () => import("./preflight-kpnbhs0r.js").then((m) => m.default),
-  doctor: () => import("./doctor-94fx1qh5.js").then((m) => m.default),
-  ext: () => import("./ext-4trpk0nf.js").then((m) => m.default)
+  new: () => import("./new-pa0pgcat.js").then((m) => m.default),
+  preview: () => import("./preview-msq4mz3a.js").then((m) => m.default),
+  build: () => import("./build-9ccmg4jw.js").then((m) => m.default),
+  publish: () => import("./publish-2rgbacn1.js").then((m) => m.default),
+  validate: () => import("./validate-ekbmn8wh.js").then((m) => m.default),
+  preflight: () => import("./preflight-6v0j7ae8.js").then((m) => m.default),
+  doctor: () => import("./doctor-2kp6wsnx.js").then((m) => m.default),
+  ext: () => import("./ext-kct0k4ne.js").then((m) => m.default)
 };
 var VERSION = package_default.version;
 var main = defineCommand({
@@ -50,7 +50,7 @@ async function preflightRequiredInvocations(rawArgs) {
   const [command, ...commandArgs] = rawArgs;
   try {
     if (command === "new") {
-      const { newArgs } = await import("./new-f7b04mv4.js");
+      const { newArgs } = await import("./new-pa0pgcat.js");
       rejectUnknownFlags(commandArgs, newArgs, "new");
       const parsed = parseArgs(commandArgs, {
         ...newArgs,
@@ -62,7 +62,7 @@ async function preflightRequiredInvocations(rawArgs) {
       return;
     }
     if (command === "preflight") {
-      const { preflightArgs } = await import("./preflight-kpnbhs0r.js");
+      const { preflightArgs } = await import("./preflight-6v0j7ae8.js");
       rejectUnknownFlags(commandArgs, preflightArgs, "preflight");
       const parsed = parseArgs(commandArgs, {
         ...preflightArgs,
@@ -82,7 +82,7 @@ async function preflightRequiredInvocations(rawArgs) {
       }
       if (subcommand.startsWith("-"))
         return;
-      const { EXT_SUBCOMMANDS, extAddArgs, extRemoveArgs, extEnableArgs, extDisableArgs } = await import("./ext-4trpk0nf.js");
+      const { EXT_SUBCOMMANDS, extAddArgs, extRemoveArgs, extEnableArgs, extDisableArgs } = await import("./ext-kct0k4ne.js");
       if (!EXT_SUBCOMMANDS.includes(subcommand)) {
         throw new UsageError(`gutterpress ext: unknown command "${subcommand}"`);
       }

package/dist/{doctor-94fx1qh5.js → doctor-2kp6wsnx.js}

@@ -1,12 +1,12 @@
 import {
   getSystemDiagnostics,
   log
-} from "./cli-2r5m5wyx.js";
+} from "./cli-cmyfeqg6.js";
 import {
   UsageError,
   rejectExtraPositionals,
   rejectUnknownFlags
-} from "./cli-e9matqtf.js";
+} from "./cli-tctw7rcm.js";
 import"./cli-46ycxe6r.js";
 import"./cli-7fkhgtfn.js";
 import"./cli-37x76zdn.js";

package/dist/{ext-4trpk0nf.js → ext-kct0k4ne.js}

@@ -2,6 +2,7 @@ import {
   BUILT_IN_STYLE_SET_IDS,
   addBuiltInStyleSet,
   addExtension,
+  checkExtensionUpdates,
   importExtensionFromFile,
   importExtensionFromUrl,
   isPathSpecifier,
@@ -9,16 +10,17 @@ import {
   parseExtensionSpecifier,
   removeExtension,
   searchNpmExtensions,
-  setExtensionEnabled
-} from "./cli-ahhc9qhq.js";
-import"./cli-2r5m5wyx.js";
+  setExtensionEnabled,
+  updateExtensions
+} from "./cli-s38v88rv.js";
+import"./cli-cmyfeqg6.js";
 import {
   UsageError,
   exitForUsage,
   rejectExtraPositionals,
   rejectUnknownFlags,
   resolveProjectDir
-} from "./cli-e9matqtf.js";
+} from "./cli-tctw7rcm.js";
 import"./cli-tjhn2mdn.js";
 import {
   EXIT_CODES
@@ -72,7 +74,16 @@ var extSearchArgs = {
     required: false
   }
 };
-var EXT_SUBCOMMANDS = ["list", "add", "remove", "enable", "disable", "search"];
+var extOutdatedArgs = { dir: dirArg };
+var extUpdateArgs = {
+  name: {
+    type: "positional",
+    description: "The npm package to update; omit to update every pinned npm extension",
+    required: false
+  },
+  dir: dirArg
+};
+var EXT_SUBCOMMANDS = ["list", "add", "remove", "enable", "disable", "search", "outdated", "update"];
 var parentArgs = {};
 function rejectParentFlags(rawArgs) {
   const first = rawArgs[0];
@@ -290,20 +301,104 @@ var search = defineCommand({
     }
   }
 });
+var outdated = defineCommand({
+  meta: {
+    name: "outdated",
+    description: "Compare each pinned npm extension with npm's latest (network); exit 1 when one is behind"
+  },
+  args: extOutdatedArgs,
+  async run({ args, rawArgs }) {
+    let projectDir = "";
+    try {
+      rejectUnknownFlags(rawArgs, extOutdatedArgs, "ext outdated");
+      rejectExtraPositionals(args._, 1, "ext outdated");
+      projectDir = await requireProjectDir(args.dir, "outdated");
+    } catch (error) {
+      exitForUsage(error);
+    }
+    try {
+      const checks = await checkExtensionUpdates(projectDir);
+      if (checks.length === 0) {
+        console.log("No pinned npm extensions to check.");
+        return;
+      }
+      const behind = checks.filter((c) => c.outdated);
+      if (behind.length === 0) {
+        console.log(`Every pinned npm extension is at its latest version (${checks.map((c) => c.use).join(", ")}).`);
+        return;
+      }
+      console.log("Extensions with a newer version on npm:");
+      for (const c of behind)
+        console.log(`  ${c.name}  ${c.current} -> ${c.latest}`);
+      for (const c of checks)
+        if (!c.outdated)
+          console.log(`  ${c.name}  ${c.current} (latest)`);
+      console.log("Update with: gutterpress ext update [name] [dir]");
+      process.exit(EXIT_CODES.FINDINGS);
+    } catch (error) {
+      failPipeline("Could not check npm for updates", error);
+    }
+  }
+});
+var update = defineCommand({
+  meta: {
+    name: "update",
+    description: "Re-pin every outdated npm extension (or one, by name) to npm's latest: download, verify, vendor, load-test"
+  },
+  args: extUpdateArgs,
+  async run({ args, rawArgs }) {
+    let projectDir = "";
+    let only;
+    try {
+      rejectUnknownFlags(rawArgs, extUpdateArgs, "ext update");
+      rejectExtraPositionals(args._, 2, "ext update");
+      let name = typeof args.name === "string" ? args.name.trim() : "";
+      let dir = args.dir;
+      if (name && dir === undefined) {
+        const looksLikePath = path.isAbsolute(name) || isPathSpecifier(name);
+        const isDir = await stat(path.resolve(process.cwd(), name)).then((s) => s.isDirectory()).catch(() => false);
+        if (looksLikePath || isDir) {
+          dir = name;
+          name = "";
+        }
+      }
+      projectDir = await requireProjectDir(dir, "update");
+      only = name || undefined;
+    } catch (error) {
+      exitForUsage(error);
+    }
+    try {
+      const updated = await updateExtensions(projectDir, { only });
+      if (updated.length === 0) {
+        console.log(only ? `${only} is already at its latest version.` : "Every pinned npm extension is already at its latest version.");
+        return;
+      }
+      for (const u of updated)
+        console.log(`Updated ${u.name}  ${u.from} -> ${u.to}`);
+      console.log(`  project: ${projectDir}`);
+      console.log("  vendored under: plugins/npm (previous version removed)");
+      console.log("  manifest: exact version re-pinned");
+    } catch (error) {
+      failPipeline("Could not update extensions", error);
+    }
+  }
+});
 var ext_default = defineCommand({
   meta: {
     name: "ext",
-    description: "List, add, remove, enable, disable the project's extensions, or search npm"
+    description: "List, add, remove, enable, disable or update the project's extensions, or search npm"
   },
   args: parentArgs,
   setup({ rawArgs }) {
     rejectParentFlags(rawArgs);
   },
-  subCommands: { list, add, remove, enable, disable, search }
+  subCommands: { list, add, remove, enable, disable, search, outdated, update }
 });
 export {
+  extUpdateArgs,
   extSearchArgs,
   extRemoveArgs,
+  extOutdatedArgs,
   extListArgs,
   extEnableArgs,
   extDisableArgs,

package/dist/{index-3gxxb075.js → index-ch9k0kam.js}

@@ -3858,7 +3858,7 @@ import git from "isomorphic-git";
 // package.json
 var package_default = {
   name: "gutterpress",
-  version: "0.11.13-alpha.1",
+  version: "0.11.14-alpha.1",
   description: "Markdown-to-PDF converter for professional print layout using a native Chromium print engine and Ghostscript.",
   author: "itlackey",
   license: "MPL-2.0",
@@ -10400,11 +10400,11 @@ async function importTemplateFromFolder(options) {
   return saveProjectAsTemplate({ projectDir: sourceDir, name, templatesRoot });
 }
 // src/lib/snippets.ts
-import { readdir as readdir7, readFile as readFile30, writeFile as writeFile10, mkdir as mkdir11, rm as rm4 } from "node:fs/promises";
+import { readdir as readdir8, readFile as readFile30, writeFile as writeFile10, mkdir as mkdir11, rm as rm4 } from "node:fs/promises";
 import path20 from "node:path";
 
 // src/lib/extension-manager.ts
-import { cp as cp3, mkdir as mkdir10, readFile as readFile29, rm as rm3, stat as stat7 } from "node:fs/promises";
+import { cp as cp3, mkdir as mkdir10, readdir as readdir7, readFile as readFile29, rm as rm3, stat as stat7 } from "node:fs/promises";
 import { existsSync as existsSync14 } from "node:fs";
 import path19 from "node:path";
 import { isSeq as isSeq3, isMap as isMap2, isScalar as isScalar2, YAMLMap, Scalar } from "yaml";
@@ -11070,6 +11070,7 @@ async function rollbackNpmPluginInstall(installed) {
 }
 
 // src/lib/extension-manager.ts
+import { gt as semverGt } from "semver";
 var EXTENSIONS_DIR = "extensions";
 var RECOMMENDED_EXTENSIONS = [
   {
@@ -11457,9 +11458,91 @@ async function addExtensionUnlocked(projectDir, specifier, options) {
   await finalizeNpmPluginInstall(installed).catch((error2) => {
     warnings.push(`The extension was installed, but an old backup could not be removed: ` + `${error2 instanceof Error ? error2.message : String(error2)}`);
   });
+  await pruneOtherVersions(projectDir, installed.name, installed.version).catch((error2) => {
+    warnings.push(`The extension was installed, but a previous version's vendored copy could not be removed: ` + `${error2 instanceof Error ? error2.message : String(error2)}`);
+  });
   const entry = await describeExtension(projectDir, use);
   return warnings.length > 0 ? { ...entry, warnings: [...entry.warnings ?? [], ...warnings] } : entry;
 }
+async function pruneOtherVersions(projectDir, name, keep) {
+  const parent = path19.dirname(vendoredNpmPluginRoot(projectDir, name, keep));
+  let entries;
+  try {
+    entries = await readdir7(parent, { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    if (!entry.isDirectory() || entry.name === keep || !isExactNpmVersion(entry.name))
+      continue;
+    await rm3(path19.join(parent, entry.name), { recursive: true, force: true });
+  }
+}
+var LATEST_LOOKUP_TIMEOUT_MS = 30000;
+var MAX_PACKUMENT_BYTES = 15 * 1024 * 1024;
+async function latestNpmVersion(name, options) {
+  const fetchImpl = options.fetch ?? globalThis.fetch;
+  return withFetchTimeout({
+    timeoutMs: LATEST_LOOKUP_TIMEOUT_MS,
+    signal: options.signal,
+    timeoutMessage: `Looking up ${name} on npm timed out. Check your connection and try again.`,
+    offlineMessage: (cause) => `Looking up ${name} on npm failed (${cause instanceof Error ? cause.message : String(cause)}).`
+  }, async (signal) => {
+    const response = await fetchImpl(`${npmRegistryUrl()}/${encodeURIComponent(name)}`, {
+      signal,
+      redirect: "error",
+      headers: { accept: "application/vnd.npm.install-v1+json" }
+    });
+    if (response.status === 404)
+      throw new FriendlyHttpError(`npm package "${name}" was not found.`);
+    if (!response.ok)
+      throw new FriendlyHttpError(`Looking up ${name} on npm failed (HTTP ${response.status}).`);
+    const bytes = await response.arrayBuffer();
+    if (bytes.byteLength > MAX_PACKUMENT_BYTES) {
+      throw new FriendlyHttpError(`npm metadata for "${name}" is too large to read.`);
+    }
+    let latest;
+    try {
+      latest = JSON.parse(Buffer.from(bytes).toString("utf8"))["dist-tags"]?.latest;
+    } catch {
+      throw new FriendlyHttpError(`npm metadata for "${name}" is not valid JSON.`);
+    }
+    if (typeof latest !== "string" || !isExactNpmVersion(latest)) {
+      throw new FriendlyHttpError(`npm metadata for "${name}" has no latest version.`);
+    }
+    return latest;
+  });
+}
+async function checkExtensionUpdates(projectDir, options = {}) {
+  const entries = await listProjectExtensions(projectDir);
+  const pinned = entries.filter((e) => e.kind === "npm" && e.version);
+  return Promise.all(pinned.map(async (e) => {
+    const current = e.version;
+    const latest = await latestNpmVersion(e.name, options);
+    return { use: e.use, name: e.name, current, latest, outdated: semverGt(latest, current) };
+  }));
+}
+async function updateExtensions(projectDir, options = {}) {
+  let checks2 = await checkExtensionUpdates(projectDir, options);
+  if (options.only) {
+    checks2 = checks2.filter((c) => c.name === options.only);
+    if (checks2.length === 0) {
+      throw new Error(`"${options.only}" is not a pinned npm extension of this book.`);
+    }
+  }
+  const updated = [];
+  for (const check37 of checks2) {
+    if (!check37.outdated)
+      continue;
+    await addExtension(projectDir, pinnedNpmSpecifier(check37.name, check37.latest), {
+      fetch: options.fetch,
+      signal: options.signal,
+      limits: options.limits
+    });
+    updated.push({ name: check37.name, from: check37.current, to: check37.latest });
+  }
+  return updated;
+}
 async function listBuiltInStyleSets() {
   const assets = await getAssetsDir();
   const out = [];
@@ -11566,7 +11649,7 @@ function resolveSnippetPath(projectDir, fileName) {
 async function scanSnippetFiles(dir) {
   let names;
   try {
-    names = await readdir7(dir);
+    names = await readdir8(dir);
   } catch {
     return [];
   }
@@ -12786,7 +12869,7 @@ async function listGitHubBranches(credential, owner, repo, options = {}) {
   return branches;
 }
 // src/lib/remote-auth/clone.ts
-import { mkdir as mkdir13, readdir as readdir8, rm as rm6 } from "node:fs/promises";
+import { mkdir as mkdir13, readdir as readdir9, rm as rm6 } from "node:fs/promises";
 import path22 from "node:path";
 import git3 from "isomorphic-git";
 
@@ -13087,7 +13170,7 @@ function sanitizeCloneFolderName(name) {
 }
 async function assertCloneTarget(dir) {
   try {
-    const entries = await readdir8(dir);
+    const entries = await readdir9(dir);
     if (entries.length > 0) {
       throw new Error("That folder already has files in it. Choose an empty folder for the book.");
     }
@@ -14009,16 +14092,16 @@ async function repairOnlineBackup(options) {
 }
 // src/lib/remote-auth/scorched-earth.ts
 import git8 from "isomorphic-git";
-import { cp as cp6, mkdir as mkdir16, readdir as readdir9, rm as rm8 } from "node:fs/promises";
+import { cp as cp6, mkdir as mkdir16, readdir as readdir10, rm as rm8 } from "node:fs/promises";
 import path25 from "node:path";
 async function emptyDir(dir) {
-  for (const entry of await readdir9(dir)) {
+  for (const entry of await readdir10(dir)) {
     await rm8(path25.join(dir, entry), { recursive: true, force: true });
   }
 }
 async function copyFilesBack(from, to) {
   const skip = path25.join(from, ".git");
-  for (const entry of await readdir9(from)) {
+  for (const entry of await readdir10(from)) {
     const src = path25.join(from, entry);
     if (src === skip)
       continue;
@@ -14071,7 +14154,7 @@ async function scorchedEarth(options) {
   }
 }
 // src/lib/publish/run-publish.ts
-import { readdir as readdir11, stat as stat12 } from "node:fs/promises";
+import { readdir as readdir12, stat as stat12 } from "node:fs/promises";
 import path30 from "node:path";
 
 // src/lib/publish/command-runner.ts
@@ -14302,7 +14385,7 @@ var drivethrurpgProvider = {
 };
 
 // src/lib/publish/providers/gdrive.ts
-import { mkdtemp as mkdtemp3, readFile as readFile32, readdir as readdir10, rm as rm9, stat as stat9, writeFile as writeFile14 } from "node:fs/promises";
+import { mkdtemp as mkdtemp3, readFile as readFile32, readdir as readdir11, rm as rm9, stat as stat9, writeFile as writeFile14 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
 import path27 from "node:path";
 import { Zip, ZipDeflate } from "fflate";
@@ -14687,7 +14770,7 @@ function zipEntriesNonBlocking(entries, opts) {
   });
 }
 async function collectZipEntries(root, dir, out, onWarn) {
-  const entries = await readdir10(dir, { withFileTypes: true });
+  const entries = await readdir11(dir, { withFileTypes: true });
   for (const entry of entries) {
     const full = path27.join(dir, entry.name);
     if (entry.isDirectory()) {
@@ -15454,7 +15537,7 @@ async function htmlDirIssues(dir) {
       message: `${dir} has no ${BOOK_HTML} — it isn't an HTML export. ${HTML_HINT}`
     });
   }
-  const entries = await readdir11(dir).catch(() => []);
+  const entries = await readdir12(dir).catch(() => []);
   const extras = entries.filter((name) => name.toLowerCase().endsWith(".pdf") || name === BUILD_FINGERPRINT_FILENAME);
   if (extras.length > 0) {
     issues.push({
@@ -15691,4 +15774,4 @@ async function setPublishProviderConfig(projectDir, providerId, values) {
   await writeManifestDoc(file, doc);
   return settingsFromDoc(doc);
 }
-export { BUNDLED_EXTENSIONS, isBundledExtension, isPathSpecifier, parseExtensionSpecifier, PRESET_IDS, PRESETS, TARGETS, TARGET_IDS, publishTargetFor, MANIFEST_FILENAMES, hasProjectManifest, loadManifest, loadManifestWithPath, resolveConfig, SYNC_SNAPSHOT_MESSAGE, log, resolveActiveStyles, listProjectStyles, EXTENSION_MANIFEST_FILENAME, readExtensionMeta, extensionStyleList, extensionEntry, extensionCarries, pathEscapesFolder, assertExtensionContained, resolveExtension, getChecks, getCheckById, resolveCheckSelectors, formatReport, ruleRemoteUrls, ruleRiskyProps, ruleSyntax, checkCss, inspectImage, runChecks, checkToolAvailability, reportMissingTools, executeValidation, executeAndReport, splitOutPath, runBuild, openPath, startPreviewServer, defaultConfigDir, FileTokenStore, extractUrlCredential, getSystemDiagnostics, slugifyProjectName, escapeYamlScalar, scaffoldProject, adoptFolder, ensureGitignoreHasDist, EXTENSION_KINDS, RESERVED_PREFIX, resolveExtensionPrefix, scaffoldExtension, BUILT_IN_TEMPLATE_IDS, listBuiltInTemplates, saveProjectAsTemplate, listCustomTemplates, importTemplateFromFolder, DEFAULT_NPM_REGISTRY, npmRegistryUrl, EXTENSIONS_DIR, RECOMMENDED_EXTENSIONS, BUILT_IN_STYLE_SET_IDS, sameExtension, listProjectExtensions, describeExtension, setExtensionEnabled, reorderExtensions, removeExtension, addExtension, listBuiltInStyleSets, addBuiltInStyleSet, validateProjectExtensions, readExtensionCss, SNIPPETS_DIR, extractVariables, substituteVariables, listSnippets, readSnippet, saveSnippet, deleteSnippet, listMergedSnippets, readExtensionSnippet, importExtensionFromFile, importExtensionFromUrl, MAX_SEARCH_BYTES, SEARCH_KEYWORDS, searchNpmExtensions, setManifestFields, readManifestFields, setActiveStyles, AUTO_SNAPSHOT_DEFAULT_MINUTES, AUTO_SYNC_MIN_MINUTES, AUTO_SYNC_MAX_MINUTES, AUTO_SYNC_DEFAULT_MINUTES, AUTO_SYNC_PUSH_INTERVAL_MINUTES, autoSnapshotDelayMs, autoSyncDelayMs, isGitInternalPath, resolveGitHubClientId, GITHUB_HOST, GitHubAuthProvider, GDRIVE_HOST, resolveGoogleClientId, resolveGoogleClientSecret, GOOGLE_NOT_CONFIGURED_MESSAGE, requireGoogleClientCredentials, pkceChallengeFromVerifier, GoogleAuthProvider, revokeGoogleCredential, publishCredentialKey, publishConnectionStatus, listPublishAccounts, connectGoogleDrive, listGitHubRepositories, listRepoBooks, listGitHubBranches, sanitizeCloneFolderName, cloneRepository, isSshRemoteUrl, testRemoteAccess, knownForgeTokenUrl, connectGenericHost, parseRemoteOrigin, forgeKindForHost, diagnoseProjectRemote, syncProject, refreshRemoteCopies, REPAIR_SNAPSHOT_MESSAGE, repairOnlineBackup, scorchedEarth, listPublishProviders, publishProviderFor, resolvePublishFormat, resolvePublishRequest, runPublish, connectPublishProvider, disconnectPublishCredential, PublishSelectionsStore, readPublishSettings, setPublishProviderConfig };
+export { BUNDLED_EXTENSIONS, isBundledExtension, isPathSpecifier, parseExtensionSpecifier, PRESET_IDS, PRESETS, TARGETS, TARGET_IDS, publishTargetFor, MANIFEST_FILENAMES, hasProjectManifest, loadManifest, loadManifestWithPath, resolveConfig, SYNC_SNAPSHOT_MESSAGE, log, resolveActiveStyles, listProjectStyles, EXTENSION_MANIFEST_FILENAME, readExtensionMeta, extensionStyleList, extensionEntry, extensionCarries, pathEscapesFolder, assertExtensionContained, resolveExtension, getChecks, getCheckById, resolveCheckSelectors, formatReport, ruleRemoteUrls, ruleRiskyProps, ruleSyntax, checkCss, inspectImage, runChecks, checkToolAvailability, reportMissingTools, executeValidation, executeAndReport, splitOutPath, runBuild, openPath, startPreviewServer, defaultConfigDir, FileTokenStore, extractUrlCredential, getSystemDiagnostics, slugifyProjectName, escapeYamlScalar, scaffoldProject, adoptFolder, ensureGitignoreHasDist, EXTENSION_KINDS, RESERVED_PREFIX, resolveExtensionPrefix, scaffoldExtension, BUILT_IN_TEMPLATE_IDS, listBuiltInTemplates, saveProjectAsTemplate, listCustomTemplates, importTemplateFromFolder, DEFAULT_NPM_REGISTRY, npmRegistryUrl, EXTENSIONS_DIR, RECOMMENDED_EXTENSIONS, BUILT_IN_STYLE_SET_IDS, sameExtension, listProjectExtensions, describeExtension, setExtensionEnabled, reorderExtensions, removeExtension, addExtension, checkExtensionUpdates, updateExtensions, listBuiltInStyleSets, addBuiltInStyleSet, validateProjectExtensions, readExtensionCss, SNIPPETS_DIR, extractVariables, substituteVariables, listSnippets, readSnippet, saveSnippet, deleteSnippet, listMergedSnippets, readExtensionSnippet, importExtensionFromFile, importExtensionFromUrl, MAX_SEARCH_BYTES, SEARCH_KEYWORDS, searchNpmExtensions, setManifestFields, readManifestFields, setActiveStyles, AUTO_SNAPSHOT_DEFAULT_MINUTES, AUTO_SYNC_MIN_MINUTES, AUTO_SYNC_MAX_MINUTES, AUTO_SYNC_DEFAULT_MINUTES, AUTO_SYNC_PUSH_INTERVAL_MINUTES, autoSnapshotDelayMs, autoSyncDelayMs, isGitInternalPath, resolveGitHubClientId, GITHUB_HOST, GitHubAuthProvider, GDRIVE_HOST, resolveGoogleClientId, resolveGoogleClientSecret, GOOGLE_NOT_CONFIGURED_MESSAGE, requireGoogleClientCredentials, pkceChallengeFromVerifier, GoogleAuthProvider, revokeGoogleCredential, publishCredentialKey, publishConnectionStatus, listPublishAccounts, connectGoogleDrive, listGitHubRepositories, listRepoBooks, listGitHubBranches, sanitizeCloneFolderName, cloneRepository, isSshRemoteUrl, testRemoteAccess, knownForgeTokenUrl, connectGenericHost, parseRemoteOrigin, forgeKindForHost, diagnoseProjectRemote, syncProject, refreshRemoteCopies, REPAIR_SNAPSHOT_MESSAGE, repairOnlineBackup, scorchedEarth, listPublishProviders, publishProviderFor, resolvePublishFormat, resolvePublishRequest, runPublish, connectPublishProvider, disconnectPublishCredential, PublishSelectionsStore, readPublishSettings, setPublishProviderConfig };

package/dist/index.js

@@ -37,6 +37,7 @@ import {
   autoSnapshotDelayMs,
   autoSyncDelayMs,
   checkCss,
+  checkExtensionUpdates,
   checkToolAvailability,
   cloneRepository,
   connectGenericHost,
@@ -143,8 +144,9 @@ import {
   substituteVariables,
   syncProject,
   testRemoteAccess,
+  updateExtensions,
   validateProjectExtensions
-} from "./index-3gxxb075.js";
+} from "./index-ch9k0kam.js";
 import {
   BUILD_DIAGNOSTIC_CODES
 } from "./index-b6p1fh61.js";
@@ -182,6 +184,7 @@ import"./index-37x76zdn.js";
 export {
   whenGitIdle,
   validateProjectExtensions,
+  updateExtensions,
   testRemoteAccess,
   syncProject,
   switchBranch,
@@ -300,6 +303,7 @@ export {
   connectGenericHost,
   cloneRepository,
   checkToolAvailability,
+  checkExtensionUpdates,
   checkCss,
   capabilitiesFor,
   autoSyncDelayMs,

package/dist/lib/extension-manager.d.ts

@@ -146,6 +146,50 @@ export interface AddExtensionOptions extends NpmPluginInstallOptions {
  * Returns the described entry.
  */
 export declare function addExtension(projectDir: string, specifier: string, options?: AddExtensionOptions): Promise<ProjectExtensionEntry>;
+/** One pinned npm extension against npm's `latest` tag. */
+export interface ExtensionUpdateCheck {
+    /** The specifier as written in the manifest (`name@current`). */
+    use: string;
+    name: string;
+    /** The pinned version. */
+    current: string;
+    /** npm's `latest` dist-tag. */
+    latest: string;
+    /** `latest` is newer than `current` (semver). */
+    outdated: boolean;
+}
+export interface CheckExtensionUpdatesOptions {
+    /** Dependency injection for tests; production uses global fetch. */
+    fetch?: typeof globalThis.fetch;
+    signal?: AbortSignal;
+}
+/**
+ * Every pinned npm extension of the book against npm's `latest`, in manifest
+ * order. Bundled, path and unpinned entries are not npm's to answer for and
+ * are skipped. One lookup per package, in parallel; a failed lookup throws
+ * with the package named.
+ */
+export declare function checkExtensionUpdates(projectDir: string, options?: CheckExtensionUpdatesOptions): Promise<ExtensionUpdateCheck[]>;
+/** One extension `updateExtensions` moved. */
+export interface ExtensionUpdateResult {
+    name: string;
+    from: string;
+    to: string;
+}
+export interface UpdateExtensionsOptions extends CheckExtensionUpdatesOptions {
+    /** Update only this package (its npm name); default every pinned npm entry. */
+    only?: string;
+    /** Test/specialized-host install limits — see `NpmPluginInstallOptions`. */
+    limits?: NpmPluginInstallOptions["limits"];
+}
+/**
+ * Re-pin every outdated npm extension (or just `only`) to npm's `latest`,
+ * one `addExtension(name@latest)` each — the same download, verification,
+ * vendoring, load test and in-place re-pin as `ext add`, keeping the entry's
+ * `export:` and `enabled:` as written and removing the old version's folder.
+ * Returns what moved; an up-to-date book returns `[]`.
+ */
+export declare function updateExtensions(projectDir: string, options?: UpdateExtensionsOptions): Promise<ExtensionUpdateResult[]>;
 /** List the built-in looks (metadata read from the embedded assets). */
 export declare function listBuiltInStyleSets(): Promise<BuiltInStyleSet[]>;
 /** A folder name under `extensions/` not yet taken: `<slug>`, `<slug>-2`, … */

package/dist/{new-f7b04mv4.js → new-pa0pgcat.js}

@@ -7,15 +7,15 @@ import {
   TARGET_IDS,
   scaffoldExtension,
   scaffoldProject
-} from "./cli-ahhc9qhq.js";
+} from "./cli-s38v88rv.js";
 import {
   resolveGhostscript
-} from "./cli-2r5m5wyx.js";
+} from "./cli-cmyfeqg6.js";
 import {
   UsageError,
   rejectExtraPositionals,
   rejectUnknownFlags
-} from "./cli-e9matqtf.js";
+} from "./cli-tctw7rcm.js";
 import"./cli-tjhn2mdn.js";
 import {
   EXIT_CODES

package/dist/{preflight-kpnbhs0r.js → preflight-6v0j7ae8.js}

@@ -2,15 +2,15 @@ import {
   executeValidation,
   publishTargetFor,
   reportMissingTools
-} from "./cli-ahhc9qhq.js";
+} from "./cli-s38v88rv.js";
 import {
   log
-} from "./cli-2r5m5wyx.js";
+} from "./cli-cmyfeqg6.js";
 import {
   UsageError,
   rejectExtraPositionals,
   rejectUnknownFlags
-} from "./cli-e9matqtf.js";
+} from "./cli-tctw7rcm.js";
 import"./cli-tjhn2mdn.js";
 import {
   EXIT_CODES

package/dist/{preview-5b8vk6vc.js → preview-msq4mz3a.js}

@@ -6,10 +6,10 @@ import {
   runBuild,
   splitOutPath,
   startPreviewServer
-} from "./cli-ahhc9qhq.js";
+} from "./cli-s38v88rv.js";
 import {
   log
-} from "./cli-2r5m5wyx.js";
+} from "./cli-cmyfeqg6.js";
 import {
   UsageError,
   parseFormat,
@@ -17,7 +17,7 @@ import {
   rejectExtraPositionals,
   rejectUnknownFlags,
   resolvePort
-} from "./cli-e9matqtf.js";
+} from "./cli-tctw7rcm.js";
 import"./cli-tjhn2mdn.js";
 import {
   BuildError

package/dist/{publish-0zrtaezn.js → publish-2rgbacn1.js}

@@ -11,16 +11,16 @@ import {
   publishProviderFor,
   resolvePublishFormat,
   runPublish
-} from "./cli-ahhc9qhq.js";
+} from "./cli-s38v88rv.js";
 import {
   FileTokenStore,
   log
-} from "./cli-2r5m5wyx.js";
+} from "./cli-cmyfeqg6.js";
 import {
   UsageError,
   rejectExtraPositionals,
   rejectUnknownFlags
-} from "./cli-e9matqtf.js";
+} from "./cli-tctw7rcm.js";
 import"./cli-tjhn2mdn.js";
 import {
   EXIT_CODES

package/dist/{validate-yagx07vv.js → validate-ekbmn8wh.js}

@@ -1,14 +1,14 @@
 import {
   executeAndReport
-} from "./cli-ahhc9qhq.js";
+} from "./cli-s38v88rv.js";
 import {
   log
-} from "./cli-2r5m5wyx.js";
+} from "./cli-cmyfeqg6.js";
 import {
   UsageError,
   rejectExtraPositionals,
   rejectUnknownFlags
-} from "./cli-e9matqtf.js";
+} from "./cli-tctw7rcm.js";
 import"./cli-tjhn2mdn.js";
 import {
   EXIT_CODES

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gutterpress",
-  "version": "0.11.13-alpha.1",
+  "version": "0.11.14-alpha.1",
   "description": "Markdown-to-PDF converter for professional print layout using a native Chromium print engine and Ghostscript.",
   "author": "itlackey",
   "license": "MPL-2.0",