gutterpress 0.11.17-alpha.2 → 0.11.17-alpha.3

package/dist/{index-c275p061.js → index-bscfmg5r.js}

@@ -3,8 +3,10 @@ import {
   EXIT_CODES,
   MARGIN_BOX_IGNORED_PROPERTIES,
   getAssetPath,
-  getAssetsDir
-} from "./index-eyaj6nkc.js";
+  getAssetsDir,
+  lastPageMode,
+  parseSize
+} from "./index-q1xqxrh9.js";
 import {
   INSTALL_HINTS,
   execCapture,
@@ -140,7 +142,7 @@ var DTRPG_PRESET = {
   source: {
     files: null
   },
-  print: { signature: 4, reserveLastPage: true },
+  print: { signature: 4, reserveLastPage: true, lastPage: undefined },
   pdfx: {
     flavor: "x1a",
     icc: "profiles/CGATS21_CRPC1.icc",
@@ -158,7 +160,8 @@ var DTRPG_PRESET = {
   },
   lint: {
     enabled: true,
-    configPath: null
+    configPath: null,
+    rules: {}
   },
   validate: {
     enabled: true,
@@ -215,7 +218,7 @@ var BOOK_PRESET = {
   source: {
     files: null
   },
-  print: { signature: 1, reserveLastPage: false },
+  print: { signature: 1, reserveLastPage: false, lastPage: undefined },
   pdfx: {
     flavor: "x1a",
     icc: "profiles/CGATS21_CRPC1.icc",
@@ -233,7 +236,8 @@ var BOOK_PRESET = {
   },
   lint: {
     enabled: true,
-    configPath: null
+    configPath: null,
+    rules: {}
   },
   validate: {
     enabled: true,
@@ -606,6 +610,10 @@ function resolveWithPreset(cliOverrides, manifest, preset) {
   if (legacyPlugins !== undefined) {
     throw new UsageError(pluginsRemovedMessage(legacyPlugins));
   }
+  const lastPage = c.print?.lastPage ?? m.print?.lastPage;
+  if (lastPage !== undefined && lastPage !== "blank" && lastPage !== "short-by-one") {
+    throw new UsageError(`Manifest field \`print.lastPage\` must be "blank" or "short-by-one", got ${JSON.stringify(lastPage)}.`);
+  }
   const rawExtensions = c.extensions ?? m.extensions ?? [];
   if (!Array.isArray(rawExtensions)) {
     throw new UsageError("Manifest field `extensions` must be a list of specifiers.");
@@ -622,7 +630,10 @@ function resolveWithPreset(cliOverrides, manifest, preset) {
     print: mergeShape(c.print, m.print, preset.print),
     page: preset.page ? mergeShape(c.page, m.page, preset.page) : resolveCustomPage(c, m),
     ink: mergeShape(c.ink, m.ink, preset.ink),
-    lint: mergeShape(c.lint, m.lint, preset.lint),
+    lint: {
+      ...mergeShape(c.lint, m.lint, preset.lint),
+      rules: { ...preset.lint.rules, ...m.lint?.rules, ...c.lint?.rules }
+    },
     validate: {
       enabled: c.validate?.enabled ?? m.validate?.enabled ?? preset.validate.enabled,
       checks: { ...preset.validate.checks, ...m.validate?.checks, ...c.validate?.checks },
@@ -1037,7 +1048,7 @@ function resolveContainerShape(name, pluginName, decl) {
     throw new Error(`Plugin "${pluginName}"'s marker "@${name}" has a \`section\` that is not a boolean.`);
   }
   if (decl.section) {
-    for (const field of ["tag", "label", "autoCloseAt"]) {
+    for (const field of ["tag", "label", "autoCloseAt", "selfClosing"]) {
       if (decl[field] !== undefined) {
         throw new Error(`Plugin "${pluginName}"'s marker "@${name}" sets \`section: true\` and \`${field}\` — a section ` + `marker is a core @section, so \`${field}\` does not apply. Remove one of them.`);
       }
@@ -1094,11 +1105,26 @@ function resolveContainerShape(name, pluginName, decl) {
     }
     autoCloseAtEof = decl.autoCloseAt.includes("eof");
   }
+  if (decl.selfClosing !== undefined && typeof decl.selfClosing !== "boolean") {
+    throw new Error(`Plugin "${pluginName}"'s marker "@${name}" has a \`selfClosing\` that is not a boolean.`);
+  }
+  if (decl.selfClosing && decl.autoCloseAt !== undefined) {
+    throw new Error(`Plugin "${pluginName}"'s marker "@${name}" sets \`selfClosing: true\` and \`autoCloseAt\` — a ` + `self-closing marker has no open container to auto-close. Remove one of them.`);
+  }
   if (decl.validate !== undefined && typeof decl.validate !== "function") {
     throw new Error(`Plugin "${pluginName}"'s marker "@${name}" has a \`validate\` that is not a function.`);
   }
   const check = decl.validate ? { validate: decl.validate, validateOwner: pluginName } : {};
-  return { tag, classBase, variants, label, autoCloseAtEof, ...decl.section ? { section: true } : {}, ...check };
+  return {
+    tag,
+    classBase,
+    variants,
+    label,
+    autoCloseAtEof,
+    ...decl.section ? { section: true } : {},
+    ...decl.selfClosing ? { selfClosing: true } : {},
+    ...check
+  };
 }
 function resolveMarkerDeclaration(name, rawDecl, rawRegistry, originOf) {
   const pluginName = originOf.get(name);
@@ -1357,7 +1383,8 @@ function plugin(md, pluginOptions = {}) {
       addClasses(t, baseClass, meta.attrs && meta.attrs.class ? meta.attrs.class : "");
       attachDataAttrs(t, decl.baseKind, variant, meta.attrs || {});
       out.push(t);
-      declaredFrames.push({ kind: decl.baseKind, tag: decl.tag, decl, line: meta.__line });
+      if (!decl.selfClosing)
+        declaredFrames.push({ kind: decl.baseKind, tag: decl.tag, decl, line: meta.__line });
       if (decl.label) {
         const value = meta.attrs && meta.attrs[decl.label.attr];
         if (value) {
@@ -1368,6 +1395,8 @@ function plugin(md, pluginOptions = {}) {
           t.meta.labelled = true;
         }
       }
+      if (decl.selfClosing)
+        out.push(new state.Token("layout_component_close", decl.tag, -1));
     }
     const stack = {
       frames: [],
@@ -1646,7 +1675,7 @@ function plugin(md, pluginOptions = {}) {
               continue;
             }
             if (!closeDeclaredFrame(closeDecl.baseKind)) {
-              warn(state.env, line, "declared_marker_close_without_open", `@${kind} used without an open @${closeDecl.baseKind}; ignoring marker.`, meta);
+              warn(state.env, line, "declared_marker_close_without_open", closeDecl.selfClosing ? `@${kind} is not a marker: @${closeDecl.baseKind} is self-closing and has nothing to close; ignoring marker.` : `@${kind} used without an open @${closeDecl.baseKind}; ignoring marker.`, meta);
             }
             continue;
           }
@@ -2859,7 +2888,8 @@ ${projectCss.trim()}` : null
 `);
   const preloadTags = (opts.preloadImages ?? []).map((href) => `
   <link rel="preload" as="image" href="${href}">`).join("");
-  const printAttrs = (opts.print?.signature && opts.print.signature > 1 ? ` data-gp-signature="${opts.print.signature}"` : "") + (opts.print?.reserveLastPage ? " data-gp-reserve-last-page" : "");
+  const lastPage = opts.print && lastPageMode(opts.print);
+  const printAttrs = (opts.print?.signature && opts.print.signature > 1 ? ` data-gp-signature="${opts.print.signature}"` : "") + (lastPage ? ` data-gp-last-page="${lastPage}"` : "");
   return `<!DOCTYPE html>
 <html lang="en"${printAttrs}>
 <head>
@@ -5641,7 +5671,7 @@ import git from "isomorphic-git";
 // package.json
 var package_default = {
   name: "gutterpress",
-  version: "0.11.17-alpha.2",
+  version: "0.11.17-alpha.3",
   description: "Markdown-to-PDF converter for professional print layout using a native Chromium print engine and Ghostscript.",
   author: "itlackey",
   license: "MPL-2.0",
@@ -5895,7 +5925,8 @@ async function writeBuildFingerprint(input) {
         requestedFlavor: input.pdfx.requestedFlavor,
         resolvedFlavor: input.pdfx.resolvedFlavor,
         iccPath: input.pdfx.iccPath,
-        stripAnnotations: input.pdfx.stripAnnotations
+        stripAnnotations: input.pdfx.stripAnnotations,
+        blackText: input.pdfx.blackText ?? null
       },
       outputDir: input.recordedOutputDir ? path10.resolve(input.recordedOutputDir) : outputDir
     },
@@ -5982,13 +6013,64 @@ function* tokenize(s) {
     }
   }
 }
-function rewriteBlackText(src) {
+var LARGE_TEXT_PT = 24;
+var SIZE_EPS = 0.05;
+var area = (m) => Math.sqrt(Math.abs(m[0] * m[3] - m[1] * m[2]));
+
+class TextScale {
+  ctm;
+  font = 0;
+  tm = 1;
+  stack = [];
+  constructor(ctm) {
+    this.ctm = ctm;
+  }
+  get unit() {
+    return this.ctm;
+  }
+  get size() {
+    return this.font * this.tm * this.ctm;
+  }
+  op(op, nums) {
+    switch (op) {
+      case "q":
+        this.stack.push([this.ctm, this.font]);
+        return false;
+      case "Q": {
+        const p = this.stack.pop();
+        if (p)
+          [this.ctm, this.font] = p;
+        return true;
+      }
+      case "cm":
+        if (nums.length === 6)
+          this.ctm *= area(nums);
+        return true;
+      case "BT":
+        this.tm = 1;
+        return true;
+      case "Tm":
+        if (nums.length === 6)
+          this.tm = area(nums);
+        return true;
+      case "Tf":
+        this.font = Math.abs(nums[nums.length - 1] ?? 0) || 0;
+        return true;
+    }
+    return false;
+  }
+}
+function rewriteBlackText(src, ctx = {}) {
   let fill = null;
   let stroke = null;
   const stack = [];
+  const scale = new TextScale(ctx.baseScale ?? 1);
   let inText = false;
   let fillDirty = false;
   let strokeDirty = false;
+  const spans = [];
+  let lastOp = "";
+  let rect = null;
   const edits = [];
   let operands = [];
   const rgbOf = () => {
@@ -5997,12 +6079,46 @@ function rewriteBlackText(src) {
     const v = operands.map((t) => Number(t.text));
     return v.some((x) => Number.isNaN(x)) ? null : { rgb: v, raw: operands.map((t) => t.text).join(" ") };
   };
+  const isSmall = () => scale.size <= LARGE_TEXT_PT + SIZE_EPS;
+  let fillIns = null;
+  let strokeIns = null;
+  const syncOne = (colour, dirty, ins, at, gray, op) => {
+    if (!colour || !isNearBlack(colour.rgb))
+      return [dirty, ins];
+    const small = isSmall();
+    if (small && !dirty) {
+      const e = { start: at, end: at, text: ` ${gray}` };
+      edits.push(e);
+      return [true, e];
+    }
+    if (!small && dirty) {
+      if (ins)
+        ins.text = "";
+      else
+        edits.push({ start: at, end: at, text: ` ${colour.raw} ${op}` });
+      return [false, null];
+    }
+    return [dirty, ins];
+  };
+  const sync = (at) => {
+    [fillDirty, fillIns] = syncOne(fill, fillDirty, fillIns, at, "0 g", "rg");
+    [strokeDirty, strokeIns] = syncOne(stroke, strokeDirty, strokeIns, at, "0 G", "RG");
+  };
+  const flush = (s) => {
+    for (const r of s.rects) {
+      if (r.thickness > 0.2 * s.maxSmall)
+        continue;
+      edits.push({ start: r.start, end: r.start, text: "q 0 g " }, { start: r.end, end: r.end, text: " Q" });
+    }
+  };
   for (const t of tokenize(src)) {
     if (!t.op) {
       operands.push(t);
       continue;
     }
     const op = t.text;
+    const nums = operands.map((o) => Number(o.text));
+    const sizeMayHaveChanged = scale.op(op, nums);
     switch (op) {
       case "q":
         stack.push([fill, stroke]);
@@ -6016,19 +6132,13 @@ function rewriteBlackText(src) {
       case "BT":
         inText = true;
         fillDirty = strokeDirty = false;
-        {
-          let ins = "";
-          if (fill && isNearBlack(fill.rgb)) {
-            ins += " 0 g";
-            fillDirty = true;
-          }
-          if (stroke && isNearBlack(stroke.rgb)) {
-            ins += " 0 G";
-            strokeDirty = true;
-          }
-          if (ins)
-            edits.push({ start: t.end, end: t.end, text: ins });
-        }
+        fillIns = strokeIns = null;
+        sync(t.end);
+        break;
+      case "Tf":
+      case "Tm":
+        if (inText && sizeMayHaveChanged)
+          sync(t.end);
         break;
       case "ET":
         if (inText) {
@@ -6041,6 +6151,7 @@ function rewriteBlackText(src) {
             edits.push({ start: t.start, end: t.start, text: ins });
         }
         inText = false;
+        fillIns = strokeIns = null;
         break;
       case "rg":
       case "RG": {
@@ -6050,7 +6161,7 @@ function rewriteBlackText(src) {
           fill = c;
         else
           stroke = c;
-        if (inText && c && isNearBlack(c.rgb)) {
+        if (inText && c && isNearBlack(c.rgb) && isSmall()) {
           edits.push({ start: operands[0].start, end: t.end, text: isFill ? "0 g" : "0 G" });
           if (isFill)
             fillDirty = true;
@@ -6082,7 +6193,54 @@ function rewriteBlackText(src) {
         if (inText)
           strokeDirty = false;
         break;
+      case "Do": {
+        const name = operands[operands.length - 1]?.text;
+        if (name?.startsWith("/"))
+          ctx.onDo?.(name.slice(1), scale.unit);
+        break;
+      }
+      case "BDC":
+      case "BMC":
+        spans.push({ hasSmall: false, maxSmall: 0, rects: [] });
+        break;
+      case "EMC": {
+        const s = spans.pop();
+        if (!s)
+          break;
+        const parent = spans[spans.length - 1];
+        if (s.hasSmall)
+          flush(s);
+        else
+          parent?.rects.push(...s.rects);
+        if (parent && s.hasSmall) {
+          parent.hasSmall = true;
+          parent.maxSmall = Math.max(parent.maxSmall, s.maxSmall);
+        }
+        break;
+      }
+      case "Tj":
+      case "TJ":
+      case "'":
+      case '"': {
+        fillIns = strokeIns = null;
+        const span = spans[spans.length - 1];
+        if (span && inText && isSmall()) {
+          span.hasSmall = true;
+          span.maxSmall = Math.max(span.maxSmall, scale.size);
+        }
+        break;
+      }
+      case "re":
+        rect = !inText && fill && isNearBlack(fill.rgb) && operands.length === 4 && nums.every((x) => !Number.isNaN(x)) ? { start: operands[0].start, thickness: Math.min(Math.abs(nums[2]), Math.abs(nums[3])) * scale.unit } : null;
+        break;
+      case "f":
+      case "F":
+      case "f*":
+        if (rect && lastOp === "re")
+          spans[spans.length - 1]?.rects.push({ ...rect, end: t.end });
+        break;
     }
+    lastOp = op;
     operands = [];
   }
   return applyEdits(src, edits);
@@ -6090,6 +6248,7 @@ function rewriteBlackText(src) {
 function applyEdits(s, edits) {
   if (!edits.length)
     return s;
+  edits.sort((a, b) => a.start - b.start);
   let out = "";
   let pos = 0;
   for (const e of edits) {
@@ -6098,9 +6257,8 @@ function applyEdits(s, edits) {
   }
   return out + s.slice(pos);
 }
-async function blackTextToGray(pdf) {
-  const { PDFDocument, PDFName, PDFRawStream, PDFArray, PDFRef, decodePDFRawStream } = await import("pdf-lib");
-  const doc = await PDFDocument.load(pdf, { updateMetadata: false });
+async function visitContent(doc, visit) {
+  const { PDFName, PDFRawStream, PDFArray, PDFRef, PDFDict, decodePDFRawStream } = await import("pdf-lib");
   const ctx = doc.context;
   const SKIP = ["Filter", "DecodeParms", "Length"].map((k) => PDFName.of(k));
   let changed = false;
@@ -6119,19 +6277,15 @@ async function blackTextToGray(pdf) {
     ctx.assign(ref, ctx.flateStream(Buffer.from(text, "latin1"), entries));
     changed = true;
   };
-  for (const [ref, obj] of ctx.enumerateIndirectObjects()) {
-    if (!(obj instanceof PDFRawStream))
-      continue;
-    if (obj.dict.get(PDFName.of("Subtype")) !== PDFName.of("Form"))
-      continue;
-    const text = decode(obj);
-    if (text === null)
-      continue;
-    const next = rewriteBlackText(text);
-    if (next !== text)
-      replace(ref, obj, next);
-  }
-  for (const page of doc.getPages()) {
+  const formScale = new Map;
+  const formMatrixScale = (form) => {
+    const m = form.dict.lookupMaybe(PDFName.of("Matrix"), PDFArray);
+    const nums = m?.asArray().map((n) => Number(n.toString()));
+    return nums?.length === 6 && !nums.some(Number.isNaN) ? area(nums) : 1;
+  };
+  const pages = doc.getPages();
+  for (let p = 0;p < pages.length; p++) {
+    const page = pages[p];
     const contents = page.node.Contents();
     const refs = [];
     if (contents instanceof PDFArray) {
@@ -6149,16 +6303,49 @@ async function blackTextToGray(pdf) {
     if (!refs.length || !streams.every((s) => s instanceof PDFRawStream))
       continue;
     const parts = streams.map((s) => decode(s));
-    if (parts.some((p) => p === null))
+    if (parts.some((q) => q === null))
       continue;
     const joined = parts.join(`
 `);
-    const next = rewriteBlackText(joined);
+    const xobjects = page.node.Resources()?.lookupMaybe(PDFName.of("XObject"), PDFDict);
+    const next = visit(joined, {
+      baseScale: 1,
+      onDo: (name, scale) => {
+        const ref = xobjects?.get(PDFName.of(name));
+        const form = ref instanceof PDFRef ? ctx.lookup(ref) : undefined;
+        if (!(ref instanceof PDFRef) || !(form instanceof PDFRawStream))
+          return;
+        if (form.dict.get(PDFName.of("Subtype")) !== PDFName.of("Form"))
+          return;
+        const at = scale * formMatrixScale(form);
+        formScale.set(ref.tag, Math.min(formScale.get(ref.tag) ?? Infinity, at));
+      }
+    });
     if (next === joined)
       continue;
     replace(refs[0], streams[0], next);
     page.node.set(PDFName.of("Contents"), refs[0]);
   }
+  for (const [ref, obj] of ctx.enumerateIndirectObjects()) {
+    if (!(obj instanceof PDFRawStream))
+      continue;
+    if (obj.dict.get(PDFName.of("Subtype")) !== PDFName.of("Form"))
+      continue;
+    const text = decode(obj);
+    if (text === null)
+      continue;
+    const next = visit(text, {
+      baseScale: formScale.get(ref.tag) ?? 0
+    });
+    if (next !== text)
+      replace(ref, obj, next);
+  }
+  return changed;
+}
+async function blackTextToGray(pdf) {
+  const { PDFDocument } = await import("pdf-lib");
+  const doc = await PDFDocument.load(pdf, { updateMetadata: false });
+  const changed = await visitContent(doc, (src, info2) => rewriteBlackText(src, info2));
   return changed ? doc.save({ updateFieldAppearances: false }) : pdf;
 }
 
@@ -6766,6 +6953,32 @@ function getImagePixelSize(page, name, timeoutMs = 2000) {
     }
   });
 }
+var PAINT_OPS = new Set([
+  "stroke",
+  "closeStroke",
+  "fill",
+  "eoFill",
+  "fillStroke",
+  "eoFillStroke",
+  "closeFillStroke",
+  "closeEOFillStroke",
+  "shadingFill",
+  "paintImageXObject",
+  "paintInlineImageXObject",
+  "paintImageXObjectRepeat",
+  "paintImageMaskXObject",
+  "paintImageMaskXObjectGroup",
+  "paintImageMaskXObjectRepeat",
+  "paintSolidColorImageMask",
+  "showText",
+  "showSpacedText",
+  "nextLineShowText",
+  "nextLineSetSpacingShowText"
+].map((name) => OPS[name]).filter((op) => op !== undefined));
+async function pageHasMarks(doc, pageNum) {
+  const ops = await (await doc.getPage(pageNum)).getOperatorList();
+  return ops.fnArray.some((fn, i) => fn === OPS.constructPath ? PAINT_OPS.has(ops.argsArray[i][0]) : PAINT_OPS.has(fn));
+}
 async function getImageResolutions(doc) {
   const { imagesByPage } = await getOpPass(doc);
   const out = [];
@@ -7269,8 +7482,62 @@ var check8 = {
 };
 registerCheck(check8);
 
-// src/checks/pdf/bookmarks.ts
+// src/checks/pdf/signature.ts
 var check9 = {
+  id: "pdf.print.signature",
+  name: "Signature",
+  description: "Fails when the interior's page count does not fit the print signature (a multiple of it ending on a blank page, or one short of a multiple)",
+  category: "pdf",
+  phase: "post-build",
+  enabledWhen: (config) => config.print.signature > 1,
+  async run(ctx) {
+    if (!ctx.pdfPath)
+      return [];
+    const doc = await loadPdf(ctx.pdfPath);
+    if (!doc) {
+      return [inspectionFailed(check9.id, "Could not parse the PDF's page count.", { file: ctx.pdfPath })];
+    }
+    const size = ctx.config.print.signature;
+    const pages = doc.numPages;
+    if ((pages + 1) % size === 0)
+      return [];
+    const data = { pages, signature: size };
+    if (pages % size !== 0) {
+      return [
+        finding(check9.id, {
+          severity: "error",
+          message: `Page count ${pages} does not fit a signature of ${size}: it must be a multiple of ${size}, or one short of one.`,
+          file: ctx.pdfPath,
+          detail: "Set `print.signature` in the manifest and rebuild; the build pads the interior for you.",
+          code: "signature-page-count",
+          data
+        })
+      ];
+    }
+    if (!lastPageMode(ctx.config.print))
+      return [];
+    try {
+      if (!await pageHasMarks(doc, pages))
+        return [];
+    } catch {
+      return [inspectionFailed(check9.id, "Could not read the last page.", { file: ctx.pdfPath })];
+    }
+    return [
+      finding(check9.id, {
+        severity: "error",
+        message: `The last page (${pages}) has content, but the printer needs it blank for its own information.`,
+        file: ctx.pdfPath,
+        detail: "The build adds that page for you (`print.lastPage: blank`, or `short-by-one` to stop a page short of a multiple " + `of ${size} and let the printer add it). Check that the interior was built with this manifest, and that nothing in it ` + "forces content onto the final page.",
+        code: "signature-last-page",
+        data
+      })
+    ];
+  }
+};
+registerCheck(check9);
+
+// src/checks/pdf/bookmarks.ts
+var check10 = {
   id: "pdf.nav.bookmarks",
   name: "Bookmarks",
   description: "Checks for PDF outline (bookmarks) tree",
@@ -7284,14 +7551,14 @@ var check9 = {
     const doc = await loadPdf(ctx.pdfPath);
     if (!doc) {
       return [
-        inspectionFailed(check9.id, "Could not inspect PDF for bookmarks.", {
+        inspectionFailed(check10.id, "Could not inspect PDF for bookmarks.", {
           file: ctx.pdfPath
         })
       ];
     }
     if (await getOutlineCount(doc) === 0) {
       return [
-        finding(check9.id, {
+        finding(check10.id, {
           severity: "warning",
           message: "PDF does not contain bookmarks (outline tree).",
           file: ctx.pdfPath
@@ -7301,10 +7568,10 @@ var check9 = {
     return [];
   }
 };
-registerCheck(check9);
+registerCheck(check10);
 
 // src/checks/pdf/toc-links.ts
-var check10 = {
+var check11 = {
   id: "pdf.nav.toc-links",
   name: "TOC Links",
   description: "Detects link annotations on TOC pages",
@@ -7319,7 +7586,7 @@ var check10 = {
     if (!doc) {
       return [
         {
-          checkId: check10.id,
+          checkId: check11.id,
           severity: "warning",
           message: "Could not inspect PDF for TOC links.",
           file: ctx.pdfPath
@@ -7330,7 +7597,7 @@ var check10 = {
     if (!hasLinks) {
       return [
         {
-          checkId: check10.id,
+          checkId: check11.id,
           severity: "warning",
           message: "No link annotations found in PDF (expected for TOC).",
           file: ctx.pdfPath
@@ -7340,10 +7607,10 @@ var check10 = {
     return [];
   }
 };
-registerCheck(check10);
+registerCheck(check11);
 
 // src/checks/pdf/cross-refs.ts
-var check11 = {
+var check12 = {
   id: "pdf.nav.cross-refs",
   name: "Cross References",
   description: "Counts and verifies internal link annotations",
@@ -7356,7 +7623,7 @@ var check11 = {
     if (!doc) {
       return [
         {
-          checkId: check11.id,
+          checkId: check12.id,
           severity: "info",
           message: "Could not inspect PDF for cross-references.",
           file: ctx.pdfPath
@@ -7366,7 +7633,7 @@ var check11 = {
     const linkCount = await countLinkAnnotations(doc);
     return [
       {
-        checkId: check11.id,
+        checkId: check12.id,
         severity: "info",
         message: `PDF contains ${linkCount} internal link annotation${linkCount !== 1 ? "s" : ""}.`,
         file: ctx.pdfPath
@@ -7374,10 +7641,10 @@ var check11 = {
     ];
   }
 };
-registerCheck(check11);
+registerCheck(check12);
 
 // src/checks/pdf/page-labels.ts
-var check12 = {
+var check13 = {
   id: "pdf.nav.page-labels",
   name: "Page Labels",
   description: "Verifies PDF page labels / folio numbering",
@@ -7392,7 +7659,7 @@ var check12 = {
     const labels = await getPageLabels(doc);
     return [
       {
-        checkId: check12.id,
+        checkId: check13.id,
         severity: "info",
         message: labels && labels.length > 0 ? "PDF contains page labels." : "PDF does not contain explicit page labels.",
         file: ctx.pdfPath
@@ -7400,10 +7667,10 @@ var check12 = {
     ];
   }
 };
-registerCheck(check12);
+registerCheck(check13);
 
 // src/checks/pdf/image-resolution.ts
-var check13 = {
+var check14 = {
   id: "pdf.print.image-resolution",
   name: "Image Resolution",
   description: "Checks DPI of images embedded in the PDF",
@@ -7430,7 +7697,7 @@ var check13 = {
       lowResPages.sort((a, b) => a - b);
       return [
         {
-          checkId: check13.id,
+          checkId: check14.id,
           severity: "warning",
           message: `Low-resolution images (below ${minDpi} DPI) found on pages: ${lowResPages.join(", ")}`,
           file: ctx.pdfPath
@@ -7440,10 +7707,10 @@ var check13 = {
     return [];
   }
 };
-registerCheck(check13);
+registerCheck(check14);
 
 // src/checks/pdf/transparency.ts
-var check14 = {
+var check15 = {
   id: "pdf.print.transparency",
   name: "Transparency",
   description: "Checks for transparency markers (/Transparency, /SMask, /BM) in the PDF",
@@ -7465,7 +7732,7 @@ var check14 = {
     if (found.length > 0) {
       return [
         {
-          checkId: check14.id,
+          checkId: check15.id,
           severity: "warning",
           message: `Transparency detected in PDF: ${found.join(", ")}. This may cause issues with some printers.`,
           file: ctx.pdfPath
@@ -7475,7 +7742,7 @@ var check14 = {
     return [];
   }
 };
-registerCheck(check14);
+registerCheck(check15);
 
 // src/checks/pdf/bleed.ts
 function findBox(bytes, box) {
@@ -7485,7 +7752,7 @@ function findBox(bytes, box) {
     return null;
   return [Number(m[1]), Number(m[2]), Number(m[3]), Number(m[4])];
 }
-var check15 = {
+var check16 = {
   id: "pdf.print.bleed",
   name: "Bleed Box",
   description: "Compares MediaBox vs TrimBox/BleedBox to verify bleed area",
@@ -7499,7 +7766,7 @@ var check15 = {
     const bytes = await readPdfBytes(ctx.pdfPath).catch(() => "");
     if (!bytes) {
       return [
-        inspectionFailed(check15.id, "Could not inspect PDF for bleed boxes.", {
+        inspectionFailed(check16.id, "Could not inspect PDF for bleed boxes.", {
           file: ctx.pdfPath
         })
       ];
@@ -7509,14 +7776,14 @@ var check15 = {
     const bleed = findBox(bytes, "BleedBox");
     if (!media) {
       return [
-        inspectionFailed(check15.id, "Could not parse MediaBox from PDF.", {
+        inspectionFailed(check16.id, "Could not parse MediaBox from PDF.", {
           file: ctx.pdfPath
         })
       ];
     }
     if (!trim && !bleed) {
       return [
-        finding(check15.id, {
+        finding(check16.id, {
           severity: "warning",
           message: "No TrimBox or BleedBox found. Bleed area cannot be verified.",
           file: ctx.pdfPath
@@ -7529,7 +7796,7 @@ var check15 = {
       const bleedSize = ctx.config.validate.pdf.bleedSize;
       if (mediaW - trimW < bleedSize * 2 * 0.9) {
         return [
-          finding(check15.id, {
+          finding(check16.id, {
             severity: "warning",
             message: `Bleed area appears insufficient. Expected at least ${bleedSize}pt on each side.`,
             file: ctx.pdfPath
@@ -7540,10 +7807,10 @@ var check15 = {
     return [];
   }
 };
-registerCheck(check15);
+registerCheck(check16);
 
 // src/checks/pdf/pdfx-metadata.ts
-var check16 = {
+var check17 = {
   id: "pdf.print.pdfx-metadata",
   name: "PDF/X Metadata",
   description: "Verifies PDF/X DOCINFO metadata via qpdf JSON",
@@ -7562,22 +7829,22 @@ var check16 = {
       const objects = parseQpdfObjectsJson(stdout);
       if (!objects) {
         return [
-          inspectionFailed(check16.id, "Unable to parse qpdf JSON output for PDF/X metadata checks.", { file: ctx.pdfPath })
+          inspectionFailed(check17.id, "Unable to parse qpdf JSON output for PDF/X metadata checks.", { file: ctx.pdfPath })
         ];
       }
-      return getPdfxMetadataIssues(objects, ctx.config.pdfx.flavor).map((message) => finding(check16.id, {
+      return getPdfxMetadataIssues(objects, ctx.config.pdfx.flavor).map((message) => finding(check17.id, {
         severity: "error",
         message,
         file: ctx.pdfPath
       }));
     } catch {
       return [
-        inspectionFailed(check16.id, "Failed to inspect PDF objects with qpdf for PDF/X metadata.", { file: ctx.pdfPath })
+        inspectionFailed(check17.id, "Failed to inspect PDF objects with qpdf for PDF/X metadata.", { file: ctx.pdfPath })
       ];
     }
   }
 };
-registerCheck(check16);
+registerCheck(check17);
 
 // src/checks/source/htmlhint.ts
 import { existsSync as existsSync9 } from "node:fs";
@@ -7585,7 +7852,7 @@ import { readFile as readFile15 } from "node:fs/promises";
 import htmlhint from "htmlhint";
 var { HTMLHint } = htmlhint;
 var CONFIG_NAMES2 = [".htmlhintrc"];
-var check17 = {
+var check18 = {
   id: "source.htmlhint",
   name: "HTMLHint",
   description: "Runs htmlhint with project config to validate generated HTML",
@@ -7605,7 +7872,7 @@ var check17 = {
     const html = await readFile15(ctx.htmlPath, "utf8");
     const messages = HTMLHint.verify(html, ruleset);
     return messages.map((m) => ({
-      checkId: check17.id,
+      checkId: check18.id,
       severity: m.type === "error" ? "error" : "warning",
       message: `${m.rule.id}: ${m.message}`,
       file: ctx.htmlPath,
@@ -7614,13 +7881,35 @@ var check17 = {
     }));
   }
 };
-registerCheck(check17);
+registerCheck(check18);
 
 // src/checks/source/stylelint.ts
 import { readFile as readFile16 } from "node:fs/promises";
 
 // src/lib/printsafe.ts
 import postcss2 from "postcss";
+
+// src/lib/lint-rules.ts
+function ruleLevel(rules, id) {
+  const v = rules?.[id];
+  if (v === "off" || v === false)
+    return "off";
+  if (v === "warn" || v === "warning")
+    return "warn";
+  if (v === "error")
+    return "error";
+  return;
+}
+var DIRECTIVE = /^\s*gutterpress-disable-next-line\s+(.*?)\s*$/;
+function parseDisableDirective(commentText) {
+  const m = DIRECTIVE.exec(commentText);
+  if (!m)
+    return null;
+  const ids = m[1].split(/\s--(?:\s|$)/)[0].split(/[\s,]+/).filter(Boolean);
+  return ids.length > 0 ? ids : null;
+}
+
+// src/lib/printsafe.ts
 var ruleRemoteUrls = "printsafe/no-remote-urls";
 var ruleRiskyProps = "printsafe/no-risky-print-effects";
 var ruleSyntax = "printsafe/syntax-error";
@@ -7645,9 +7934,11 @@ var riskyProperties = new Set([
   "animation",
   "animation-name",
   "transition",
-  "will-change",
-  "clip-path"
+  "will-change"
 ]);
+function isRasterizingClipPath(decl) {
+  return decl.prop.toLowerCase() === "clip-path" && /\burl\(/i.test(decl.value);
+}
 var marginBoxAtRuleNames = new Set([
   "top-left-corner",
   "top-left",
@@ -7774,7 +8065,34 @@ function nodeLoc(node) {
     column: node.source?.start?.column ?? 1
   };
 }
-function checkCss(css, from) {
+function checkCss(css, from, options = {}) {
+  return filterFindings(checkCssRaw(css, from), css, options.rules);
+}
+function filterFindings(findings, css, rules) {
+  const silenced = new Map;
+  for (const m of css.matchAll(/\/\*([\s\S]*?)\*\//g)) {
+    const ids = parseDisableDirective(m[1]);
+    if (!ids)
+      continue;
+    const endLine = css.slice(0, m.index + m[0].length).split(`
+`).length;
+    const set = silenced.get(endLine + 1) ?? new Set;
+    for (const id of ids)
+      set.add(id);
+    silenced.set(endLine + 1, set);
+  }
+  const out = [];
+  for (const f of findings) {
+    if (silenced.get(f.line)?.has(f.rule))
+      continue;
+    const level = ruleLevel(rules, f.rule);
+    if (level === "off")
+      continue;
+    out.push(level === "warn" ? { ...f, severity: "warning" } : level === "error" ? { ...f, severity: "error" } : f);
+  }
+  return out;
+}
+function checkCssRaw(css, from) {
   let root;
   try {
     root = postcss2.parse(css, from ? { from } : undefined);
@@ -7823,6 +8141,13 @@ function checkCss(css, from) {
         message: `Property is high-risk for print/PDF: 'filter' rasterizes its subtree to a 300 DPI bitmap in the printed PDF (text becomes unselectable, unsearchable, and inaccessible), and it dominates build time (~90% measured; 57.0s -> 6.2s over 60pp when scoped — see ENGINE.md §10). Scope it to the smallest possible selector. It also means the render-parity gate cannot see a text-only change inside it (docs/render-parity-gate.md, "Known blind spot").`,
         ...nodeLoc(decl)
       });
+    } else if (isRasterizingClipPath(decl)) {
+      warnings.push({
+        rule: ruleRiskyProps,
+        severity: "warning",
+        message: `Property is high-risk for print/PDF (can force rasterization): ${decl.prop} with url(...) references an SVG mask. Use a basic shape (polygon(), inset(), circle(), ellipse(), path()) instead — those print as vector clips.`,
+        ...nodeLoc(decl)
+      });
     } else if (riskyProperties.has(prop)) {
       warnings.push({
         rule: ruleRiskyProps,
@@ -7876,7 +8201,7 @@ function checkCss(css, from) {
 }
 
 // src/checks/source/stylelint.ts
-var check18 = {
+var check19 = {
   id: "source.stylelint",
   name: "Print-safety CSS",
   description: "Checks CSS for print-safety issues (remote URLs, rasterizing effects, and page-layer containment)",
@@ -7896,16 +8221,16 @@ var check18 = {
         css = await readFile16(file, "utf8");
       } catch (err) {
         results.push({
-          checkId: check18.id,
+          checkId: check19.id,
           severity: "error",
           message: `Cannot read stylesheet: ${err instanceof Error ? err.message : String(err)}`,
           file
         });
         continue;
       }
-      for (const w of checkCss(css, file)) {
+      for (const w of checkCss(css, file, { rules: ctx.config.lint.rules })) {
         results.push({
-          checkId: check18.id,
+          checkId: check19.id,
           severity: w.severity,
           message: `${w.rule}: ${w.message}`,
           file,
@@ -7917,7 +8242,7 @@ var check18 = {
     return results;
   }
 };
-registerCheck(check18);
+registerCheck(check19);
 
 // src/checks/source/css-ownership.ts
 import { readFile as readFile17 } from "node:fs/promises";
@@ -8038,7 +8363,7 @@ function checkOwnership(root, file, maps) {
   });
   return out;
 }
-var check19 = {
+var check20 = {
   id: "source.css-ownership",
   name: "CSS ownership contract",
   description: "Checks an optional per-project CSS ownership contract (.gutterpress/css-contract.yaml): which file may declare which properties/at-rules, and which selectors must never appear unscoped.",
@@ -8061,7 +8386,7 @@ var check19 = {
     } catch (err) {
       return [
         {
-          checkId: check19.id,
+          checkId: check20.id,
           severity: "error",
           message: `Failed to parse CSS ownership contract "${configPath}": ${err instanceof Error ? err.message : String(err)}`,
           file: configPath
@@ -8103,7 +8428,7 @@ var check19 = {
       }
       for (const v of violations) {
         results.push({
-          checkId: check19.id,
+          checkId: check20.id,
           severity: "warning",
           message: v.message,
           file: absFile,
@@ -8115,7 +8440,7 @@ var check19 = {
     return results;
   }
 };
-registerCheck(check19);
+registerCheck(check20);
 
 // src/checks/source/local-refs.ts
 import { existsSync as existsSync10 } from "node:fs";
@@ -8202,7 +8527,7 @@ async function* renderedLocalRefs(ctx, checkId, results) {
 }
 
 // src/checks/source/local-refs.ts
-var check20 = {
+var check21 = {
   id: "source.links.local-refs",
   name: "Local Markdown References",
   description: "Checks local markdown links and image refs resolve on disk",
@@ -8210,12 +8535,12 @@ var check20 = {
   phase: "pre-build",
   async run(ctx) {
     const results = [];
-    for await (const { ref, kind, line, file } of renderedLocalRefs(ctx, check20.id, results)) {
+    for await (const { ref, kind, line, file } of renderedLocalRefs(ctx, check21.id, results)) {
       if (isNonFilesystemRef(ref))
         continue;
       const escape = kind === "image" ? proseImageRefError(ref, ctx.inputDir) : null;
       if (escape) {
-        results.push(finding(check20.id, {
+        results.push(finding(check21.id, {
           severity: "error",
           message: escape,
           file,
@@ -8225,7 +8550,7 @@ var check20 = {
       }
       if (localRefExists(ref, kind, file, ctx.inputDir))
         continue;
-      results.push(finding(check20.id, {
+      results.push(finding(check21.id, {
         severity: kind === "image" ? "warning" : "error",
         code: kind === "image" ? "missing-image-placeholder" : undefined,
         message: kind === "image" ? `Local image not found; build will substitute a magenta placeholder: ${ref}` : `Local reference not found: ${ref}`,
@@ -8250,7 +8575,7 @@ function localRefExists(ref, kind, sourceFile, projectRoot) {
       return existsSync10(fileRelative);
   }
 }
-registerCheck(check20);
+registerCheck(check21);
 
 // src/lib/build-staging.ts
 import path11 from "node:path";
@@ -8516,7 +8841,7 @@ async function createStageRoot() {
 }
 
 // src/checks/source/dangling-links.ts
-var check21 = {
+var check22 = {
   id: "source.links.dangling",
   name: "Dangling Links",
   description: "Flags relative links the printed book cannot open (their href is dropped at print time)",
@@ -8524,10 +8849,10 @@ var check21 = {
   phase: "pre-build",
   async run(ctx) {
     const results = [];
-    for await (const { ref, kind, line, file } of renderedLocalRefs(ctx, check21.id, results)) {
+    for await (const { ref, kind, line, file } of renderedLocalRefs(ctx, check22.id, results)) {
       if (kind !== "link" || isPrintResolvableHref(ref))
         continue;
-      results.push(finding(check21.id, {
+      results.push(finding(check22.id, {
         severity: "warning",
         code: "dangling-link",
         data: { ref },
@@ -8539,11 +8864,11 @@ var check21 = {
     return results;
   }
 };
-registerCheck(check21);
+registerCheck(check22);
 
 // src/checks/source/accessibility-alt-text.ts
 import { readFile as readFile19 } from "node:fs/promises";
-var check22 = {
+var check23 = {
   id: "source.accessibility.alt-text",
   name: "Image Alt Text",
   description: "Checks markdown images include non-empty alt text",
@@ -8572,7 +8897,7 @@ var check22 = {
             if (alt.trim())
               continue;
             results.push({
-              checkId: check22.id,
+              checkId: check23.id,
               severity: "warning",
               message: "Image is missing alt text",
               file,
@@ -8597,11 +8922,11 @@ function extractImageAlts(line) {
   }
   return alts;
 }
-registerCheck(check22);
+registerCheck(check23);
 
 // src/checks/source/accessibility-heading-order.ts
 import { readFile as readFile20 } from "node:fs/promises";
-var check23 = {
+var check24 = {
   id: "source.accessibility.heading-order",
   name: "Heading Order",
   description: "Checks markdown heading levels do not jump by more than one",
@@ -8619,6 +8944,7 @@ var check23 = {
 `);
         let inFence = false;
         let prevLevel;
+        let silencedLine = -1;
         for (let i = 0;i < lines.length; i++) {
           const line = lines[i] ?? "";
           if (/^\s*(```|~~~)/.test(line)) {
@@ -8627,13 +8953,18 @@ var check23 = {
           }
           if (inFence)
             continue;
+          const comment = /^\s*<!--(.*)-->\s*$/.exec(line);
+          if (comment && parseDisableDirective(comment[1])?.includes(check24.id)) {
+            silencedLine = i + 1;
+            continue;
+          }
           const match = line.match(/^(#{1,6})\s+\S/);
           if (!match)
             continue;
           const level = match[1].length;
-          if (prevLevel != null && level > prevLevel + 1) {
+          if (prevLevel != null && level > prevLevel + 1 && i !== silencedLine) {
             results.push({
-              checkId: check23.id,
+              checkId: check24.id,
               severity: "warning",
               message: `Heading level jump from h${prevLevel} to h${level}`,
               file,
@@ -8647,11 +8978,11 @@ var check23 = {
     return results;
   }
 };
-registerCheck(check23);
+registerCheck(check24);
 
 // src/checks/source/layout-markers.ts
 import { readFile as readFile21 } from "node:fs/promises";
-var check24 = {
+var check25 = {
   id: "source.markdown.layout-markers",
   name: "Layout Markers",
   description: "Reports @page/@section/@chapter marker arguments Gutterpress could not understand, plus any unknown gp-* class",
@@ -8663,7 +8994,7 @@ var check24 = {
       return [];
     const results = [];
     const plugins = await loadPlugins(ctx.config.extensions, ctx.inputDir, (ref, error2) => {
-      results.push(inspectionFailed(check24.id, `Plugin "${ref}" could not be loaded, so markers it defines were not checked: ${error2.message}`));
+      results.push(inspectionFailed(check25.id, `Plugin "${ref}" could not be loaded, so markers it defines were not checked: ${error2.message}`));
     });
     const md = createMarkdownRenderer(plugins);
     for (const file of files) {
@@ -8672,7 +9003,7 @@ var check24 = {
         const env = {};
         md.render(content, env);
         for (const w of env.layoutWarnings ?? []) {
-          results.push(finding(check24.id, {
+          results.push(finding(check25.id, {
             severity: w.severity ?? "warning",
             message: w.message,
             file,
@@ -8681,13 +9012,13 @@ var check24 = {
           }));
         }
       } catch (error2) {
-        results.push(inspectionFailed(check24.id, `Could not check layout markers in ${file}: ${error2 instanceof Error ? error2.message : String(error2)}`, { file }));
+        results.push(inspectionFailed(check25.id, `Could not check layout markers in ${file}: ${error2 instanceof Error ? error2.message : String(error2)}`, { file }));
       }
     }
     return results;
   }
 };
-registerCheck(check24);
+registerCheck(check25);
 
 // src/checks/source/merge-markers.ts
 import { readFile as readFile22 } from "node:fs/promises";
@@ -8720,7 +9051,7 @@ var CLOSE_SENTINEL = ">>>>>>> online version";
 function withoutOnlineTag(relPath) {
   return relPath.replace(/\.online(?=\.[^./]*$|$)/, "");
 }
-var check25 = {
+var check26 = {
   id: "source.sync.merge-markers",
   name: "Combined Versions",
   description: "Finds passages and files still holding two versions (yours and the online copy) after a sync",
@@ -8734,7 +9065,7 @@ var check25 = {
       try {
         content = await readFile22(file, "utf8");
       } catch {
-        results.push(inspectionFailed(check25.id, `Could not read source file: ${file}`, { file }));
+        results.push(inspectionFailed(check26.id, `Could not read source file: ${file}`, { file }));
         continue;
       }
       if (!content.includes(OPEN_SENTINEL) && !content.includes(CLOSE_SENTINEL))
@@ -8746,7 +9077,7 @@ var check25 = {
         const line = lines[i].endsWith("\r") ? lines[i].slice(0, -1) : lines[i];
         if (line === OPEN_SENTINEL) {
           inBlock = true;
-          results.push(finding(check25.id, {
+          results.push(finding(check26.id, {
             severity: "error",
             code: "two-versions-passage",
             message: "This passage has two versions (yours and the online copy) — keep what you want, then delete the marker lines.",
@@ -8755,7 +9086,7 @@ var check25 = {
           }));
         } else if (line === CLOSE_SENTINEL) {
           if (!inBlock) {
-            results.push(finding(check25.id, {
+            results.push(finding(check26.id, {
               severity: "error",
               code: "leftover-version-marker",
               message: "This marker line is left over from combining two versions — delete it.",
@@ -8776,7 +9107,7 @@ var check25 = {
       });
       for (const sibling of siblings.sort()) {
         const rel = path12.relative(ctx.inputDir, sibling).split(path12.sep).join("/");
-        results.push(finding(check25.id, {
+        results.push(finding(check26.id, {
           severity: "warning",
           code: "kept-both-versions",
           message: `Two versions of ${withoutOnlineTag(rel)} are in your book — keep the one you want, then delete the other.`,
@@ -8784,12 +9115,12 @@ var check25 = {
         }));
       }
     } catch (error2) {
-      results.push(inspectionFailed(check25.id, `Could not scan for kept-both files: ${error2 instanceof Error ? error2.message : String(error2)}`));
+      results.push(inspectionFailed(check26.id, `Could not scan for kept-both files: ${error2 instanceof Error ? error2.message : String(error2)}`));
     }
     return results;
   }
 };
-registerCheck(check25);
+registerCheck(check26);
 
 // src/checks/asset/image-file-size.ts
 import { stat as stat4 } from "node:fs/promises";
@@ -9015,7 +9346,7 @@ async function collectImageFiles(dirs, exts, ignore2 = ASSET_SCAN_IGNORE_GLOBS)
 }
 
 // src/checks/asset/image-file-size.ts
-var check26 = {
+var check27 = {
   id: "asset.image.file-size",
   name: "Image File Size",
   description: "Checks that image files do not exceed the maximum size limit",
@@ -9036,14 +9367,14 @@ var check26 = {
         if (info2.size > maxSize) {
           const sizeMb = (info2.size / 1e6).toFixed(1);
           const maxMb = (maxSize / 1e6).toFixed(1);
-          results.push(finding(check26.id, {
+          results.push(finding(check27.id, {
             severity: "warning",
             message: `Image file too large: ${sizeMb}MB (max ${maxMb}MB)`,
             file
           }));
         }
       } catch {
-        results.push(inspectionFailed(check26.id, `Could not stat image file: ${file}`, {
+        results.push(inspectionFailed(check27.id, `Could not stat image file: ${file}`, {
           file
         }));
       }
@@ -9051,10 +9382,10 @@ var check26 = {
     return results;
   }
 };
-registerCheck(check26);
+registerCheck(check27);
 
 // src/checks/asset/image-resolution.ts
-var check27 = {
+var check28 = {
   id: "asset.image.resolution",
   name: "Image Resolution",
   description: "Checks source image DPI from embedded density metadata",
@@ -9076,7 +9407,7 @@ var check27 = {
       const { xDpi, yDpi } = info2;
       if (xDpi > 0 && yDpi > 0 && (xDpi < minDpi || yDpi < minDpi)) {
         results.push({
-          checkId: check27.id,
+          checkId: check28.id,
           severity: "warning",
           message: `Image resolution too low: ${xDpi}x${yDpi} DPI (minimum ${minDpi} DPI)`,
           file
@@ -9086,7 +9417,7 @@ var check27 = {
     return results;
   }
 };
-registerCheck(check27);
+registerCheck(check28);
 
 // src/checks/asset/image-color-space.ts
 var LABEL = {
@@ -9094,7 +9425,7 @@ var LABEL = {
   gray: "Gray",
   cmyk: "CMYK"
 };
-var check28 = {
+var check29 = {
   id: "asset.image.color-space",
   name: "Image Color Space",
   description: "Validates image color spaces against allowed list",
@@ -9115,7 +9446,7 @@ var check28 = {
       const cs = info2?.colorSpace;
       if (cs && !allowedLower.has(cs)) {
         results.push({
-          checkId: check28.id,
+          checkId: check29.id,
           severity: "warning",
           message: `Image uses ${LABEL[cs] ?? cs} color space (allowed: ${allowed.join(", ")})`,
           file
@@ -9125,10 +9456,10 @@ var check28 = {
     return results;
   }
 };
-registerCheck(check28);
+registerCheck(check29);
 
 // src/checks/asset/image-alpha.ts
-var check29 = {
+var check30 = {
   id: "asset.image.alpha-channel",
   name: "Image Alpha Channel",
   description: "Checks for alpha channels in PNG/TIFF images",
@@ -9146,7 +9477,7 @@ var check29 = {
       const info2 = await inspectImage(file);
       if (info2?.hasAlpha) {
         results.push({
-          checkId: check29.id,
+          checkId: check30.id,
           severity: "warning",
           message: "Image contains alpha channel, which may cause print issues",
           file
@@ -9156,10 +9487,10 @@ var check29 = {
     return results;
   }
 };
-registerCheck(check29);
+registerCheck(check30);
 
 // src/checks/asset/image-tac.ts
-var check30 = {
+var check31 = {
   id: "asset.image.tac-raster",
   name: "Image TAC (Raster)",
   description: "Rasterizes and checks TAC per image using Ghostscript",
@@ -9178,7 +9509,7 @@ var check30 = {
     const ghostscript = await resolveGhostscript();
     if (!ghostscript) {
       return [
-        inspectionFailed(check30.id, "Could not inspect image ink coverage: Ghostscript executable not found")
+        inspectionFailed(check31.id, "Could not inspect image ink coverage: Ghostscript executable not found")
       ];
     }
     for (const file of files) {
@@ -9196,7 +9527,7 @@ var check30 = {
           if (nums.length === 4 && nums.every((n) => Number.isFinite(n))) {
             const tac = (nums[0] + nums[1] + nums[2] + nums[3]) * 100;
             if (tac > maxTac) {
-              results.push(finding(check30.id, {
+              results.push(finding(check31.id, {
                 severity: "warning",
                 message: `Image TAC exceeds limit: ${tac.toFixed(1)}% (max ${maxTac}%)`,
                 file,
@@ -9208,16 +9539,16 @@ var check30 = {
           }
         }
       } catch {
-        results.push(inspectionFailed(check30.id, `Could not inspect image ink coverage: ${file}`, { file }));
+        results.push(inspectionFailed(check31.id, `Could not inspect image ink coverage: ${file}`, { file }));
       }
     }
     return results;
   }
 };
-registerCheck(check30);
+registerCheck(check31);
 
 // src/checks/asset/approved-fonts.ts
-var check31 = {
+var check32 = {
   id: "asset.font.approved-files",
   name: "Approved Font Files",
   description: "Checks font files against the approved file patterns",
@@ -9256,7 +9587,7 @@ var check31 = {
     for (const font of allFonts) {
       if (!approvedFonts.has(font)) {
         results.push({
-          checkId: check31.id,
+          checkId: check32.id,
           severity: "warning",
           message: "Font file not in approved list",
           file: font
@@ -9266,7 +9597,7 @@ var check31 = {
     return results;
   }
 };
-registerCheck(check31);
+registerCheck(check32);
 
 // src/checks/asset/font-license.ts
 import { existsSync as existsSync11 } from "node:fs";
@@ -9281,7 +9612,7 @@ var LICENSE_NAMES = [
   "OFL-1.1.txt",
   "COPYING"
 ];
-var check32 = {
+var check33 = {
   id: "asset.font.license",
   name: "Font License",
   description: "Checks for license files in font directories",
@@ -9308,7 +9639,7 @@ var check32 = {
       const hasLicense = LICENSE_NAMES.some((name) => existsSync11(resolve7(fontDir, name)));
       if (!hasLicense) {
         results.push({
-          checkId: check32.id,
+          checkId: check33.id,
           severity: "warning",
           message: `No font license file found in directory`,
           file: fontDir
@@ -9318,10 +9649,10 @@ var check32 = {
     return results;
   }
 };
-registerCheck(check32);
+registerCheck(check33);
 
 // src/checks/heuristic/text-density.ts
-var check33 = {
+var check34 = {
   id: "heuristic.whitespace.text-density",
   name: "Text Density",
   description: "Checks characters-per-page ratio",
@@ -9350,7 +9681,7 @@ var check33 = {
     });
     if (lowPages.length > 0) {
       results.push({
-        checkId: check33.id,
+        checkId: check34.id,
         severity: "info",
         message: `Low text density on pages: ${lowPages.join(", ")} (below ${range.min} chars)`,
         file: ctx.pdfPath
@@ -9358,7 +9689,7 @@ var check33 = {
     }
     if (highPages.length > 0) {
       results.push({
-        checkId: check33.id,
+        checkId: check34.id,
         severity: "info",
         message: `High text density on pages: ${highPages.join(", ")} (above ${range.max} chars)`,
         file: ctx.pdfPath
@@ -9367,11 +9698,11 @@ var check33 = {
     return results;
   }
 };
-registerCheck(check33);
+registerCheck(check34);
 
 // src/checks/heuristic/section-density.ts
 import { readFile as readFile24 } from "node:fs/promises";
-var check34 = {
+var check35 = {
   id: "heuristic.chunking.section-density",
   name: "Section Density",
   description: "Checks heading/paragraph/callout density from source Markdown",
@@ -9397,7 +9728,7 @@ var check34 = {
           const line = lines[i];
           if (/^#{1,6}\s/.test(line)) {
             if (paragraphCount > maxParas) {
-              results.push(finding(check34.id, {
+              results.push(finding(check35.id, {
                 severity: "info",
                 message: `Section has ${paragraphCount} paragraphs (max recommended: ${maxParas})`,
                 file,
@@ -9417,7 +9748,7 @@ var check34 = {
           }
         }
         if (paragraphCount > maxParas) {
-          results.push(finding(check34.id, {
+          results.push(finding(check35.id, {
             severity: "info",
             message: `Section has ${paragraphCount} paragraphs (max recommended: ${maxParas})`,
             file,
@@ -9425,7 +9756,7 @@ var check34 = {
           }));
         }
       } catch {
-        results.push(inspectionFailed(check34.id, `Could not read source file: ${file}`, {
+        results.push(inspectionFailed(check35.id, `Could not read source file: ${file}`, {
           file
         }));
       }
@@ -9433,10 +9764,10 @@ var check34 = {
     return results;
   }
 };
-registerCheck(check34);
+registerCheck(check35);
 
 // src/checks/heuristic/layer-count.ts
-var check35 = {
+var check36 = {
   id: "heuristic.decoration.layer-count",
   name: "Layer Count",
   description: "Counts image objects per page",
@@ -9461,7 +9792,7 @@ var check35 = {
       heavyPages.sort((a, b) => a - b);
       return [
         {
-          checkId: check35.id,
+          checkId: check36.id,
           severity: "info",
           message: `Pages with many image layers (>${maxLayers}): ${heavyPages.join(", ")}`,
           file: ctx.pdfPath
@@ -9471,10 +9802,10 @@ var check35 = {
     return [];
   }
 };
-registerCheck(check35);
+registerCheck(check36);
 
 // src/checks/heuristic/placement-variance.ts
-var check36 = {
+var check37 = {
   id: "heuristic.layout.placement-variance",
   name: "Placement Variance",
   description: "Analyzes text baseline coordinates for layout consistency",
@@ -9492,7 +9823,7 @@ var check36 = {
     const uniqueX = new Set(positions.map((p) => Math.round(p.x)));
     return [
       {
-        checkId: check36.id,
+        checkId: check37.id,
         severity: "info",
         message: `Layout analysis: ${uniqueX.size} unique horizontal text positions across ${positions.length} text blocks.`,
         file: ctx.pdfPath
@@ -9500,7 +9831,7 @@ var check36 = {
     ];
   }
 };
-registerCheck(check36);
+registerCheck(check37);
 
 // src/checks/runner.ts
 function getCheckSeverityOverride(checkId, config) {
@@ -9530,25 +9861,32 @@ async function runChecks(ctx, opts = {}) {
   }
   const release = retainPdfCache();
   try {
-    for (const check37 of checks2) {
+    for (const check38 of checks2) {
       try {
-        const results = await check37.run(ctx);
-        const severityOverride = getCheckSeverityOverride(check37.id, ctx.config);
+        let results = await check38.run(ctx);
+        const severityOverride = getCheckSeverityOverride(check38.id, ctx.config);
         if (severityOverride) {
           for (const r of results) {
             r.severity = severityOverride;
           }
         }
+        const lintLevel = ruleLevel(ctx.config.lint.rules, check38.id);
+        if (lintLevel === "off")
+          results = [];
+        else if (lintLevel) {
+          for (const r of results)
+            r.severity = lintLevel === "warn" ? "warning" : "error";
+        }
         if (results.length === 0) {
-          passed.push(check37.id);
+          passed.push(check38.id);
         } else {
           allResults.push(...results);
         }
       } catch (err) {
         allResults.push({
-          checkId: check37.id,
+          checkId: check38.id,
           severity: "error",
-          message: `Check "${check37.id}" threw: ${err instanceof Error ? err.message : String(err)}`
+          message: `Check "${check38.id}" threw: ${err instanceof Error ? err.message : String(err)}`
         });
       }
     }
@@ -9588,15 +9926,15 @@ function emptyReport() {
 async function checkToolAvailability(config, opts = {}) {
   const { checks: checks2 } = selectChecks(opts, config);
   const toolToChecks = new Map;
-  for (const check37 of checks2) {
-    if (!check37.requiredTools?.length)
+  for (const check38 of checks2) {
+    if (!check38.requiredTools?.length)
       continue;
-    for (const tool of check37.requiredTools) {
+    for (const tool of check38.requiredTools) {
       const existing = toolToChecks.get(tool);
       if (existing) {
-        existing.push(check37.id);
+        existing.push(check38.id);
       } else {
-        toolToChecks.set(tool, [check37.id]);
+        toolToChecks.set(tool, [check38.id]);
       }
     }
   }
@@ -9612,11 +9950,11 @@ async function checkToolAvailability(config, opts = {}) {
   const missing = results.filter((r) => !r.found).map((r) => r.tool);
   const missingSet = new Set(missing);
   const skippedChecks = [];
-  for (const check37 of checks2) {
-    if (!check37.requiredTools?.length)
+  for (const check38 of checks2) {
+    if (!check38.requiredTools?.length)
       continue;
-    if (check37.requiredTools.some((t) => missingSet.has(t))) {
-      skippedChecks.push(check37.id);
+    if (check38.requiredTools.some((t) => missingSet.has(t))) {
+      skippedChecks.push(check38.id);
     }
   }
   return { available, missing, skippedChecks, toolToChecks };
@@ -9889,7 +10227,7 @@ async function executeValidation(args) {
   };
   if (args.fix) {
     const selected = selectChecks(runnerOptions, config).checks;
-    if (selected.some((check37) => check37.id === MARKDOWNLINT_CHECK_ID)) {
+    if (selected.some((check38) => check38.id === MARKDOWNLINT_CHECK_ID)) {
       await applyMarkdownlintFixes(context);
     } else {
       log.warn(`--fix: ${MARKDOWNLINT_CHECK_ID} is not part of this run — no files were fixed.`);
@@ -10241,7 +10579,8 @@ class HtmlOutput {
         requestedFlavor: null,
         resolvedFlavor: config.pdfx.flavor,
         iccPath: null,
-        stripAnnotations: null
+        stripAnnotations: null,
+        blackText: null
       }
     }, `Wrote: ${path13.join(outDir, BOOK_HTML)}`, { htmlPath: htmlFile, pdfPath: null });
   }
@@ -10261,12 +10600,12 @@ class PdfOutput {
       const rawPdf = pdfxMode ? path13.join(stage, "raw.pdf") : path13.resolve(pdfFile);
       await fsp2.mkdir(path13.dirname(path13.resolve(pdfFile)), { recursive: true });
       log.info("Rendering HTML to PDF via the Gutterpress engine (native Chromium pagination)");
-      const { buildNativePdf } = await import("./engine-5jzhjjvv.js");
+      const { buildNativePdf } = await import("./engine-3xqgm82d.js");
       const engineDiagnostics = await buildNativePdf(htmlFile, rawPdf, {
         title: config.title,
         author: config.authors.length > 0 ? config.authors.join(", ") : undefined,
         signature: config.print.signature,
-        reserveLastPage: config.print.reserveLastPage,
+        lastPage: lastPageMode(config.print),
         allowShrink: opts.allowShrink
       }, browser);
       for (const d of engineDiagnostics)
@@ -10325,7 +10664,8 @@ class PdfOutput {
           requestedFlavor: pdfxMode ?? null,
           resolvedFlavor: config.pdfx.flavor,
           iccPath: effectiveIccPath,
-          stripAnnotations: shouldStripAnnotations
+          stripAnnotations: shouldStripAnnotations,
+          blackText: pdfxMode ? config.pdfx.blackText : null
         }
       }, `Wrote: ${reportedPdf}`, { htmlPath: htmlFile, pdfPath: reportedPdf }, pdfName, engineDiagnostics);
     } finally {
@@ -11726,9 +12066,169 @@ async function getSystemDiagnostics() {
   };
 }
 // src/lib/project-scaffold.ts
-import { access, copyFile, cp as cp2, mkdir as mkdir8, readdir as readdir6, readFile as readFile28, stat as stat6, writeFile as writeFile8 } from "node:fs/promises";
-import { constants as FS, existsSync as existsSync13 } from "node:fs";
+import { access, copyFile, cp as cp2, mkdir as mkdir9, readdir as readdir6, readFile as readFile29, stat as stat6, writeFile as writeFile9 } from "node:fs/promises";
+import { constants as FS, existsSync as existsSync14 } from "node:fs";
+import path20 from "node:path";
+
+// src/lib/page-size.ts
+import { existsSync as existsSync13 } from "node:fs";
+import { mkdir as mkdir8, readFile as readFile28, writeFile as writeFile8 } from "node:fs/promises";
 import path19 from "node:path";
+import postcss4 from "postcss";
+import { Scalar as Scalar2 } from "yaml";
+function isPositivePoints(value) {
+  return typeof value === "number" && Number.isFinite(value) && value > 0;
+}
+function writePageBounds(doc, page) {
+  const out = { width: page.width, height: page.height };
+  const tolerance = page.tolerance ?? numberAt(doc, ["page", "tolerance"]);
+  if (tolerance !== undefined)
+    out.tolerance = tolerance;
+  doc.set("page", doc.createNode(out));
+}
+function numberAt(doc, keyPath) {
+  const v = doc.getIn(keyPath);
+  return isPositivePoints(v) ? v : undefined;
+}
+function pageSizeForChoice(choice) {
+  if (!PRESET_IDS.includes(choice.preset)) {
+    throw new UsageError(`Unknown preset "${choice.preset}". Choose one of: ${PRESET_IDS.join(", ")}.`);
+  }
+  if (choice.preset === "custom") {
+    const { page } = choice;
+    if (!page || !isPositivePoints(page.width) || !isPositivePoints(page.height)) {
+      throw new UsageError("A custom page size needs a positive width and height in points (72pt = 1in).");
+    }
+    return { width: page.width, height: page.height };
+  }
+  const base = PRESETS[choice.preset].page;
+  return { width: base.width, height: base.height };
+}
+var round3 = (n) => Math.round(n * 1000) / 1000;
+function cssLength(pt) {
+  const inches = round3(pt / 72);
+  return Math.abs(inches * 72 - pt) < 0.000001 ? `${inches}in` : `${round3(pt)}pt`;
+}
+function formatPageSize(page) {
+  return `${cssLength(page.width)} ${cssLength(page.height)}`;
+}
+var SAME_SIZE_PT = 0.5;
+function sameSize(a, b) {
+  return Math.abs(a.width - b.width) < SAME_SIZE_PT && Math.abs(a.height - b.height) < SAME_SIZE_PT;
+}
+function plainPageRules(root) {
+  const rules = [];
+  root.walkAtRules("page", (rule) => {
+    if (rule.params.trim() === "")
+      rules.push(rule);
+  });
+  return rules;
+}
+function sizeDeclsOf(rule) {
+  const decls = [];
+  rule.each((node) => {
+    if (node.type === "decl" && node.prop.toLowerCase() === "size")
+      decls.push(node);
+  });
+  return decls;
+}
+function readPageSizeFromCss(css) {
+  let root;
+  try {
+    root = postcss4.parse(css);
+  } catch {
+    return null;
+  }
+  const decls = plainPageRules(root).flatMap(sizeDeclsOf);
+  const last = decls[decls.length - 1];
+  return last ? parseSize(last.value) ?? null : null;
+}
+function setPageSizeInCss(css, page) {
+  const root = postcss4.parse(css);
+  const decls = plainPageRules(root).flatMap(sizeDeclsOf);
+  const last = decls[decls.length - 1];
+  const value = formatPageSize(page);
+  if (last) {
+    const current = parseSize(last.value);
+    if (current && sameSize(current, page))
+      return css;
+    last.value = value;
+    return root.toString();
+  }
+  const rule = `@page {
+  size: ${value};
+}
+`;
+  if (css.trim() === "")
+    return css + rule;
+  return `${css}${css.endsWith(`
+`) ? "" : `
+`}
+${rule}`;
+}
+async function ownStylesheets(projectDir) {
+  const rels = await resolveActiveStyles(projectDir).catch(() => []);
+  return rels.map((rel) => path19.resolve(projectDir, rel)).filter((abs) => {
+    const inside = path19.relative(projectDir, abs);
+    return !inside.startsWith("..") && !path19.isAbsolute(inside) && existsSync13(abs);
+  });
+}
+var relDisplay2 = (projectDir, abs) => path19.relative(projectDir, abs).split(path19.sep).join("/");
+async function findCssSize(projectDir, sheets) {
+  let found = null;
+  for (const file of sheets) {
+    const size = readPageSizeFromCss(await readFile28(file, "utf8"));
+    if (size)
+      found = { file, size };
+  }
+  return found;
+}
+async function readPageSetup(projectDir) {
+  const { doc } = await loadManifestDoc(projectDir);
+  const declared = doc.get("preset");
+  const preset = declared === undefined || declared === null ? "dtrpg" : PRESET_IDS.includes(String(declared)) ? declared : null;
+  const base = preset ? PRESETS[preset].page : null;
+  const width = numberAt(doc, ["page", "width"]) ?? base?.width;
+  const height = numberAt(doc, ["page", "height"]) ?? base?.height;
+  const tolerance = numberAt(doc, ["page", "tolerance"]) ?? base?.tolerance ?? 0.5;
+  const found = await findCssSize(projectDir, await ownStylesheets(projectDir));
+  return {
+    preset,
+    bounds: width !== undefined && height !== undefined ? { width, height, tolerance } : null,
+    css: found ? { ...found.size, file: relDisplay2(projectDir, found.file) } : null
+  };
+}
+async function setPageSetup(projectDir, choice) {
+  const size = pageSizeForChoice(choice);
+  const sheets = await ownStylesheets(projectDir);
+  const found = await findCssSize(projectDir, sheets);
+  const newSheet = path19.join(projectDir, "styles", "book.css");
+  const target = found?.file ?? sheets[sheets.length - 1] ?? newSheet;
+  const before = existsSync13(target) ? await readFile28(target, "utf8") : "";
+  let after;
+  try {
+    after = setPageSizeInCss(before, size);
+  } catch (e) {
+    throw new UsageError(`Could not update the page size: ${relDisplay2(projectDir, target)} has a CSS error ` + `(${e instanceof Error ? e.message : String(e)}). Fix it, then try again.`);
+  }
+  const { doc, file } = await loadManifestDoc(projectDir);
+  doc.set("preset", choice.preset);
+  if (choice.preset === "custom")
+    writePageBounds(doc, size);
+  else
+    doc.delete("page");
+  if (target === newSheet && !sheets.includes(newSheet)) {
+    ensureSeq(doc, "styles").add(new Scalar2("styles/book.css"));
+  }
+  await writeManifestDoc(file, doc);
+  if (after !== before || !existsSync13(target)) {
+    await mkdir8(path19.dirname(target), { recursive: true });
+    await writeFile8(target, after, "utf8");
+  }
+  return readPageSetup(projectDir);
+}
+
+// src/lib/project-scaffold.ts
 function starterOverridesCss() {
   return `/**
  * Your book's own styles.
@@ -11757,9 +12257,6 @@ function escapeYamlScalar(value) {
   return value.replace(/\\/g, "\\\\").replace(/"/g, "\\\"");
 }
 var DEFAULT_AUTHOR = "Anonymous";
-function isPositivePoints(value) {
-  return typeof value === "number" && Number.isFinite(value) && value > 0;
-}
 function requirePreset(preset, customPage) {
   if (!preset || !PRESET_IDS.includes(preset)) {
     const got = preset ? ` (got "${preset}")` : "";
@@ -11801,7 +12298,7 @@ async function scaffoldProject(options) {
     throw new CreateProjectErrorImpl("invalid-name", `Could not derive a valid folder name from "${name}".`);
   }
   const parentDir = options.parentDir;
-  if (!parentDir || !path19.isAbsolute(parentDir)) {
+  if (!parentDir || !path20.isAbsolute(parentDir)) {
     throw new CreateProjectErrorImpl("parent-not-writable", "The save location must be an absolute path.");
   }
   try {
@@ -11809,7 +12306,7 @@ async function scaffoldProject(options) {
   } catch {
     throw new CreateProjectErrorImpl("parent-not-writable", `The chosen save location can't be written to: ${parentDir}`);
   }
-  const projectDir = path19.join(parentDir, folderName);
+  const projectDir = path20.join(parentDir, folderName);
   let targetExists = true;
   try {
     await access(projectDir, FS.F_OK);
@@ -11824,23 +12321,23 @@ async function scaffoldProject(options) {
   const preset = customTemplateDir && options.preset === undefined ? undefined : requirePreset(options.preset, options.customPage);
   const targets = preset ? resolveScaffoldTargets(options.targets, preset) : undefined;
   try {
-    await mkdir8(projectDir, { recursive: true });
+    await mkdir9(projectDir, { recursive: true });
     if (customTemplateDir) {
       const entries = await readdir6(customTemplateDir, { withFileTypes: true });
       for (const entry of entries) {
         if (entry.name === ".gutterpress-template.json")
           continue;
-        await cp2(path19.join(customTemplateDir, entry.name), path19.join(projectDir, entry.name), { recursive: true });
+        await cp2(path20.join(customTemplateDir, entry.name), path20.join(projectDir, entry.name), { recursive: true });
       }
-      await mkdir8(path19.join(projectDir, "assets"), { recursive: true });
+      await mkdir9(path20.join(projectDir, "assets"), { recursive: true });
     } else {
       const tplManifest = await getAssetPath(`templates/${template}/manifest.yaml`);
       const tplChapter = await getAssetPath(`templates/${template}/chapter-01.md`);
-      await mkdir8(path19.join(projectDir, "assets"), { recursive: true });
-      await copyFile(tplManifest, path19.join(projectDir, MANIFEST_FILENAMES[0]));
-      await copyFile(tplChapter, path19.join(projectDir, "chapter-01.md"));
-      await mkdir8(path19.join(projectDir, "styles"), { recursive: true });
-      await writeFile8(path19.join(projectDir, "styles", "book.css"), starterOverridesCss(), "utf8");
+      await mkdir9(path20.join(projectDir, "assets"), { recursive: true });
+      await copyFile(tplManifest, path20.join(projectDir, MANIFEST_FILENAMES[0]));
+      await copyFile(tplChapter, path20.join(projectDir, "chapter-01.md"));
+      await mkdir9(path20.join(projectDir, "styles"), { recursive: true });
+      await writeFile9(path20.join(projectDir, "styles", "book.css"), starterOverridesCss(), "utf8");
     }
   } catch (e) {
     throw new CreateProjectErrorImpl("scaffold-io", `Could not create the book files: ${e instanceof Error ? e.message : String(e)}`);
@@ -11850,34 +12347,26 @@ async function scaffoldProject(options) {
   } catch (e) {
     throw new CreateProjectErrorImpl("scaffold-io", `Could not write .gitignore: ${e instanceof Error ? e.message : String(e)}`);
   }
-  const manifestPath = MANIFEST_FILENAMES.map((name2) => path19.join(projectDir, name2)).find(existsSync13) ?? path19.join(projectDir, MANIFEST_FILENAMES[0]);
+  const manifestPath = MANIFEST_FILENAMES.map((name2) => path20.join(projectDir, name2)).find(existsSync14) ?? path20.join(projectDir, MANIFEST_FILENAMES[0]);
   const author = (options.author ?? "").trim() || DEFAULT_AUTHOR;
   const substitutions = {
     "{{TITLE}}": escapeYamlScalar(name),
     "{{AUTHOR}}": escapeYamlScalar(author)
   };
-  let openFile = path19.join(projectDir, "chapter-01.md");
+  let openFile = path20.join(projectDir, "chapter-01.md");
   try {
     await fillTemplateFile(manifestPath, substitutions);
     if (preset) {
       const { doc, file } = await loadManifestDoc(projectDir);
       doc.set("preset", preset);
       doc.set("targets", doc.createNode(targets ?? []));
-      if (options.customPage) {
-        const page = {
-          width: options.customPage.width,
-          height: options.customPage.height
-        };
-        if (options.customPage.tolerance !== undefined) {
-          page.tolerance = options.customPage.tolerance;
-        }
-        doc.set("page", doc.createNode(page));
-      }
+      if (options.customPage)
+        writePageBounds(doc, options.customPage);
       await writeManifestDoc(file, doc);
     }
     const firstSource = await firstSourceFile(manifestPath);
     if (firstSource)
-      openFile = path19.join(projectDir, firstSource);
+      openFile = path20.join(projectDir, firstSource);
     await fillTemplateFile(openFile, { "{{TITLE}}": name }).catch(() => {});
   } catch (e) {
     throw new CreateProjectErrorImpl("scaffold-io", `Could not finalize the book files: ${e instanceof Error ? e.message : String(e)}`);
@@ -11899,7 +12388,7 @@ async function scaffoldProject(options) {
       versionHistory = "none";
       const { findEnclosingRepoDir } = await import("./project-source-ekcyp63q.js");
       const enclosingRepoDir = await findEnclosingRepoDir(projectDir);
-      versionHistoryError = enclosingRepoDir ? `This book was added to ${path19.basename(enclosingRepoDir)}'s shared version history; save a snapshot to record it.` : e instanceof Error ? e.message : String(e);
+      versionHistoryError = enclosingRepoDir ? `This book was added to ${path20.basename(enclosingRepoDir)}'s shared version history; save a snapshot to record it.` : e instanceof Error ? e.message : String(e);
     }
   }
   const result = {
@@ -11919,7 +12408,7 @@ function prettifyFolderName(base) {
 }
 async function adoptFolder(options) {
   const dir = options.dir;
-  if (typeof dir !== "string" || !path19.isAbsolute(dir)) {
+  if (typeof dir !== "string" || !path20.isAbsolute(dir)) {
     throw new CreateProjectErrorImpl("scaffold-io", "An absolute folder path is required.");
   }
   let st;
@@ -11931,11 +12420,11 @@ async function adoptFolder(options) {
   if (!st.isDirectory()) {
     throw new CreateProjectErrorImpl("scaffold-io", `Not a folder: ${dir}`);
   }
-  if (MANIFEST_FILENAMES.some((name) => existsSync13(path19.join(dir, name)))) {
+  if (MANIFEST_FILENAMES.some((name) => existsSync14(path20.join(dir, name)))) {
     throw new CreateProjectErrorImpl("target-exists", "This folder is already a Gutterpress book.");
   }
   const template = options.template ?? "book";
-  const title = (options.title ?? "").trim() || prettifyFolderName(path19.basename(dir));
+  const title = (options.title ?? "").trim() || prettifyFolderName(path20.basename(dir));
   const author = (options.author ?? "").trim() || DEFAULT_AUTHOR;
   let mdFiles;
   try {
@@ -11943,14 +12432,14 @@ async function adoptFolder(options) {
     mdFiles = entries.filter((e) => e.isFile() && /\.(md|markdown)$/i.test(e.name)).map((e) => e.name).sort((a, b) => a.localeCompare(b));
     if (mdFiles.length === 0) {
       const tplChapter = await getAssetPath(`templates/${template}/chapter-01.md`);
-      await copyFile(tplChapter, path19.join(dir, "chapter-01.md"));
-      await fillTemplateFile(path19.join(dir, "chapter-01.md"), { "{{TITLE}}": title }).catch(() => {});
+      await copyFile(tplChapter, path20.join(dir, "chapter-01.md"));
+      await fillTemplateFile(path20.join(dir, "chapter-01.md"), { "{{TITLE}}": title }).catch(() => {});
       mdFiles = ["chapter-01.md"];
     }
-    await mkdir8(path19.join(dir, "styles"), { recursive: true });
-    const bookCssPath = path19.join(dir, "styles", "book.css");
-    if (!existsSync13(bookCssPath)) {
-      await writeFile8(bookCssPath, starterOverridesCss(), "utf8");
+    await mkdir9(path20.join(dir, "styles"), { recursive: true });
+    const bookCssPath = path20.join(dir, "styles", "book.css");
+    if (!existsSync14(bookCssPath)) {
+      await writeFile9(bookCssPath, starterOverridesCss(), "utf8");
     }
     const filesYaml = mdFiles.map((f) => `    - "${escapeYamlScalar(f)}"`).join(`
 `);
@@ -11966,8 +12455,8 @@ ${filesYaml}
 styles:
   - styles/book.css
 `;
-    await writeFile8(path19.join(dir, MANIFEST_FILENAMES[0]), manifest, "utf8");
-    await mkdir8(path19.join(dir, "assets"), { recursive: true });
+    await writeFile9(path20.join(dir, MANIFEST_FILENAMES[0]), manifest, "utf8");
+    await mkdir9(path20.join(dir, "assets"), { recursive: true });
     await ensureProjectGitignore(dir);
   } catch (e) {
     if (e instanceof CreateProjectErrorImpl)
@@ -11994,8 +12483,8 @@ styles:
   }
   const result = {
     projectDir: dir,
-    manifestPath: path19.join(dir, MANIFEST_FILENAMES[0]),
-    openFile: path19.join(dir, mdFiles[0]),
+    manifestPath: path20.join(dir, MANIFEST_FILENAMES[0]),
+    openFile: path20.join(dir, mdFiles[0]),
     versionHistory
   };
   if (versionHistoryError !== undefined)
@@ -12005,7 +12494,7 @@ styles:
 async function firstSourceFile(manifestPath) {
   let text;
   try {
-    text = await readFile28(manifestPath, "utf8");
+    text = await readFile29(manifestPath, "utf8");
   } catch {
     return;
   }
@@ -12017,16 +12506,16 @@ async function firstSourceFile(manifestPath) {
   return m ? m[1].trim() : undefined;
 }
 async function fillTemplateFile(filePath, substitutions) {
-  let text = await readFile28(filePath, "utf8");
+  let text = await readFile29(filePath, "utf8");
   for (const [token, value] of Object.entries(substitutions)) {
     text = text.split(token).join(value);
   }
-  await writeFile8(filePath, text, "utf8");
+  await writeFile9(filePath, text, "utf8");
 }
 // src/lib/extension-scaffold.ts
-import { access as access2, mkdir as mkdir9, readFile as readFile29, writeFile as writeFile9 } from "node:fs/promises";
+import { access as access2, mkdir as mkdir10, readFile as readFile30, writeFile as writeFile10 } from "node:fs/promises";
 import { constants as FS2 } from "node:fs";
-import path20 from "node:path";
+import path21 from "node:path";
 var EXTENSION_KINDS = ["plugin", "theme"];
 var RESERVED_PREFIX = "gp-";
 var TEMPLATE_FILES = {
@@ -12104,7 +12593,7 @@ async function scaffoldExtension(options) {
   }
   const prefix = resolveExtensionPrefix(slug, options.prefix);
   const parentDir = options.parentDir;
-  if (!parentDir || !path20.isAbsolute(parentDir)) {
+  if (!parentDir || !path21.isAbsolute(parentDir)) {
     throw new ExtensionScaffoldError("parent-not-writable", "The save location must be an absolute path.");
   }
   try {
@@ -12112,7 +12601,7 @@ async function scaffoldExtension(options) {
   } catch {
     throw new ExtensionScaffoldError("parent-not-writable", `The chosen save location can't be written to: ${parentDir}`);
   }
-  const extensionDir = path20.join(parentDir, slug);
+  const extensionDir = path21.join(parentDir, slug);
   let targetExists = true;
   try {
     await access2(extensionDir, FS2.F_OK);
@@ -12136,14 +12625,14 @@ async function scaffoldExtension(options) {
   const entries = TEMPLATE_FILES[kind];
   const written = [];
   try {
-    await mkdir9(extensionDir, { recursive: true });
+    await mkdir10(extensionDir, { recursive: true });
     for (const [assetName, relDest] of entries) {
       const src = await getAssetPath(`extension-templates/${kind}/${assetName}`);
-      const dest = path20.join(extensionDir, relDest);
-      await mkdir9(path20.dirname(dest), { recursive: true });
-      const text = await readFile29(src, "utf8");
+      const dest = path21.join(extensionDir, relDest);
+      await mkdir10(path21.dirname(dest), { recursive: true });
+      const text = await readFile30(src, "utf8");
       const table = relDest.endsWith(".json") ? jsonSafe : plain;
-      await writeFile9(dest, substitute(text, table), "utf8");
+      await writeFile10(dest, substitute(text, table), "utf8");
       written.push(relDest);
     }
   } catch (e) {
@@ -12151,11 +12640,11 @@ async function scaffoldExtension(options) {
   }
   return {
     extensionDir,
-    manifestPath: path20.join(extensionDir, "package.json"),
+    manifestPath: path21.join(extensionDir, "package.json"),
     kind,
     slug,
     prefix,
-    openFile: path20.join(extensionDir, OPEN_FILE[kind]),
+    openFile: path21.join(extensionDir, OPEN_FILE[kind]),
     files: written
   };
 }
@@ -12167,10 +12656,10 @@ function substitute(text, table) {
   return out;
 }
 // src/lib/project-templates.ts
-import { cp as cp3, mkdir as mkdir10, readFile as readFile30, readdir as readdir7, stat as stat7, writeFile as writeFile10 } from "node:fs/promises";
-import { constants as FS3, existsSync as existsSync14 } from "node:fs";
+import { cp as cp3, mkdir as mkdir11, readFile as readFile31, readdir as readdir7, stat as stat7, writeFile as writeFile11 } from "node:fs/promises";
+import { constants as FS3, existsSync as existsSync15 } from "node:fs";
 import { access as access3 } from "node:fs/promises";
-import path21 from "node:path";
+import path22 from "node:path";
 import { isMap as isMap2, isScalar as isScalar2, isSeq as isSeq3, parseDocument as parseDocument2 } from "yaml";
 var BUILT_IN_TEMPLATE_IDS = [
   "book",
@@ -12179,7 +12668,7 @@ var BUILT_IN_TEMPLATE_IDS = [
 ];
 async function readTemplateChoices(manifestPath) {
   try {
-    const text = await readFile30(manifestPath, "utf8");
+    const text = await readFile31(manifestPath, "utf8");
     const doc = parseDocument2(text);
     const out = {};
     const preset = doc.get("preset");
@@ -12255,7 +12744,7 @@ function rewriteEntry(node, newPath) {
     node.value = newPath;
 }
 function commonAncestorDir(absFiles) {
-  const dirSegs = absFiles.map((f) => path21.resolve(f).split(path21.sep).slice(0, -1));
+  const dirSegs = absFiles.map((f) => path22.resolve(f).split(path22.sep).slice(0, -1));
   if (dirSegs.length === 0)
     return "";
   let common = dirSegs[0];
@@ -12265,22 +12754,22 @@ function commonAncestorDir(absFiles) {
       i++;
     common = common.slice(0, i);
   }
-  return common.join(path21.sep) || path21.sep;
+  return common.join(path22.sep) || path22.sep;
 }
 function pickVendorDir(templateDir, base) {
-  const preferred = path21.basename(base) || VENDOR_DIR;
-  if (!existsSync14(path21.join(templateDir, preferred)))
+  const preferred = path22.basename(base) || VENDOR_DIR;
+  if (!existsSync15(path22.join(templateDir, preferred)))
     return preferred;
   for (let n = 1;; n++) {
     const candidate = `${preferred}-${n}`;
-    if (!existsSync14(path21.join(templateDir, candidate)))
+    if (!existsSync15(path22.join(templateDir, candidate)))
       return candidate;
   }
 }
 var TEMPLATE_META_FILE = ".gutterpress-template.json";
 async function reconcileSharedRefs(templateDir, sourceProjectDir, mode) {
   const { doc, file } = await loadManifestDoc(templateDir);
-  const escapes = (p) => escapesProjectRoot(sourceProjectDir, path21.resolve(sourceProjectDir, p));
+  const escapes = (p) => escapesProjectRoot(sourceProjectDir, path22.resolve(sourceProjectDir, p));
   const stylesSeq = doc.get("styles", true);
   const extensionsSeq = doc.get("extensions", true);
   const escapingStyles = collectEscaping(isSeq3(stylesSeq) ? stylesSeq.items : [], scalarString, escapes);
@@ -12296,16 +12785,16 @@ async function reconcileSharedRefs(templateDir, sourceProjectDir, mode) {
     return { vendoredRefs: [], excludedRefs };
   }
   const styleClosure = await collectStyleDependencies(sourceProjectDir, escapingStyles.map((s) => s.value));
-  const extensionFiles = escapingExtensions.map((p) => path21.resolve(sourceProjectDir, p.value));
+  const extensionFiles = escapingExtensions.map((p) => path22.resolve(sourceProjectDir, p.value));
   const externalFiles = [...new Set([...styleClosure, ...extensionFiles])].filter((f) => escapesProjectRoot(sourceProjectDir, f));
   const base = commonAncestorDir(externalFiles);
   const vendorDir = pickVendorDir(templateDir, base);
-  await Promise.all(externalFiles.filter((abs) => existsSync14(abs)).map(async (abs) => {
-    const dest = path21.join(templateDir, vendorDir, path21.relative(base, abs));
-    await mkdir10(path21.dirname(dest), { recursive: true });
+  await Promise.all(externalFiles.filter((abs) => existsSync15(abs)).map(async (abs) => {
+    const dest = path22.join(templateDir, vendorDir, path22.relative(base, abs));
+    await mkdir11(path22.dirname(dest), { recursive: true });
     await cp3(abs, dest, { recursive: true });
   }));
-  const bookLocal = (value) => toPosixPath(path21.join(vendorDir, path21.relative(base, path21.resolve(sourceProjectDir, value))));
+  const bookLocal = (value) => toPosixPath(path22.join(vendorDir, path22.relative(base, path22.resolve(sourceProjectDir, value))));
   const vendoredRefs = [];
   for (const { node, value } of escapingStyles) {
     const rewritten = bookLocal(value);
@@ -12325,7 +12814,7 @@ async function saveProjectAsTemplate(options) {
   const id = slugify(name);
   if (!id)
     throw new Error(`Could not derive a template id from "${name}".`);
-  const dir = path21.join(templatesRoot, id);
+  const dir = path22.join(templatesRoot, id);
   let exists = true;
   try {
     await access3(dir, FS3.F_OK);
@@ -12335,20 +12824,20 @@ async function saveProjectAsTemplate(options) {
   if (exists) {
     throw new Error(`A template named "${name}" already exists. Choose a different name.`);
   }
-  await mkdir10(dir, { recursive: true });
+  await mkdir11(dir, { recursive: true });
   const entries = await readdir7(projectDir, { withFileTypes: true });
   for (const entry of entries) {
     if (SKIP_ENTRIES.has(entry.name))
       continue;
     if (entry.name === TEMPLATE_META_FILE)
       continue;
-    await cp3(path21.join(projectDir, entry.name), path21.join(dir, entry.name), { recursive: true });
+    await cp3(path22.join(projectDir, entry.name), path22.join(dir, entry.name), { recursive: true });
   }
   const manifestName = MANIFEST_FILENAMES.find((name2) => entries.some((entry) => entry.name === name2));
   const shared = manifestName ? await reconcileSharedRefs(dir, projectDir, options.sharedRefs ?? "vendor") : { vendoredRefs: [], excludedRefs: [] };
   if (manifestName)
-    await retokeniseManifest(path21.join(dir, manifestName));
-  await writeFile10(path21.join(dir, TEMPLATE_META_FILE), JSON.stringify({ label: name }, null, 2), "utf8");
+    await retokeniseManifest(path22.join(dir, manifestName));
+  await writeFile11(path22.join(dir, TEMPLATE_META_FILE), JSON.stringify({ label: name }, null, 2), "utf8");
   return {
     id,
     label: name,
@@ -12361,12 +12850,12 @@ async function saveProjectAsTemplate(options) {
 async function retokeniseManifest(manifestPath) {
   let text;
   try {
-    text = await readFile30(manifestPath, "utf8");
+    text = await readFile31(manifestPath, "utf8");
   } catch {
     return;
   }
   text = text.replace(/^title:\s*.*$/m, 'title: "{{TITLE}}"').replace(/^(authors:[^\n]*\n[ \t]*-[ \t]*).*$/m, '$1"{{AUTHOR}}"');
-  await writeFile10(manifestPath, text, "utf8");
+  await writeFile11(manifestPath, text, "utf8");
 }
 async function listCustomTemplates(templatesRoot) {
   let entries;
@@ -12379,10 +12868,10 @@ async function listCustomTemplates(templatesRoot) {
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const dir = path21.join(templatesRoot, entry.name);
+    const dir = path22.join(templatesRoot, entry.name);
     let label = prettify(entry.name);
     try {
-      const meta = JSON.parse(await readFile30(path21.join(dir, TEMPLATE_META_FILE), "utf8"));
+      const meta = JSON.parse(await readFile31(path22.join(dir, TEMPLATE_META_FILE), "utf8"));
       if (typeof meta.label === "string" && meta.label)
         label = meta.label;
     } catch {}
@@ -12392,7 +12881,7 @@ async function listCustomTemplates(templatesRoot) {
       description: "Your saved template.",
       kind: "custom",
       dir,
-      ...await readTemplateChoices(path21.join(dir, MANIFEST_FILENAMES[0]))
+      ...await readTemplateChoices(path22.join(dir, MANIFEST_FILENAMES[0]))
     });
   }
   out.sort((a, b) => a.label.localeCompare(b.label));
@@ -12404,12 +12893,12 @@ async function importTemplateFromFolder(options) {
   if (!srcStat.isDirectory()) {
     throw new Error("The chosen path is not a folder.");
   }
-  const name = options.name?.trim() || prettify(path21.basename(sourceDir));
+  const name = options.name?.trim() || prettify(path22.basename(sourceDir));
   return saveProjectAsTemplate({ projectDir: sourceDir, name, templatesRoot });
 }
 // src/lib/snippets.ts
-import { readdir as readdir8, readFile as readFile31, writeFile as writeFile11, mkdir as mkdir11, rm as rm4 } from "node:fs/promises";
-import path22 from "node:path";
+import { readdir as readdir8, readFile as readFile32, writeFile as writeFile12, mkdir as mkdir12, rm as rm4 } from "node:fs/promises";
+import path23 from "node:path";
 var SNIPPETS_DIR = "snippets";
 var LEVEL_RANK = { project: 0, extension: 1, core: 2 };
 var PLACEHOLDER_RE = /\{\{\s*([a-zA-Z0-9_.-]+)\s*\}\}/g;
@@ -12429,9 +12918,9 @@ function substituteVariables(template, values) {
   return template.replace(PLACEHOLDER_RE, (_full, name) => Object.prototype.hasOwnProperty.call(values, name) ? values[name] : "");
 }
 function resolveSnippetPath(projectDir, fileName) {
-  const dir = path22.resolve(projectDir, SNIPPETS_DIR);
-  const full = path22.resolve(dir, fileName);
-  if (full !== path22.join(dir, path22.basename(fileName)) || path22.dirname(full) !== dir) {
+  const dir = path23.resolve(projectDir, SNIPPETS_DIR);
+  const full = path23.resolve(dir, fileName);
+  if (full !== path23.join(dir, path23.basename(fileName)) || path23.dirname(full) !== dir) {
     throw new Error(`Unsafe snippet filename: ${fileName}`);
   }
   return full;
@@ -12449,7 +12938,7 @@ async function scanSnippetFiles(dir) {
       continue;
     let body = "";
     try {
-      body = await readFile31(path22.join(dir, fileName), "utf8");
+      body = await readFile32(path23.join(dir, fileName), "utf8");
     } catch {
       continue;
     }
@@ -12464,7 +12953,7 @@ async function scanSnippetFiles(dir) {
   return entries;
 }
 async function listSnippets(projectDir) {
-  const files = await scanSnippetFiles(path22.join(projectDir, SNIPPETS_DIR));
+  const files = await scanSnippetFiles(path23.join(projectDir, SNIPPETS_DIR));
   return files.map((file) => ({ ...file, source: { kind: "project" } }));
 }
 async function saveSnippet(projectDir, name, body) {
@@ -12472,9 +12961,9 @@ async function saveSnippet(projectDir, name, body) {
   if (!stem)
     throw new Error(`Could not derive a filename from "${name}".`);
   const fileName = `${stem}.md`;
-  const dir = path22.join(projectDir, SNIPPETS_DIR);
-  await mkdir11(dir, { recursive: true });
-  await writeFile11(resolveSnippetPath(projectDir, fileName), body, "utf8");
+  const dir = path23.join(projectDir, SNIPPETS_DIR);
+  await mkdir12(dir, { recursive: true });
+  await writeFile12(resolveSnippetPath(projectDir, fileName), body, "utf8");
   return { name, fileName, variables: extractVariables(body), body, source: { kind: "project" } };
 }
 async function deleteSnippet(projectDir, fileName) {
@@ -12504,7 +12993,7 @@ async function collectLibrary(projectDir) {
       continue;
     const source = { kind: "extension", ref: entry.use, name: entry.label };
     const folder = await declaredSnippetsFolder(entry);
-    const snippets2 = folder ? (await scanSnippetFiles(path22.join(entry.dir, folder))).map((file) => ({ ...file, source })) : [];
+    const snippets2 = folder ? (await scanSnippetFiles(path23.join(entry.dir, folder))).map((file) => ({ ...file, source })) : [];
     loaded.push({ entry, source, folder, snippets: snippets2, markers: await declaredMarkers(entry, projectDir) });
   }
   let registry;
@@ -12518,24 +13007,29 @@ async function collectLibrary(projectDir) {
       const resolved = registry.get(name);
       if (!resolved || resolved.deprecated !== undefined)
         continue;
-      components.push({ name, source, variants: Object.keys(resolved.variants ?? {}) });
+      components.push({
+        name,
+        source,
+        variants: Object.keys(resolved.variants ?? {}),
+        ...resolved.selfClosing ? { selfClosing: true } : {}
+      });
       if (!entry.dir)
         continue;
       const own = typeof decl.snippet === "string" && decl.snippet.trim() ? decl.snippet.trim() : null;
-      const rel = own ?? path22.join(folder ?? SNIPPETS_DIR, `${name}.md`);
+      const rel = own ?? path23.join(folder ?? SNIPPETS_DIR, `${name}.md`);
       if (pathEscapesFolder(rel))
         continue;
-      const listed = folder && path22.dirname(path22.join(entry.dir, rel)) === path22.join(entry.dir, folder) ? snippets2.find((s) => s.fileName === path22.basename(rel)) : undefined;
+      const listed = folder && path23.dirname(path23.join(entry.dir, rel)) === path23.join(entry.dir, folder) ? snippets2.find((s) => s.fileName === path23.basename(rel)) : undefined;
       if (listed) {
         listed.component = name;
         continue;
       }
-      const body = await readFile31(path22.join(entry.dir, rel), "utf8").catch(() => null);
+      const body = await readFile32(path23.join(entry.dir, rel), "utf8").catch(() => null);
       if (body === null)
         continue;
       snippets2.push({
-        name: prettify(path22.basename(rel).replace(/\.md$/i, "")),
-        fileName: rel.split(path22.sep).join("/"),
+        name: prettify(path23.basename(rel).replace(/\.md$/i, "")),
+        fileName: rel.split(path23.sep).join("/"),
         variables: extractVariables(body),
         body,
         source,
@@ -12579,10 +13073,10 @@ async function listMarkerComponents(projectDir) {
   return (await collectLibrary(projectDir)).components;
 }
 // src/lib/extension-import.ts
-import { existsSync as existsSync15 } from "node:fs";
-import { cp as cp4, mkdir as mkdir12, mkdtemp as mkdtemp2, readFile as readFile32, rm as rm5, writeFile as writeFile12 } from "node:fs/promises";
+import { existsSync as existsSync16 } from "node:fs";
+import { cp as cp4, mkdir as mkdir13, mkdtemp as mkdtemp2, readFile as readFile33, rm as rm5, writeFile as writeFile13 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import path23 from "node:path";
+import path24 from "node:path";
 import { unzipSync } from "fflate";
 var MAX_THEME_ARCHIVE_BYTES = 25 * 1024 * 1024;
 var MAX_THEME_UNZIPPED_BYTES = 25 * 1024 * 1024;
@@ -12649,11 +13143,11 @@ function mb2(n) {
   return `${Math.round(n / (1024 * 1024))}MB`;
 }
 async function finalizeExtensionImport(projectDir, sourceDir, relPaths, fallbackName) {
-  const cssPath = path23.join(sourceDir, "theme.css");
-  if (!existsSync15(cssPath)) {
+  const cssPath = path24.join(sourceDir, "theme.css");
+  if (!existsSync16(cssPath)) {
     throw new Error("A theme must contain a theme.css file.");
   }
-  const css = await readFile32(cssPath, "utf8");
+  const css = await readFile33(cssPath, "utf8");
   const { reject, warnings: printFindings } = classifyThemeCssFindings(checkCss(css, "theme.css"));
   if (reject) {
     throw new Error(`theme.css could not be parsed — ${reject.message}`);
@@ -12662,7 +13156,7 @@ async function finalizeExtensionImport(projectDir, sourceDir, relPaths, fallback
   for (const w of printFindings) {
     warnings.push({ code: "print-safety", message: w.message });
   }
-  const metaExists = existsSync15(path23.join(sourceDir, EXTENSION_MANIFEST_FILENAME));
+  const metaExists = existsSync16(path24.join(sourceDir, EXTENSION_MANIFEST_FILENAME));
   const meta = metaExists ? await readExtensionMeta(sourceDir) : {};
   if (!metaExists) {
     warnings.push({
@@ -12681,7 +13175,7 @@ async function finalizeExtensionImport(projectDir, sourceDir, relPaths, fallback
   for (let i = 0;i < extraSheets.length; i++) {
     const rel = extraSheets[i];
     const sheetPath = extraSheetPaths[i];
-    const sheetCss = await readFile32(sheetPath, "utf8");
+    const sheetCss = await readFile33(sheetPath, "utf8");
     const { reject: sheetReject, warnings: sheetFindings } = classifyThemeCssFindings(checkCss(sheetCss, rel));
     if (sheetReject) {
       throw new Error(`${rel} could not be parsed — ${sheetReject.message}`);
@@ -12700,8 +13194,8 @@ async function finalizeExtensionImport(projectDir, sourceDir, relPaths, fallback
     });
   }
   const id = await uniqueExtensionId(projectDir, meta.name?.trim() || fallbackName);
-  const dest = path23.join(projectDir, EXTENSIONS_DIR, id);
-  await mkdir12(path23.dirname(dest), { recursive: true });
+  const dest = path24.join(projectDir, EXTENSIONS_DIR, id);
+  await mkdir13(path24.dirname(dest), { recursive: true });
   await cp4(sourceDir, dest, { recursive: true });
   await completeLandedManifest(dest, id, meta, metaExists);
   const entry = await addExtension(projectDir, `./${EXTENSIONS_DIR}/${id}`);
@@ -12710,18 +13204,18 @@ async function finalizeExtensionImport(projectDir, sourceDir, relPaths, fallback
 async function completeLandedManifest(dest, id, meta, metaExists) {
   if (metaExists && extensionStyleList(meta).length > 0)
     return;
-  const file = path23.join(dest, EXTENSION_MANIFEST_FILENAME);
+  const file = path24.join(dest, EXTENSION_MANIFEST_FILENAME);
   let pkg = {};
   if (metaExists) {
     try {
-      const parsed = JSON.parse(await readFile32(file, "utf8"));
+      const parsed = JSON.parse(await readFile33(file, "utf8"));
       if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
         pkg = parsed;
       }
     } catch {}
   }
   const gutterpress = pkg.gutterpress && typeof pkg.gutterpress === "object" && !Array.isArray(pkg.gutterpress) ? pkg.gutterpress : {};
-  await writeFile12(file, JSON.stringify({
+  await writeFile13(file, JSON.stringify({
     ...pkg,
     name: typeof pkg.name === "string" && pkg.name.trim() ? pkg.name : id,
     gutterpress: { ...gutterpress, styles: ["theme.css"] }
@@ -12768,7 +13262,7 @@ async function importExtensionFromZip(projectDir, archive) {
     throw new Error("No theme.css found in the package. A theme needs a theme.css at the package root or inside a single folder.");
   }
   const prefix = root === "" ? "" : `${root}/`;
-  const tmp = await mkdtemp2(path23.join(tmpdir2(), "gutterpress-theme-"));
+  const tmp = await mkdtemp2(path24.join(tmpdir2(), "gutterpress-theme-"));
   try {
     const relPaths = [];
     for (const [name, data] of Object.entries(files)) {
@@ -12780,13 +13274,13 @@ async function importExtensionFromZip(projectDir, archive) {
       const rel = prefix ? norm.slice(prefix.length) : norm;
       if (!rel || rel.split("/").some((seg) => seg === ".."))
         continue;
-      const dest = path23.join(tmp, rel);
-      if (dest !== tmp && !dest.startsWith(tmp + path23.sep)) {
+      const dest = path24.join(tmp, rel);
+      if (dest !== tmp && !dest.startsWith(tmp + path24.sep)) {
         throw new Error(`The package contains an unsafe path and was rejected: ${name}`);
       }
       relPaths.push(rel);
-      await mkdir12(path23.dirname(dest), { recursive: true });
-      await writeFile12(dest, data);
+      await mkdir13(path24.dirname(dest), { recursive: true });
+      await writeFile13(dest, data);
     }
     return await finalizeExtensionImport(projectDir, tmp, relPaths, root || "imported-look");
   } finally {
@@ -12799,10 +13293,10 @@ async function importExtensionFromCssText(projectDir, css, name) {
     throw new Error(`The CSS could not be parsed — ${reject.message}`);
   }
   const displayName = name.trim() || "Imported theme";
-  const tmp = await mkdtemp2(path23.join(tmpdir2(), "gutterpress-theme-"));
+  const tmp = await mkdtemp2(path24.join(tmpdir2(), "gutterpress-theme-"));
   try {
-    await writeFile12(path23.join(tmp, "theme.css"), css, "utf8");
-    await writeFile12(path23.join(tmp, EXTENSION_MANIFEST_FILENAME), JSON.stringify({ name: slugify(displayName, "look"), gutterpress: { styles: ["theme.css"] } }, null, 2), "utf8");
+    await writeFile13(path24.join(tmp, "theme.css"), css, "utf8");
+    await writeFile13(path24.join(tmp, EXTENSION_MANIFEST_FILENAME), JSON.stringify({ name: slugify(displayName, "look"), gutterpress: { styles: ["theme.css"] } }, null, 2), "utf8");
     const result = await finalizeExtensionImport(projectDir, tmp, ["theme.css", EXTENSION_MANIFEST_FILENAME], displayName);
     result.warnings.unshift({
       code: "no-theme-json",
@@ -12814,14 +13308,14 @@ async function importExtensionFromCssText(projectDir, css, name) {
   }
 }
 async function importExtensionFromFile(projectDir, filePath) {
-  const ext = path23.extname(filePath).toLowerCase();
+  const ext = path24.extname(filePath).toLowerCase();
   if (ext === ".zip") {
-    const buf = await readFile32(filePath);
+    const buf = await readFile33(filePath);
     return importExtensionFromZip(projectDir, new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength));
   }
   if (ext === ".css") {
-    const css = await readFile32(filePath, "utf8");
-    return importExtensionFromCssText(projectDir, css, prettify(path23.basename(filePath, ".css")));
+    const css = await readFile33(filePath, "utf8");
+    return importExtensionFromCssText(projectDir, css, prettify(path24.basename(filePath, ".css")));
   }
   throw new Error("Choose a .zip extension package or a .css stylesheet.");
 }
@@ -12869,7 +13363,7 @@ async function importExtensionFromUrl(projectDir, url) {
   let baseName;
   if (looksLikeCssUrl(trimmed)) {
     css = await fetchText(trimmed);
-    baseName = path23.basename(new URL(trimmed, "https://x/").pathname, ".css") || "look";
+    baseName = path24.basename(new URL(trimmed, "https://x/").pathname, ".css") || "look";
   } else {
     const base = trimmed.endsWith("/") ? trimmed : `${trimmed}/`;
     css = await fetchText(`${base}theme.css`);
@@ -12878,14 +13372,14 @@ async function importExtensionFromUrl(projectDir, url) {
       if (parsed && typeof parsed === "object")
         meta = parsed;
     } catch {}
-    baseName = typeof meta.name === "string" && meta.name || path23.basename(new URL(base, "https://x/").pathname.replace(/\/$/, "")) || "look";
+    baseName = typeof meta.name === "string" && meta.name || path24.basename(new URL(base, "https://x/").pathname.replace(/\/$/, "")) || "look";
   }
   if (!css.trim())
     throw new Error(`Fetched CSS from ${trimmed} was empty.`);
   assertLooksLikeCss(css, trimmed);
-  const tmp = await mkdtemp2(path23.join(tmpdir2(), "gutterpress-ext-"));
+  const tmp = await mkdtemp2(path24.join(tmpdir2(), "gutterpress-ext-"));
   try {
-    await writeFile12(path23.join(tmp, "theme.css"), css, "utf8");
+    await writeFile13(path24.join(tmp, "theme.css"), css, "utf8");
     const gp = meta.gutterpress && typeof meta.gutterpress === "object" && !Array.isArray(meta.gutterpress) ? meta.gutterpress : {};
     const finalMeta = {
       name: typeof meta.name === "string" && meta.name || slugify(baseName, "look"),
@@ -12897,7 +13391,7 @@ async function importExtensionFromUrl(projectDir, url) {
         preview: typeof gp.preview === "string" ? gp.preview : null
       }
     };
-    await writeFile12(path23.join(tmp, EXTENSION_MANIFEST_FILENAME), JSON.stringify(finalMeta, null, 2), "utf8");
+    await writeFile13(path24.join(tmp, EXTENSION_MANIFEST_FILENAME), JSON.stringify(finalMeta, null, 2), "utf8");
     return await finalizeExtensionImport(projectDir, tmp, ["theme.css", EXTENSION_MANIFEST_FILENAME], baseName);
   } finally {
     await rm5(tmp, { recursive: true, force: true });
@@ -13018,7 +13512,7 @@ async function searchNpmExtensions(query, options = {}) {
   return { matches, total: pages.reduce((sum, page) => sum + page.total, 0) };
 }
 // src/lib/manifest-config.ts
-import { isSeq as isSeq4, isMap as isMap3, YAMLSeq as YAMLSeq3, Scalar as Scalar2 } from "yaml";
+import { isSeq as isSeq4, isMap as isMap3, YAMLSeq as YAMLSeq3, Scalar as Scalar3 } from "yaml";
 function hasKey(obj, key) {
   return Object.prototype.hasOwnProperty.call(obj, key);
 }
@@ -13101,7 +13595,7 @@ async function setActiveStyles(projectDir, paths) {
   } else {
     const seq = new YAMLSeq3(doc.schema);
     for (const p of paths)
-      seq.add(new Scalar2(p));
+      seq.add(new Scalar3(p));
     doc.set("styles", seq);
   }
   await writeManifestDoc(file, doc);
@@ -13643,7 +14137,8 @@ async function listGitHubRepositories(credential, options = {}) {
         fullName: r.full_name,
         private: r.private,
         defaultBranch: r.default_branch,
-        htmlUrl: r.html_url
+        htmlUrl: r.html_url,
+        ...r.size === 0 && !r.archived && r.permissions?.push !== false ? { maybeEmpty: true } : {}
       });
     }
     if (body.length < PER_PAGE)
@@ -13708,10 +14203,12 @@ async function listGitHubBranches(credential, owner, repo, options = {}) {
   }
   return branches;
 }
-// src/lib/remote-auth/clone.ts
-import { mkdir as mkdir13, readdir as readdir9, rm as rm6 } from "node:fs/promises";
-import path24 from "node:path";
-import git3 from "isomorphic-git";
+// src/lib/remote-auth/online-backup.ts
+import git5 from "isomorphic-git";
+
+// src/lib/remote-auth/sync.ts
+import git4 from "isomorphic-git";
+import { randomUUID as randomUUID4 } from "node:crypto";
 
 // src/lib/remote-auth/git-http.ts
 import httpNode from "isomorphic-git/http/node";
@@ -13804,617 +14301,68 @@ function withIdleTimeout(http3, idleMs = GIT_HTTP_IDLE_TIMEOUT_MS, uploadMs = GI
 }
 var defaultGitHttp = withIdleTimeout(httpNode);
 
-// src/lib/remote-auth/transport.ts
+// src/lib/remote-auth/converge-merge.ts
+import { mkdir as mkdir14, unlink as unlink3, writeFile as writeFile14 } from "node:fs/promises";
+import path25 from "node:path";
 import git2 from "isomorphic-git";
-async function repoDirFor(projectDir) {
-  const source = await detectProjectSource(projectDir);
-  if (source.type === "local-git-folder")
-    return gitScopeFor(source);
-  return projectDir;
-}
-function isCredentialTransmissionSafe(url) {
-  try {
-    const u = new URL(url);
-    if (u.protocol === "https:")
-      return true;
-    if (u.protocol === "http:") {
-      const host = u.hostname.toLowerCase();
-      return host === "127.0.0.1" || host === "[::1]" || host === "localhost";
-    }
-    return false;
-  } catch {
-    return false;
-  }
-}
-
-class InsecureTransportError extends Error {
-  code = "InsecureTransport";
-  constructor() {
-    super("This online address isn't secure, so the saved connection wasn't sent — " + "connections are never sent over an insecure address. Switch the address " + "to a secure one (starting with https) to sync with a saved connection.");
-    this.name = "InsecureTransportError";
-  }
+import diff3Merge from "diff3";
+function isMergeConflictError(e) {
+  return e?.code === "MergeConflictError";
 }
-function isInsecureTransportError(e) {
-  return e?.code === "InsecureTransport";
+function isCheckoutConflict(e) {
+  return e?.code === "CheckoutConflictError";
 }
-function onAuthFor(credential) {
-  if (!credential)
-    return {};
-  return {
-    onAuth: (url) => {
-      if (!isCredentialTransmissionSafe(url))
-        throw new InsecureTransportError;
-      return {
-        username: credential.kind === "github-oauth" ? "x-access-token" : credential.username || credential.token,
-        password: credential.token
-      };
-    }
-  };
+var CONVERGE_PREPARE_MESSAGE = "Getting your changes ready to combine with the online version";
+var CONVERGE_RESTORE_MESSAGE = "Kept both versions of the files that can't be combined";
+var CONVERGE_MERGE_MESSAGE = "Combined your changes with the online version";
+var MARKER_UNSAFE_EXT = /\.svg$/i;
+var OUR_LABEL = "your version";
+var THEIR_LABEL = "online version";
+function stringLooksBinary(s) {
+  return s.includes("\x00");
 }
-async function resolveTransport(dir, options) {
-  const origin = await syncRemoteFor(dir);
-  if (!origin?.url)
-    throw new Error(MSG_NO_REMOTE);
-  const { cleanUrl, credential: urlCredential } = extractUrlCredential(origin.url);
-  let parsed;
-  try {
-    parsed = new URL(cleanUrl);
-  } catch {
-    throw new Error(MSG_SSH_REMOTE);
-  }
-  if (!/^https?:$/.test(parsed.protocol))
-    throw new Error(MSG_SSH_REMOTE);
-  const host = credentialHostKey(cleanUrl);
-  let credential = options.credential ?? undefined;
-  if (!credential && options.tokenStore) {
-    try {
-      credential = await options.tokenStore.get(host) ?? undefined;
-    } catch {
-      credential = undefined;
+var LINEBREAKS = /^.*(\r?\n|$)/gm;
+function mergeWithMarkers(baseContent, ourContent, theirContent) {
+  const result = diff3Merge(ourContent.match(LINEBREAKS) ?? [], baseContent.match(LINEBREAKS) ?? [], theirContent.match(LINEBREAKS) ?? []);
+  let merged = "";
+  for (const item of result) {
+    if (item.ok)
+      merged += item.ok.join("");
+    if (item.conflict) {
+      merged += `<<<<<<< ${OUR_LABEL}
+`;
+      merged += item.conflict.a.join("");
+      merged += `=======
+`;
+      merged += item.conflict.b.join("");
+      merged += `>>>>>>> ${THEIR_LABEL}
+`;
     }
   }
-  if (!credential && urlCredential)
-    credential = urlCredential;
-  return {
-    remote: origin.remote,
-    url: cleanUrl,
-    host,
-    ...credential ? { credential } : {}
-  };
-}
-function classifyTransportFailure(e) {
-  if (isInsecureTransportError(e))
-    return "insecure_transport";
-  const err = e;
-  if (err?.code === "HttpError") {
-    const status = err.data?.statusCode;
-    if (status === 401 || status === 403 || status === 404)
-      return "auth_required";
-  }
-  const msg = `${err?.message ?? String(e)} ${err?.data?.prettyDetails ?? ""}`;
-  if (/\b401\b|\b403\b|\b404\b|unauthorized|authentication|not authorized|permission denied|forbidden|access denied|not allowed to push|pre-receive hook declined|hook declined/i.test(msg)) {
-    return "auth_required";
-  }
-  if (/ENOTFOUND|ECONNREFUSED|ECONNRESET|ETIMEDOUT|EAI_AGAIN|network|fetch failed|couldn't reach|socket hang ?up/i.test(msg)) {
-    return "network_unavailable";
-  }
-  return null;
+  return merged;
 }
-function failureOutcome(e, snapshotId) {
-  const kind = classifyTransportFailure(e);
-  const base = snapshotId ? { snapshotId } : {};
-  if (kind === "auth_required")
-    return { status: "auth", message: MSG_AUTH, ...base };
-  if (kind === "network_unavailable")
-    return { status: "offline", message: MSG_OFFLINE, ...base };
-  if (kind === "insecure_transport") {
-    return { status: "error", message: MSG_INSECURE_TRANSPORT, ...base };
-  }
-  return {
-    status: "error",
-    message: "Syncing didn't complete. Your work is saved on this computer — please try again.",
-    ...base
-  };
+async function readBlob(dir, cache2, oid, filepath) {
+  return git2.readBlob({ fs: gitFs, dir, cache: cache2, oid, filepath });
 }
-function setupErrorMessage(e) {
-  if (e instanceof Error && (e.message === MSG_NO_REMOTE || e.message === MSG_SSH_REMOTE || e.message === MSG_NO_BRANCH)) {
-    return e.message;
-  }
-  return null;
-}
-async function snapshotBeforeAction(args) {
-  const { projectDir, dir, cache: cache2 } = args;
-  const hasChanges = await hasPendingChanges(dir, cache2);
-  const staleStaging = gitFs.existsSync(snapshotStagingMarkerPath(dir));
-  if (!hasChanges && !staleStaging)
-    return;
-  const snap = await snapshotWorkingTreeUnlocked({
-    projectDir,
-    repoRoot: dir,
-    message: args.message?.trim() || SYNC_SNAPSHOT_MESSAGE,
-    authorName: args.authorName,
-    authorEmail: args.authorEmail,
-    cache: cache2
-  });
-  return snap.id;
-}
-async function currentBranchOrThrow(dir) {
-  const branch = await git2.currentBranch({ fs: gitFs, dir });
-  if (!branch)
-    throw new Error(MSG_NO_BRANCH);
-  return branch;
-}
-async function resolveRefOrNull(dir, ref) {
-  try {
-    return await git2.resolveRef({ fs: gitFs, dir, ref });
-  } catch {
-    return null;
-  }
-}
-async function guardTrackingRef(dir, ref, cache2, fn) {
-  const before = await resolveRefOrNull(dir, ref);
-  try {
-    return await fn();
-  } catch (e) {
-    try {
-      const after = await resolveRefOrNull(dir, ref);
-      if (after && after !== before) {
-        const landed = await git2.readObject({ fs: gitFs, dir, oid: after, cache: cache2 }).then(() => true, () => false);
-        if (!landed) {
-          if (before)
-            await git2.writeRef({ fs: gitFs, dir, ref, value: before, force: true });
-          else
-            await git2.deleteRef({ fs: gitFs, dir, ref });
-        }
-      }
-    } catch {}
-    throw e;
-  }
-}
-async function fetchRemoteTip(dir, branch, transport, http3, cache2) {
-  try {
-    const trackingRef = `refs/remotes/${transport.remote}/${branch}`;
-    const result = await guardTrackingRef(dir, trackingRef, cache2, () => git2.fetch({
-      fs: gitFs,
-      http: http3,
-      dir,
-      cache: cache2,
-      remote: transport.remote,
-      ref: trackingRef,
-      remoteRef: branch,
-      singleBranch: true,
-      tags: false,
-      ...onAuthFor(transport.credential)
-    }));
-    return result.fetchHead ?? null;
-  } catch (e) {
-    const code = e?.code;
-    if (code === "NoRefspecError")
-      return null;
-    if (code === "NotFoundError" || e?.data?.statusCode === 404) {
-      const err = new Error("The online repository couldn't be accessed with the saved connection. Reconnect and try again.", { cause: e });
-      err.code = "HttpError";
-      err.data = { statusCode: 401 };
-      throw err;
-    }
-    throw e;
-  }
-}
-function short(oid) {
-  return oid ? oid.slice(0, 8) : "none";
-}
-
-// src/lib/remote-auth/clone.ts
-function sanitizeCloneFolderName(name) {
-  return String(name ?? "").replace(/[\\/]/g, "-").replace(/^\.+/, "").trim();
-}
-async function assertCloneTarget(dir) {
-  try {
-    const entries = await readdir9(dir);
-    if (entries.length > 0) {
-      throw new Error("That folder already has files in it. Choose an empty folder for the book.");
-    }
-  } catch (e) {
-    if (e.code === "ENOENT")
-      return;
-    throw e;
-  }
-}
-function friendlyCloneError(e) {
-  if (isInsecureTransportError(e)) {
-    return new Error("That repository address isn't secure, so the saved connection wasn't sent — connections are never sent over an insecure address. Use a secure address (starting with https), or a local loopback address for a server on this computer.", { cause: e });
-  }
-  const msg = e instanceof Error ? e.message : String(e);
-  if (/401|403|auth|credential/i.test(msg)) {
-    return new Error("GitHub didn't accept the connection for this repository. Reconnect GitHub and try again.", { cause: e });
-  }
-  if (/404|not found/i.test(msg)) {
-    return new Error("That repository couldn't be found. It may have been renamed or you may no longer have access.", { cause: e });
-  }
-  if (/ENOTFOUND|ECONNREFUSED|ETIMEDOUT|EAI_AGAIN|network|fetch failed/i.test(msg)) {
-    return new Error(OFFLINE_MESSAGE, { cause: e });
-  }
-  if (e instanceof Error && /already has files/i.test(e.message)) {
-    return e;
-  }
-  return new Error("The book couldn't be downloaded from GitHub. Please try again.", { cause: e });
-}
-async function cloneRepository(options) {
-  const { dir, onProgress, tokenStore } = options;
-  if (!path24.isAbsolute(dir)) {
-    throw new Error("cloneRepository requires an absolute destination path.");
-  }
-  let parsed;
-  try {
-    parsed = new URL(options.url);
-  } catch {
-    throw new Error("That repository address is not a valid web URL.");
-  }
-  if (!/^https?:$/.test(parsed.protocol)) {
-    throw new Error("Only HTTPS repository addresses are supported. SSH addresses (git@…) can't be used here.");
-  }
-  const { cleanUrl, credential: urlCredential } = extractUrlCredential(options.url);
-  const credential = options.credential ?? urlCredential;
-  if (urlCredential && tokenStore && !await tokenStore.get(urlCredential.host)) {
-    await tokenStore.set(urlCredential.host, urlCredential);
-  }
-  return withRepoLock(dir, async () => {
-    await assertCloneTarget(dir);
-    const dirExistedBefore = gitFs.existsSync(dir);
-    await mkdir13(dir, { recursive: true });
-    try {
-      await git3.clone({
-        fs: gitFs,
-        http: options.httpClient ?? defaultGitHttp,
-        dir,
-        url: cleanUrl,
-        singleBranch: true,
-        ...options.branch ? { ref: options.branch } : {},
-        ...options.depth ? { depth: options.depth } : {},
-        ...onAuthFor(credential),
-        ...onProgress ? {
-          onProgress: (p) => onProgress({
-            phase: p.phase,
-            loaded: p.loaded,
-            ...p.total ? { total: p.total } : {}
-          })
-        } : {}
-      });
-    } catch (e) {
-      const friendly = friendlyCloneError(e);
-      if (!dirExistedBefore) {
-        try {
-          await rm6(dir, { recursive: true, force: true });
-        } catch {
-          throw new Error(`${friendly.message} A partial download was left at ${dir} — delete that folder before trying again.`, { cause: e });
-        }
-      }
-      throw friendly;
-    }
-    let branch;
-    try {
-      branch = await git3.currentBranch({ fs: gitFs, dir }) ?? undefined;
-    } catch {
-      branch = undefined;
-    }
-    return { projectDir: dir, ...branch ? { branch } : {} };
-  });
-}
-// src/lib/remote-auth/test-access.ts
-import git4 from "isomorphic-git";
-import httpNode2 from "isomorphic-git/http/node";
-function isSshRemoteUrl(url) {
-  const trimmed = url.trim();
-  if (/^ssh:\/\//i.test(trimmed))
-    return true;
-  return /^[\w.-]+@[\w.][\w.-]*:/.test(trimmed) || /^[\w.-]+@\[/.test(trimmed);
-}
-var FAILURE_MESSAGES = {
-  auth: "The Git server didn't accept the saved connection. Reconnect to this server with a current access token and try again.",
-  "not-found": "The server answered, but no repository was found at that address. It may have been moved, renamed, or you may no longer have access.",
-  unreachable: "Couldn't reach the Git server. Check your internet connection (and VPN, if this is a private server), then try again.",
-  "ssh-unsupported": "This book's online address uses SSH (git@…), which gutterpress can't check or sync with. Everything on this computer still works — sync with your usual Git tool.",
-  "insecure-transport": "This address isn't secure, so the saved connection wasn't sent — connections are never sent over an insecure address. Switch the address to a secure one (starting with https), or to a local loopback address for a server on this computer, to use a saved connection.",
-  tls: "The server's security certificate couldn't be verified. If this is a private server with its own certificate, ask its administrator about trusting it (NODE_EXTRA_CA_CERTS).",
-  unknown: "The connection test failed unexpectedly. The server may not be a Git server, or it may be temporarily unavailable."
-};
-function failure(reason) {
-  return { ok: false, reason, message: FAILURE_MESSAGES[reason] };
-}
-function classifyRemoteAccessError(e) {
-  if (isInsecureTransportError(e))
-    return failure("insecure-transport");
-  const msg = e instanceof Error ? e.message : String(e);
-  if (/401|403|auth|credential|denied|cancel/i.test(msg))
-    return failure("auth");
-  if (/404|not found/i.test(msg))
-    return failure("not-found");
-  if (/certificate|self.signed|unable_to_verify|cert_|tls|ssl/i.test(msg) && !/fetch failed/i.test(msg)) {
-    return failure("tls");
-  }
-  if (/ENOTFOUND|ECONNREFUSED|ECONNRESET|ETIMEDOUT|EAI_AGAIN|EHOSTUNREACH|network|fetch failed|timed out/i.test(msg)) {
-    return failure("unreachable");
-  }
-  return failure("unknown");
-}
-async function testRemoteAccess(options) {
-  if (isSshRemoteUrl(options.url))
-    return failure("ssh-unsupported");
-  let parsed;
-  try {
-    parsed = new URL(options.url);
-  } catch {
-    return failure("unknown");
-  }
-  if (!/^https?:$/.test(parsed.protocol))
-    return failure("ssh-unsupported");
-  const { cleanUrl, credential: urlCredential } = extractUrlCredential(options.url);
-  const credential = options.credential ?? urlCredential;
-  const timeoutMs = options.timeoutMs ?? 15000;
-  let timer;
-  const timeout = new Promise((resolve9) => {
-    timer = setTimeout(() => resolve9(failure("unreachable")), timeoutMs);
-  });
-  const probe = (async () => {
-    try {
-      const refs = await git4.listServerRefs({
-        http: options.httpClient ?? httpNode2,
-        url: cleanUrl,
-        protocolVersion: 1,
-        symrefs: true,
-        ...onAuthFor(credential),
-        ...credential ? { onAuthFailure: () => ({ cancel: true }) } : {}
-      });
-      const head = refs.find((r) => r.ref === "HEAD" && r.target);
-      const defaultBranch = head?.target?.replace(/^refs\/heads\//, "");
-      return {
-        ok: true,
-        refCount: refs.filter((r) => r.ref !== "HEAD").length,
-        ...defaultBranch ? { defaultBranch } : {}
-      };
-    } catch (e) {
-      return classifyRemoteAccessError(e);
-    }
-  })();
-  try {
-    return await Promise.race([probe, timeout]);
-  } finally {
-    clearTimeout(timer);
-  }
-}
-// src/lib/remote-auth/generic-auth.ts
-function normalizeForgeHost(input) {
-  return credentialHostKey(input);
-}
-function knownForgeTokenUrl(host) {
-  const h = normalizeForgeHost(host);
-  if (!h)
-    return null;
-  const name = h.split(":")[0];
-  if (name === GITHUB_HOST || name.endsWith(`.${GITHUB_HOST}`))
-    return null;
-  if (name === "bitbucket.org") {
-    return "https://bitbucket.org/account/settings/app-passwords/";
-  }
-  if (name === "dev.azure.com" || name.endsWith(".visualstudio.com")) {
-    return "https://dev.azure.com/_usersSettings/tokens";
-  }
-  if (name.includes("gitlab")) {
-    return `https://${h}/-/user_settings/personal_access_tokens`;
-  }
-  if (name.includes("gitea") || name.includes("forgejo")) {
-    return `https://${h}/user/settings/applications`;
-  }
-  return null;
-}
-function connectError(result, host) {
-  switch (result.reason) {
-    case "auth":
-      return new Error("The Git server didn't accept that access token. Check the token (and username, if your server needs one) and try again.");
-    case "ssh-unsupported":
-      return new Error("Enter the server's web address (starting with https://), not an SSH address (git@…).");
-    case "unreachable":
-      return new Error(`Couldn't reach ${host}. Check the server address and your connection, then try again.`);
-    case "tls":
-      return new Error(result.message);
-    case "not-found":
-      return new Error("The server answered, but that repository wasn't found. Check the repository address and that the token has access to it.");
-    default:
-      return new Error(`Couldn't verify the connection to ${host}. Check the server address and try again.`);
-  }
-}
-async function connectGenericHost(input, options = {}) {
-  const host = normalizeForgeHost(input.host);
-  if (!host) {
-    throw new Error("Enter your Git server's web address (like https://git.example.com).");
-  }
-  const token = input.token?.trim();
-  if (!token) {
-    throw new Error("Paste an access token from your Git server to connect.");
-  }
-  const username = input.username?.trim() || undefined;
-  const candidate = {
-    host,
-    kind: "token",
-    token,
-    ...username ? { username } : {},
-    label: username ? `${host} — ${username}` : host,
-    createdAt: Date.now()
-  };
-  const probeUrl = input.repoUrl?.trim() || `https://${host}/`;
-  const result = await testRemoteAccess({
-    url: probeUrl,
-    credential: candidate,
-    ...options.httpClient ? { httpClient: options.httpClient } : {},
-    ...options.timeoutMs ? { timeoutMs: options.timeoutMs } : {}
-  });
-  if (!result.ok) {
-    const rootProbe = !input.repoUrl?.trim();
-    const inconclusiveButReachable = rootProbe && (result.reason === "not-found" || result.reason === "unknown");
-    if (!inconclusiveButReachable)
-      throw connectError(result, host);
-  }
-  return candidate;
-}
-// src/lib/remote-auth/diagnose.ts
-function parseRemoteOrigin(url) {
-  const trimmed = url.trim();
-  if (!trimmed)
-    return { protocol: "none" };
-  const scp = /^[\w.-]+@([\w.][\w.-]*):/.exec(trimmed);
-  if (scp)
-    return { protocol: "ssh", host: credentialHostKey(trimmed) };
-  try {
-    const parsed = new URL(trimmed);
-    const host = credentialHostKey(trimmed);
-    if (/^https?:$/.test(parsed.protocol))
-      return { protocol: "https", host };
-    if (/^ssh:$/.test(parsed.protocol) || isSshRemoteUrl(trimmed)) {
-      return { protocol: "ssh", host };
-    }
-    return { protocol: "none" };
-  } catch {
-    return { protocol: "none" };
-  }
-}
-function forgeKindForHost(host) {
-  const name = host.toLowerCase().split(":")[0];
-  if (name === GITHUB_HOST || name.endsWith(`.${GITHUB_HOST}`))
-    return "github";
-  if (name === "bitbucket.org" || name.includes("bitbucket"))
-    return "bitbucket";
-  if (name === "dev.azure.com" || name.endsWith(".visualstudio.com"))
-    return "azure";
-  if (name.includes("gitlab"))
-    return "gitlab";
-  if (name.includes("forgejo"))
-    return "forgejo";
-  if (name.includes("gitea"))
-    return "gitea";
-  return "generic";
-}
-async function diagnoseProjectRemote(projectDir, options = {}) {
-  const classification = options.source ?? await detectProjectSource(projectDir);
-  const rawRemoteUrl = classification.type === "local-git-folder" ? classification.remoteUrl : undefined;
-  const branch = classification.type === "local-git-folder" ? classification.branch : undefined;
-  if (!rawRemoteUrl) {
-    return {
-      classification,
-      remoteProtocol: "none",
-      ...branch ? { branch } : {},
-      credentialPresent: false,
-      provider: null,
-      tokenSettingsUrl: null,
-      canSync: false,
-      guidance: "local-only"
-    };
-  }
-  const { protocol, host } = parseRemoteOrigin(rawRemoteUrl);
-  const urlExtraction = protocol === "https" ? extractUrlCredential(rawRemoteUrl) : null;
-  const remoteUrl = urlExtraction ? urlExtraction.cleanUrl : rawRemoteUrl;
-  const sanitizedClassification = classification.type === "local-git-folder" && classification.remoteUrl ? { ...classification, remoteUrl } : classification;
-  let credentialPresent = false;
-  if (host && options.tokenStore) {
-    try {
-      credentialPresent = await options.tokenStore.get(host) !== null;
-    } catch {
-      credentialPresent = false;
-    }
-  }
-  if (!credentialPresent && urlExtraction?.credential)
-    credentialPresent = true;
-  const provider = host && protocol !== "none" ? forgeKindForHost(host) : null;
-  const canSync = protocol === "https" && credentialPresent;
-  let guidance;
-  if (protocol === "ssh")
-    guidance = "ssh-use-own-tools";
-  else if (protocol !== "https")
-    guidance = "local-only";
-  else if (credentialPresent)
-    guidance = "ready-to-sync";
-  else if (provider === "github")
-    guidance = "connect-github-to-sync";
-  else
-    guidance = "https-connect-server";
-  return {
-    classification: sanitizedClassification,
-    remoteUrl,
-    ...host ? { remoteHost: host } : {},
-    remoteProtocol: protocol === "none" ? "none" : protocol,
-    ...branch ? { branch } : {},
-    credentialPresent,
-    provider,
-    tokenSettingsUrl: host ? knownForgeTokenUrl(host) : null,
-    canSync,
-    guidance
-  };
-}
-// src/lib/remote-auth/sync.ts
-import git6 from "isomorphic-git";
-import { randomUUID as randomUUID4 } from "node:crypto";
-
-// src/lib/remote-auth/converge-merge.ts
-import { mkdir as mkdir14, unlink as unlink3, writeFile as writeFile13 } from "node:fs/promises";
-import path25 from "node:path";
-import git5 from "isomorphic-git";
-import diff3Merge from "diff3";
-function isMergeConflictError(e) {
-  return e?.code === "MergeConflictError";
-}
-function isCheckoutConflict(e) {
-  return e?.code === "CheckoutConflictError";
-}
-var CONVERGE_PREPARE_MESSAGE = "Getting your changes ready to combine with the online version";
-var CONVERGE_RESTORE_MESSAGE = "Kept both versions of the files that can't be combined";
-var CONVERGE_MERGE_MESSAGE = "Combined your changes with the online version";
-var MARKER_UNSAFE_EXT = /\.svg$/i;
-var OUR_LABEL = "your version";
-var THEIR_LABEL = "online version";
-function stringLooksBinary(s) {
-  return s.includes("\x00");
-}
-var LINEBREAKS = /^.*(\r?\n|$)/gm;
-function mergeWithMarkers(baseContent, ourContent, theirContent) {
-  const result = diff3Merge(ourContent.match(LINEBREAKS) ?? [], baseContent.match(LINEBREAKS) ?? [], theirContent.match(LINEBREAKS) ?? []);
-  let merged = "";
-  for (const item of result) {
-    if (item.ok)
-      merged += item.ok.join("");
-    if (item.conflict) {
-      merged += `<<<<<<< ${OUR_LABEL}
-`;
-      merged += item.conflict.a.join("");
-      merged += `=======
-`;
-      merged += item.conflict.b.join("");
-      merged += `>>>>>>> ${THEIR_LABEL}
-`;
-    }
-  }
-  return merged;
-}
-async function readBlob(dir, cache2, oid, filepath) {
-  return git5.readBlob({ fs: gitFs, dir, cache: cache2, oid, filepath });
-}
-async function writeTreeFile(dir, filepath, content) {
-  const abs = path25.join(dir, filepath);
-  await mkdir14(path25.dirname(abs), { recursive: true });
-  await writeFile13(abs, content);
+async function writeTreeFile(dir, filepath, content) {
+  const abs = path25.join(dir, filepath);
+  await mkdir14(path25.dirname(abs), { recursive: true });
+  await writeFile14(abs, content);
 }
 async function bothAddedPaths(dir, cache2, ourTip, theirTip, allowUnrelated) {
-  const bases = await git5.findMergeBase({ fs: gitFs, dir, cache: cache2, oids: [ourTip, theirTip] });
+  const bases = await git2.findMergeBase({ fs: gitFs, dir, cache: cache2, oids: [ourTip, theirTip] });
   const base = bases[0];
   if (!base && !allowUnrelated)
     return null;
   const out = [];
-  await git5.walk({
+  await git2.walk({
     fs: gitFs,
     dir,
     cache: cache2,
     trees: [
-      git5.TREE({ ref: ourTip }),
-      git5.TREE({ ref: theirTip }),
-      ...base ? [git5.TREE({ ref: base })] : []
+      git2.TREE({ ref: ourTip }),
+      git2.TREE({ ref: theirTip }),
+      ...base ? [git2.TREE({ ref: base })] : []
     ],
     map: async (filepath, entries) => {
       if (filepath === ".")
@@ -14445,14 +14393,14 @@ async function convergeMerge(params) {
     authorEmail: params.authorEmail,
     cache: cache2
   });
-  const ourTip = await git5.resolveRef({ fs: gitFs, dir, ref: branch });
+  const ourTip = await git2.resolveRef({ fs: gitFs, dir, ref: branch });
   const combined = new Set;
   const keptBothFiles = [];
   let tipBeforeMerge = ourTip;
   const attempt = async () => {
-    tipBeforeMerge = await git5.resolveRef({ fs: gitFs, dir, ref: branch });
+    tipBeforeMerge = await git2.resolveRef({ fs: gitFs, dir, ref: branch });
     step("merge", { local: tipBeforeMerge, fetched: theirs });
-    return git5.merge({
+    return git2.merge({
       fs: gitFs,
       dir,
       cache: cache2,
@@ -14539,37 +14487,237 @@ async function convergeMerge(params) {
   }
   step("checkout");
   try {
-    await git5.checkout({ fs: gitFs, dir, cache: cache2, ref: branch, force: false });
-  } catch (e) {
-    if (!isCheckoutConflict(e))
-      throw e;
-    logger.warn("checkout", "checkout refused; restoring branch", errorLogData(e));
-    step("rollback", { local: tipBeforeMerge });
-    await git5.writeRef({
+    await git2.checkout({ fs: gitFs, dir, cache: cache2, ref: branch, force: false });
+  } catch (e) {
+    if (!isCheckoutConflict(e))
+      throw e;
+    logger.warn("checkout", "checkout refused; restoring branch", errorLogData(e));
+    step("rollback", { local: tipBeforeMerge });
+    await git2.writeRef({
+      fs: gitFs,
+      dir,
+      ref: await git2.expandRef({ fs: gitFs, dir, ref: branch }),
+      value: tipBeforeMerge,
+      force: true
+    });
+    step("checkout");
+    throw e;
+  }
+  if (postRestore.length > 0) {
+    for (const r of postRestore) {
+      step("restore-conflict-file", { filepath: r.path });
+      await writeTreeFile(dir, r.path, r.bytes);
+    }
+    step("snapshot-restored");
+    if (await hasPendingChanges(dir))
+      await snapshot(CONVERGE_RESTORE_MESSAGE);
+  }
+  step("merged-ref");
+  return {
+    oid: await git2.resolveRef({ fs: gitFs, dir, ref: branch }),
+    combinedFiles: [...combined].sort(),
+    keptBothFiles
+  };
+}
+
+// src/lib/remote-auth/transport.ts
+import git3 from "isomorphic-git";
+async function repoDirFor(projectDir) {
+  const source = await detectProjectSource(projectDir);
+  if (source.type === "local-git-folder")
+    return gitScopeFor(source);
+  return projectDir;
+}
+function isCredentialTransmissionSafe(url) {
+  try {
+    const u = new URL(url);
+    if (u.protocol === "https:")
+      return true;
+    if (u.protocol === "http:") {
+      const host = u.hostname.toLowerCase();
+      return host === "127.0.0.1" || host === "[::1]" || host === "localhost";
+    }
+    return false;
+  } catch {
+    return false;
+  }
+}
+
+class InsecureTransportError extends Error {
+  code = "InsecureTransport";
+  constructor() {
+    super("This online address isn't secure, so the saved connection wasn't sent — " + "connections are never sent over an insecure address. Switch the address " + "to a secure one (starting with https) to sync with a saved connection.");
+    this.name = "InsecureTransportError";
+  }
+}
+function isInsecureTransportError(e) {
+  return e?.code === "InsecureTransport";
+}
+function onAuthFor(credential) {
+  if (!credential)
+    return {};
+  return {
+    onAuth: (url) => {
+      if (!isCredentialTransmissionSafe(url))
+        throw new InsecureTransportError;
+      return {
+        username: credential.kind === "github-oauth" ? "x-access-token" : credential.username || credential.token,
+        password: credential.token
+      };
+    }
+  };
+}
+async function resolveTransport(dir, options) {
+  const origin = await syncRemoteFor(dir);
+  if (!origin?.url)
+    throw new Error(MSG_NO_REMOTE);
+  const { cleanUrl, credential: urlCredential } = extractUrlCredential(origin.url);
+  let parsed;
+  try {
+    parsed = new URL(cleanUrl);
+  } catch {
+    throw new Error(MSG_SSH_REMOTE);
+  }
+  if (!/^https?:$/.test(parsed.protocol))
+    throw new Error(MSG_SSH_REMOTE);
+  const host = credentialHostKey(cleanUrl);
+  let credential = options.credential ?? undefined;
+  if (!credential && options.tokenStore) {
+    try {
+      credential = await options.tokenStore.get(host) ?? undefined;
+    } catch {
+      credential = undefined;
+    }
+  }
+  if (!credential && urlCredential)
+    credential = urlCredential;
+  return {
+    remote: origin.remote,
+    url: cleanUrl,
+    host,
+    ...credential ? { credential } : {}
+  };
+}
+function classifyTransportFailure(e) {
+  if (isInsecureTransportError(e))
+    return "insecure_transport";
+  const err = e;
+  if (err?.code === "HttpError") {
+    const status = err.data?.statusCode;
+    if (status === 401 || status === 403 || status === 404)
+      return "auth_required";
+  }
+  const msg = `${err?.message ?? String(e)} ${err?.data?.prettyDetails ?? ""}`;
+  if (/\b401\b|\b403\b|\b404\b|unauthorized|authentication|not authorized|permission denied|forbidden|access denied|not allowed to push|pre-receive hook declined|hook declined/i.test(msg)) {
+    return "auth_required";
+  }
+  if (/ENOTFOUND|ECONNREFUSED|ECONNRESET|ETIMEDOUT|EAI_AGAIN|network|fetch failed|couldn't reach|socket hang ?up/i.test(msg)) {
+    return "network_unavailable";
+  }
+  return null;
+}
+function failureOutcome(e, snapshotId) {
+  const kind = classifyTransportFailure(e);
+  const base = snapshotId ? { snapshotId } : {};
+  if (kind === "auth_required")
+    return { status: "auth", message: MSG_AUTH, ...base };
+  if (kind === "network_unavailable")
+    return { status: "offline", message: MSG_OFFLINE, ...base };
+  if (kind === "insecure_transport") {
+    return { status: "error", message: MSG_INSECURE_TRANSPORT, ...base };
+  }
+  return {
+    status: "error",
+    message: "Syncing didn't complete. Your work is saved on this computer — please try again.",
+    ...base
+  };
+}
+function setupErrorMessage(e) {
+  if (e instanceof Error && (e.message === MSG_NO_REMOTE || e.message === MSG_SSH_REMOTE || e.message === MSG_NO_BRANCH)) {
+    return e.message;
+  }
+  return null;
+}
+async function snapshotBeforeAction(args) {
+  const { projectDir, dir, cache: cache2 } = args;
+  const hasChanges = await hasPendingChanges(dir, cache2);
+  const staleStaging = gitFs.existsSync(snapshotStagingMarkerPath(dir));
+  if (!hasChanges && !staleStaging)
+    return;
+  const snap = await snapshotWorkingTreeUnlocked({
+    projectDir,
+    repoRoot: dir,
+    message: args.message?.trim() || SYNC_SNAPSHOT_MESSAGE,
+    authorName: args.authorName,
+    authorEmail: args.authorEmail,
+    cache: cache2
+  });
+  return snap.id;
+}
+async function currentBranchOrThrow(dir) {
+  const branch = await git3.currentBranch({ fs: gitFs, dir });
+  if (!branch)
+    throw new Error(MSG_NO_BRANCH);
+  return branch;
+}
+async function resolveRefOrNull(dir, ref) {
+  try {
+    return await git3.resolveRef({ fs: gitFs, dir, ref });
+  } catch {
+    return null;
+  }
+}
+async function guardTrackingRef(dir, ref, cache2, fn) {
+  const before = await resolveRefOrNull(dir, ref);
+  try {
+    return await fn();
+  } catch (e) {
+    try {
+      const after = await resolveRefOrNull(dir, ref);
+      if (after && after !== before) {
+        const landed = await git3.readObject({ fs: gitFs, dir, oid: after, cache: cache2 }).then(() => true, () => false);
+        if (!landed) {
+          if (before)
+            await git3.writeRef({ fs: gitFs, dir, ref, value: before, force: true });
+          else
+            await git3.deleteRef({ fs: gitFs, dir, ref });
+        }
+      }
+    } catch {}
+    throw e;
+  }
+}
+async function fetchRemoteTip(dir, branch, transport, http3, cache2) {
+  try {
+    const trackingRef = `refs/remotes/${transport.remote}/${branch}`;
+    const result = await guardTrackingRef(dir, trackingRef, cache2, () => git3.fetch({
       fs: gitFs,
+      http: http3,
       dir,
-      ref: await git5.expandRef({ fs: gitFs, dir, ref: branch }),
-      value: tipBeforeMerge,
-      force: true
-    });
-    step("checkout");
-    throw e;
-  }
-  if (postRestore.length > 0) {
-    for (const r of postRestore) {
-      step("restore-conflict-file", { filepath: r.path });
-      await writeTreeFile(dir, r.path, r.bytes);
+      cache: cache2,
+      remote: transport.remote,
+      ref: trackingRef,
+      remoteRef: branch,
+      singleBranch: true,
+      tags: false,
+      ...onAuthFor(transport.credential)
+    }));
+    return result.fetchHead ?? null;
+  } catch (e) {
+    const code = e?.code;
+    if (code === "NoRefspecError")
+      return null;
+    if (code === "NotFoundError" || e?.data?.statusCode === 404) {
+      const err = new Error("The online repository couldn't be accessed with the saved connection. Reconnect and try again.", { cause: e });
+      err.code = "HttpError";
+      err.data = { statusCode: 401 };
+      throw err;
     }
-    step("snapshot-restored");
-    if (await hasPendingChanges(dir))
-      await snapshot(CONVERGE_RESTORE_MESSAGE);
+    throw e;
   }
-  step("merged-ref");
-  return {
-    oid: await git5.resolveRef({ fs: gitFs, dir, ref: branch }),
-    combinedFiles: [...combined].sort(),
-    keptBothFiles
-  };
+}
+function short(oid) {
+  return oid ? oid.slice(0, 8) : "none";
 }
 // src/lib/remote-auth/sync.ts
 function isPushRejected(e) {
@@ -14594,10 +14742,10 @@ function isDamagedObjectError(e) {
 }
 async function historyUnreadable(dir) {
   try {
-    const oid = await git6.resolveRef({ fs: gitFs, dir, ref: "HEAD" });
-    await git6.readCommit({ fs: gitFs, dir, oid });
-    await git6.listFiles({ fs: gitFs, dir });
-    await git6.listFiles({ fs: gitFs, dir, ref: "HEAD" });
+    const oid = await git4.resolveRef({ fs: gitFs, dir, ref: "HEAD" });
+    await git4.readCommit({ fs: gitFs, dir, oid });
+    await git4.listFiles({ fs: gitFs, dir });
+    await git4.listFiles({ fs: gitFs, dir, ref: "HEAD" });
     return false;
   } catch {
     return true;
@@ -14692,7 +14840,7 @@ async function syncProject(options) {
           step("fetch", { attempt: attempt + 1, branch, remote: transport.remote });
           const remoteTip = await fetchRemoteTip(dir, branch, transport, http3, cache2);
           step("local-ref", { fetched: remoteTip ?? "none" });
-          let localTip = await git6.resolveRef({ fs: gitFs, dir, ref: branch });
+          let localTip = await git4.resolveRef({ fs: gitFs, dir, ref: branch });
           if (push || remoteTip !== null && remoteTip !== localTip) {
             step("snapshot-after-fetch");
             const lateSnapshot = await snapshotBeforeAction({
@@ -14705,7 +14853,7 @@ async function syncProject(options) {
             });
             if (lateSnapshot) {
               snapshotId = lateSnapshot;
-              localTip = await git6.resolveRef({ fs: gitFs, dir, ref: branch });
+              localTip = await git4.resolveRef({ fs: gitFs, dir, ref: branch });
             }
           }
           logger.info("sync", `branch=${branch} local=${short(localTip)} fetched=${short(remoteTip)} snapshot=${snapshotId ? short(snapshotId) : "none"}`);
@@ -14739,8 +14887,8 @@ async function syncProject(options) {
               pulled = true;
               step("compare-trees");
               const [before, after] = await Promise.all([
-                git6.readCommit({ fs: gitFs, dir, cache: cache2, oid: localTip }),
-                git6.readCommit({ fs: gitFs, dir, cache: cache2, oid: tip })
+                git4.readCommit({ fs: gitFs, dir, cache: cache2, oid: localTip }),
+                git4.readCommit({ fs: gitFs, dir, cache: cache2, oid: tip })
               ]);
               filesChanged = filesChanged || before.commit.tree !== after.commit.tree;
               for (const f of converge.combinedFiles)
@@ -14770,7 +14918,7 @@ async function syncProject(options) {
           }
           step("push", { branch, local: tip, fetched: remoteTip ?? "none" });
           try {
-            await git6.push({
+            await git4.push({
               fs: gitFs,
               http: http3,
               dir,
@@ -14812,50 +14960,562 @@ async function syncProject(options) {
     });
   };
   try {
-    return finish(await run2());
-  } catch (e) {
-    logger.warn(stage, `${stage} failed`, errorLogData(e));
-    return finish(failureOutcome(e));
+    return finish(await run2());
+  } catch (e) {
+    logger.warn(stage, `${stage} failed`, errorLogData(e));
+    return finish(failureOutcome(e));
+  }
+}
+async function refreshRemoteCopies(options) {
+  const http3 = options.httpClient ?? defaultGitHttp;
+  try {
+    const dir = await repoDirFor(options.projectDir);
+    const transport = await resolveTransport(dir, {
+      ...options.credential ? { credential: options.credential } : {},
+      ...options.tokenStore ? { tokenStore: options.tokenStore } : {}
+    });
+    await git4.fetch({
+      fs: gitFs,
+      http: http3,
+      dir,
+      remote: transport.remote,
+      singleBranch: false,
+      prune: true,
+      tags: false,
+      ...onAuthFor(transport.credential)
+    });
+    return { refreshed: true };
+  } catch (e) {
+    const message = e?.message ?? "";
+    if (message === MSG_NO_REMOTE || message === MSG_SSH_REMOTE) {
+      return { refreshed: false, reason: "no-remote" };
+    }
+    const status = e?.data?.statusCode;
+    if (status === 401 || status === 403 || status === 404) {
+      return { refreshed: false, reason: "auth" };
+    }
+    return { refreshed: false, reason: "offline" };
+  }
+}
+
+// src/lib/remote-auth/online-backup.ts
+var API_BASE3 = "https://api.github.com";
+var REQUEST_TIMEOUT_MS4 = 15000;
+var MAX_NAME_LENGTH = 100;
+var MSG = {
+  notConnected: "Connect your GitHub account first (Settings > Accounts), then set up online backup.",
+  auth: "GitHub didn't accept the saved connection. Reconnect GitHub in Settings > Accounts and try again.",
+  offline: "Gutterpress couldn't reach GitHub. Check your internet connection and try again. Nothing was changed.",
+  noHistory: "Turn on version history for this book first. Online backup copies the versions Gutterpress keeps on this computer.",
+  alreadyHasRemote: "This book already has an online copy.",
+  noName: "Give the online copy a name.",
+  badName: "A repository name can only use letters, numbers, hyphens (-), underscores (_) and dots (.), and be at most 100 characters.",
+  notFound: "Gutterpress couldn't find that repository on GitHub, or your account can't see it. Choose another one.",
+  noPermission: "Your GitHub account isn't allowed to add to that repository (it may be archived or read-only). Choose another one.",
+  noCreatePermission: "GitHub wouldn't let Gutterpress create a repository with this connection. Create an empty repository on github.com yourself, then choose it from your existing repositories here.",
+  notEmpty: "That repository already has files in it, and online backup needs an empty one. Choose an empty repository, or create a new one.",
+  pushFailed: "Your book couldn't be copied to GitHub. Your writing is safe on this computer. Please try again."
+};
+var nameTaken = (name) => `You already have a repository named "${name}" on GitHub. Pick a different name, or choose that repository from your existing empty repositories.`;
+
+class BackupFailure extends Error {
+  reason;
+  repository;
+  constructor(reason, message, repository) {
+    super(message);
+    this.reason = reason;
+    this.repository = repository;
+  }
+}
+function isValidRepositoryName(name) {
+  return name.length > 0 && name.length <= MAX_NAME_LENGTH && /^[A-Za-z0-9._-]+$/.test(name) && name !== "." && name !== "..";
+}
+function toRemoteRepository(r) {
+  return {
+    owner: r.owner.login,
+    name: r.name,
+    fullName: r.full_name,
+    private: r.private,
+    defaultBranch: r.default_branch,
+    htmlUrl: r.html_url
+  };
+}
+async function request(fetchImpl, method, path26, token, body) {
+  return withFetchTimeout({ timeoutMs: REQUEST_TIMEOUT_MS4, offlineMessage: MSG.offline }, (signal) => fetchImpl(`${API_BASE3}${path26}`, {
+    method,
+    headers: {
+      ...githubApiHeaders(token),
+      ...body === undefined ? {} : { "Content-Type": "application/json" }
+    },
+    ...body === undefined ? {} : { body: JSON.stringify(body) },
+    signal
+  })).catch((e) => {
+    throw new BackupFailure("offline", e instanceof Error ? e.message : MSG.offline);
+  });
+}
+async function createRepository(fetchImpl, token, name, isPrivate) {
+  const res = await request(fetchImpl, "POST", "/user/repos", token, {
+    name,
+    private: isPrivate,
+    auto_init: false,
+    description: "Online backup made with Gutterpress"
+  });
+  if (res.status === 201 || res.status === 200)
+    return await res.json();
+  if (res.status === 401)
+    throw new BackupFailure("auth", MSG.auth);
+  if (res.status === 403)
+    throw new BackupFailure("no-permission", MSG.noCreatePermission);
+  if (res.status === 422) {
+    const body = await res.json().catch(() => ({}));
+    const taken = (body.errors ?? []).some((e) => /already exists/i.test(e.message ?? ""));
+    throw new BackupFailure("name-taken", taken ? nameTaken(name) : MSG.badName);
+  }
+  throw new BackupFailure("push-failed", `GitHub couldn't create the repository (error ${res.status}). Please try again.`);
+}
+async function loadEmptyRepository(fetchImpl, credential, owner, name) {
+  const path26 = `/repos/${encodeURIComponent(owner)}/${encodeURIComponent(name)}`;
+  const res = await request(fetchImpl, "GET", path26, credential.token);
+  if (res.status === 401)
+    throw new BackupFailure("auth", MSG.auth);
+  if (res.status === 404)
+    throw new BackupFailure("not-found", MSG.notFound);
+  if (res.status === 403)
+    throw new BackupFailure("no-permission", MSG.noPermission);
+  if (!res.ok) {
+    throw new BackupFailure("push-failed", `GitHub returned an unexpected error (error ${res.status}). Please try again.`);
+  }
+  const repo = await res.json();
+  if (repo.archived || repo.permissions?.push === false) {
+    throw new BackupFailure("no-permission", MSG.noPermission);
+  }
+  const branches = await listGitHubBranches(credential, owner, name, { fetchImpl }).catch((e) => {
+    const msg = e instanceof Error ? e.message : "";
+    throw new BackupFailure(/reconnect/i.test(msg) ? "auth" : /reach/i.test(msg) ? "offline" : "push-failed", msg || MSG.pushFailed);
+  });
+  if (branches.length > 0)
+    throw new BackupFailure("not-empty", MSG.notEmpty, toRemoteRepository(repo));
+  return repo;
+}
+async function run2(options) {
+  const fetchImpl = options.fetchImpl ?? fetch;
+  const credential = options.credential ?? await options.tokenStore?.get(GITHUB_HOST).catch(() => null) ?? undefined;
+  if (!credential)
+    throw new BackupFailure("not-connected", MSG.notConnected);
+  const source = await detectProjectSource(options.projectDir);
+  if (source.type !== "local-git-folder")
+    throw new BackupFailure("no-history", MSG.noHistory);
+  if (source.hasRemote)
+    throw new BackupFailure("already-has-remote", MSG.alreadyHasRemote);
+  const dir = await repoDirFor(options.projectDir);
+  const head = await git5.resolveRef({ fs: gitFs, dir, ref: "HEAD" }).catch(() => null);
+  if (!head)
+    throw new BackupFailure("no-history", MSG.noHistory);
+  const { target } = options;
+  let repo;
+  if (target.kind === "create") {
+    const name = target.name.trim();
+    if (!name)
+      throw new BackupFailure("invalid-name", MSG.noName);
+    if (!isValidRepositoryName(name))
+      throw new BackupFailure("invalid-name", MSG.badName);
+    repo = await createRepository(fetchImpl, credential.token, name, target.private ?? true);
+  } else {
+    repo = await loadEmptyRepository(fetchImpl, credential, target.owner, target.name);
+  }
+  const repository = toRemoteRepository(repo);
+  if (!/^https?:\/\//.test(repo.clone_url)) {
+    throw new BackupFailure("push-failed", MSG.pushFailed, repository);
+  }
+  await withRepoLock(dir, () => git5.addRemote({ fs: gitFs, dir, remote: "origin", url: repo.clone_url }));
+  const sync = await syncProject({
+    projectDir: options.projectDir,
+    credential,
+    ...options.authorName ? { authorName: options.authorName } : {},
+    ...options.authorEmail ? { authorEmail: options.authorEmail } : {},
+    ...options.httpClient ? { httpClient: options.httpClient } : {},
+    ...options.logFile ? { logFile: options.logFile } : {}
+  });
+  if (sync.status === "synced" || sync.status === "up-to-date") {
+    return { status: "connected", repository, sync };
+  }
+  await withRepoLock(dir, () => git5.deleteRemote({ fs: gitFs, dir, remote: "origin" })).catch(() => {});
+  if (sync.status === "auth")
+    throw new BackupFailure("auth", sync.message, repository);
+  if (sync.status === "offline")
+    throw new BackupFailure("offline", sync.message, repository);
+  throw new BackupFailure("push-failed", sync.message || MSG.pushFailed, repository);
+}
+async function setUpOnlineBackup(options) {
+  try {
+    return await run2(options);
+  } catch (e) {
+    if (e instanceof BackupFailure) {
+      return {
+        status: "failed",
+        reason: e.reason,
+        message: e.message,
+        ...e.repository ? { repository: e.repository } : {}
+      };
+    }
+    throw e;
+  }
+}
+// src/lib/remote-auth/clone.ts
+import { mkdir as mkdir15, readdir as readdir9, rm as rm6 } from "node:fs/promises";
+import path26 from "node:path";
+import git6 from "isomorphic-git";
+function sanitizeCloneFolderName(name) {
+  return String(name ?? "").replace(/[\\/]/g, "-").replace(/^\.+/, "").trim();
+}
+async function assertCloneTarget(dir) {
+  try {
+    const entries = await readdir9(dir);
+    if (entries.length > 0) {
+      throw new Error("That folder already has files in it. Choose an empty folder for the book.");
+    }
+  } catch (e) {
+    if (e.code === "ENOENT")
+      return;
+    throw e;
+  }
+}
+function friendlyCloneError(e) {
+  if (isInsecureTransportError(e)) {
+    return new Error("That repository address isn't secure, so the saved connection wasn't sent — connections are never sent over an insecure address. Use a secure address (starting with https), or a local loopback address for a server on this computer.", { cause: e });
+  }
+  const msg = e instanceof Error ? e.message : String(e);
+  if (/401|403|auth|credential/i.test(msg)) {
+    return new Error("GitHub didn't accept the connection for this repository. Reconnect GitHub and try again.", { cause: e });
+  }
+  if (/404|not found/i.test(msg)) {
+    return new Error("That repository couldn't be found. It may have been renamed or you may no longer have access.", { cause: e });
+  }
+  if (/ENOTFOUND|ECONNREFUSED|ETIMEDOUT|EAI_AGAIN|network|fetch failed/i.test(msg)) {
+    return new Error(OFFLINE_MESSAGE, { cause: e });
+  }
+  if (e instanceof Error && /already has files/i.test(e.message)) {
+    return e;
+  }
+  return new Error("The book couldn't be downloaded from GitHub. Please try again.", { cause: e });
+}
+async function cloneRepository(options) {
+  const { dir, onProgress, tokenStore } = options;
+  if (!path26.isAbsolute(dir)) {
+    throw new Error("cloneRepository requires an absolute destination path.");
+  }
+  let parsed;
+  try {
+    parsed = new URL(options.url);
+  } catch {
+    throw new Error("That repository address is not a valid web URL.");
+  }
+  if (!/^https?:$/.test(parsed.protocol)) {
+    throw new Error("Only HTTPS repository addresses are supported. SSH addresses (git@…) can't be used here.");
+  }
+  const { cleanUrl, credential: urlCredential } = extractUrlCredential(options.url);
+  const credential = options.credential ?? urlCredential;
+  if (urlCredential && tokenStore && !await tokenStore.get(urlCredential.host)) {
+    await tokenStore.set(urlCredential.host, urlCredential);
+  }
+  return withRepoLock(dir, async () => {
+    await assertCloneTarget(dir);
+    const dirExistedBefore = gitFs.existsSync(dir);
+    await mkdir15(dir, { recursive: true });
+    try {
+      await git6.clone({
+        fs: gitFs,
+        http: options.httpClient ?? defaultGitHttp,
+        dir,
+        url: cleanUrl,
+        singleBranch: true,
+        ...options.branch ? { ref: options.branch } : {},
+        ...options.depth ? { depth: options.depth } : {},
+        ...onAuthFor(credential),
+        ...onProgress ? {
+          onProgress: (p) => onProgress({
+            phase: p.phase,
+            loaded: p.loaded,
+            ...p.total ? { total: p.total } : {}
+          })
+        } : {}
+      });
+    } catch (e) {
+      const friendly = friendlyCloneError(e);
+      if (!dirExistedBefore) {
+        try {
+          await rm6(dir, { recursive: true, force: true });
+        } catch {
+          throw new Error(`${friendly.message} A partial download was left at ${dir} — delete that folder before trying again.`, { cause: e });
+        }
+      }
+      throw friendly;
+    }
+    let branch;
+    try {
+      branch = await git6.currentBranch({ fs: gitFs, dir }) ?? undefined;
+    } catch {
+      branch = undefined;
+    }
+    return { projectDir: dir, ...branch ? { branch } : {} };
+  });
+}
+// src/lib/remote-auth/test-access.ts
+import git7 from "isomorphic-git";
+import httpNode2 from "isomorphic-git/http/node";
+function isSshRemoteUrl(url) {
+  const trimmed = url.trim();
+  if (/^ssh:\/\//i.test(trimmed))
+    return true;
+  return /^[\w.-]+@[\w.][\w.-]*:/.test(trimmed) || /^[\w.-]+@\[/.test(trimmed);
+}
+var FAILURE_MESSAGES = {
+  auth: "The Git server didn't accept the saved connection. Reconnect to this server with a current access token and try again.",
+  "not-found": "The server answered, but no repository was found at that address. It may have been moved, renamed, or you may no longer have access.",
+  unreachable: "Couldn't reach the Git server. Check your internet connection (and VPN, if this is a private server), then try again.",
+  "ssh-unsupported": "This book's online address uses SSH (git@…), which gutterpress can't check or sync with. Everything on this computer still works — sync with your usual Git tool.",
+  "insecure-transport": "This address isn't secure, so the saved connection wasn't sent — connections are never sent over an insecure address. Switch the address to a secure one (starting with https), or to a local loopback address for a server on this computer, to use a saved connection.",
+  tls: "The server's security certificate couldn't be verified. If this is a private server with its own certificate, ask its administrator about trusting it (NODE_EXTRA_CA_CERTS).",
+  unknown: "The connection test failed unexpectedly. The server may not be a Git server, or it may be temporarily unavailable."
+};
+function failure(reason) {
+  return { ok: false, reason, message: FAILURE_MESSAGES[reason] };
+}
+function classifyRemoteAccessError(e) {
+  if (isInsecureTransportError(e))
+    return failure("insecure-transport");
+  const msg = e instanceof Error ? e.message : String(e);
+  if (/401|403|auth|credential|denied|cancel/i.test(msg))
+    return failure("auth");
+  if (/404|not found/i.test(msg))
+    return failure("not-found");
+  if (/certificate|self.signed|unable_to_verify|cert_|tls|ssl/i.test(msg) && !/fetch failed/i.test(msg)) {
+    return failure("tls");
+  }
+  if (/ENOTFOUND|ECONNREFUSED|ECONNRESET|ETIMEDOUT|EAI_AGAIN|EHOSTUNREACH|network|fetch failed|timed out/i.test(msg)) {
+    return failure("unreachable");
+  }
+  return failure("unknown");
+}
+async function testRemoteAccess(options) {
+  if (isSshRemoteUrl(options.url))
+    return failure("ssh-unsupported");
+  let parsed;
+  try {
+    parsed = new URL(options.url);
+  } catch {
+    return failure("unknown");
+  }
+  if (!/^https?:$/.test(parsed.protocol))
+    return failure("ssh-unsupported");
+  const { cleanUrl, credential: urlCredential } = extractUrlCredential(options.url);
+  const credential = options.credential ?? urlCredential;
+  const timeoutMs = options.timeoutMs ?? 15000;
+  let timer;
+  const timeout = new Promise((resolve9) => {
+    timer = setTimeout(() => resolve9(failure("unreachable")), timeoutMs);
+  });
+  const probe = (async () => {
+    try {
+      const refs = await git7.listServerRefs({
+        http: options.httpClient ?? httpNode2,
+        url: cleanUrl,
+        protocolVersion: 1,
+        symrefs: true,
+        ...onAuthFor(credential),
+        ...credential ? { onAuthFailure: () => ({ cancel: true }) } : {}
+      });
+      const head = refs.find((r) => r.ref === "HEAD" && r.target);
+      const defaultBranch = head?.target?.replace(/^refs\/heads\//, "");
+      return {
+        ok: true,
+        refCount: refs.filter((r) => r.ref !== "HEAD").length,
+        ...defaultBranch ? { defaultBranch } : {}
+      };
+    } catch (e) {
+      return classifyRemoteAccessError(e);
+    }
+  })();
+  try {
+    return await Promise.race([probe, timeout]);
+  } finally {
+    clearTimeout(timer);
   }
 }
-async function refreshRemoteCopies(options) {
-  const http3 = options.httpClient ?? defaultGitHttp;
+// src/lib/remote-auth/generic-auth.ts
+function normalizeForgeHost(input) {
+  return credentialHostKey(input);
+}
+function knownForgeTokenUrl(host) {
+  const h = normalizeForgeHost(host);
+  if (!h)
+    return null;
+  const name = h.split(":")[0];
+  if (name === GITHUB_HOST || name.endsWith(`.${GITHUB_HOST}`))
+    return null;
+  if (name === "bitbucket.org") {
+    return "https://bitbucket.org/account/settings/app-passwords/";
+  }
+  if (name === "dev.azure.com" || name.endsWith(".visualstudio.com")) {
+    return "https://dev.azure.com/_usersSettings/tokens";
+  }
+  if (name.includes("gitlab")) {
+    return `https://${h}/-/user_settings/personal_access_tokens`;
+  }
+  if (name.includes("gitea") || name.includes("forgejo")) {
+    return `https://${h}/user/settings/applications`;
+  }
+  return null;
+}
+function connectError(result, host) {
+  switch (result.reason) {
+    case "auth":
+      return new Error("The Git server didn't accept that access token. Check the token (and username, if your server needs one) and try again.");
+    case "ssh-unsupported":
+      return new Error("Enter the server's web address (starting with https://), not an SSH address (git@…).");
+    case "unreachable":
+      return new Error(`Couldn't reach ${host}. Check the server address and your connection, then try again.`);
+    case "tls":
+      return new Error(result.message);
+    case "not-found":
+      return new Error("The server answered, but that repository wasn't found. Check the repository address and that the token has access to it.");
+    default:
+      return new Error(`Couldn't verify the connection to ${host}. Check the server address and try again.`);
+  }
+}
+async function connectGenericHost(input, options = {}) {
+  const host = normalizeForgeHost(input.host);
+  if (!host) {
+    throw new Error("Enter your Git server's web address (like https://git.example.com).");
+  }
+  const token = input.token?.trim();
+  if (!token) {
+    throw new Error("Paste an access token from your Git server to connect.");
+  }
+  const username = input.username?.trim() || undefined;
+  const candidate = {
+    host,
+    kind: "token",
+    token,
+    ...username ? { username } : {},
+    label: username ? `${host} — ${username}` : host,
+    createdAt: Date.now()
+  };
+  const probeUrl = input.repoUrl?.trim() || `https://${host}/`;
+  const result = await testRemoteAccess({
+    url: probeUrl,
+    credential: candidate,
+    ...options.httpClient ? { httpClient: options.httpClient } : {},
+    ...options.timeoutMs ? { timeoutMs: options.timeoutMs } : {}
+  });
+  if (!result.ok) {
+    const rootProbe = !input.repoUrl?.trim();
+    const inconclusiveButReachable = rootProbe && (result.reason === "not-found" || result.reason === "unknown");
+    if (!inconclusiveButReachable)
+      throw connectError(result, host);
+  }
+  return candidate;
+}
+// src/lib/remote-auth/diagnose.ts
+function parseRemoteOrigin(url) {
+  const trimmed = url.trim();
+  if (!trimmed)
+    return { protocol: "none" };
+  const scp = /^[\w.-]+@([\w.][\w.-]*):/.exec(trimmed);
+  if (scp)
+    return { protocol: "ssh", host: credentialHostKey(trimmed) };
   try {
-    const dir = await repoDirFor(options.projectDir);
-    const transport = await resolveTransport(dir, {
-      ...options.credential ? { credential: options.credential } : {},
-      ...options.tokenStore ? { tokenStore: options.tokenStore } : {}
-    });
-    await git6.fetch({
-      fs: gitFs,
-      http: http3,
-      dir,
-      remote: transport.remote,
-      singleBranch: false,
-      prune: true,
-      tags: false,
-      ...onAuthFor(transport.credential)
-    });
-    return { refreshed: true };
-  } catch (e) {
-    const message = e?.message ?? "";
-    if (message === MSG_NO_REMOTE || message === MSG_SSH_REMOTE) {
-      return { refreshed: false, reason: "no-remote" };
+    const parsed = new URL(trimmed);
+    const host = credentialHostKey(trimmed);
+    if (/^https?:$/.test(parsed.protocol))
+      return { protocol: "https", host };
+    if (/^ssh:$/.test(parsed.protocol) || isSshRemoteUrl(trimmed)) {
+      return { protocol: "ssh", host };
     }
-    const status = e?.data?.statusCode;
-    if (status === 401 || status === 403 || status === 404) {
-      return { refreshed: false, reason: "auth" };
+    return { protocol: "none" };
+  } catch {
+    return { protocol: "none" };
+  }
+}
+function forgeKindForHost(host) {
+  const name = host.toLowerCase().split(":")[0];
+  if (name === GITHUB_HOST || name.endsWith(`.${GITHUB_HOST}`))
+    return "github";
+  if (name === "bitbucket.org" || name.includes("bitbucket"))
+    return "bitbucket";
+  if (name === "dev.azure.com" || name.endsWith(".visualstudio.com"))
+    return "azure";
+  if (name.includes("gitlab"))
+    return "gitlab";
+  if (name.includes("forgejo"))
+    return "forgejo";
+  if (name.includes("gitea"))
+    return "gitea";
+  return "generic";
+}
+async function diagnoseProjectRemote(projectDir, options = {}) {
+  const classification = options.source ?? await detectProjectSource(projectDir);
+  const rawRemoteUrl = classification.type === "local-git-folder" ? classification.remoteUrl : undefined;
+  const branch = classification.type === "local-git-folder" ? classification.branch : undefined;
+  if (!rawRemoteUrl) {
+    return {
+      classification,
+      remoteProtocol: "none",
+      ...branch ? { branch } : {},
+      credentialPresent: false,
+      provider: null,
+      tokenSettingsUrl: null,
+      canSync: false,
+      guidance: "local-only"
+    };
+  }
+  const { protocol, host } = parseRemoteOrigin(rawRemoteUrl);
+  const urlExtraction = protocol === "https" ? extractUrlCredential(rawRemoteUrl) : null;
+  const remoteUrl = urlExtraction ? urlExtraction.cleanUrl : rawRemoteUrl;
+  const sanitizedClassification = classification.type === "local-git-folder" && classification.remoteUrl ? { ...classification, remoteUrl } : classification;
+  let credentialPresent = false;
+  if (host && options.tokenStore) {
+    try {
+      credentialPresent = await options.tokenStore.get(host) !== null;
+    } catch {
+      credentialPresent = false;
     }
-    return { refreshed: false, reason: "offline" };
   }
+  if (!credentialPresent && urlExtraction?.credential)
+    credentialPresent = true;
+  const provider = host && protocol !== "none" ? forgeKindForHost(host) : null;
+  const canSync = protocol === "https" && credentialPresent;
+  let guidance;
+  if (protocol === "ssh")
+    guidance = "ssh-use-own-tools";
+  else if (protocol !== "https")
+    guidance = "local-only";
+  else if (credentialPresent)
+    guidance = "ready-to-sync";
+  else if (provider === "github")
+    guidance = "connect-github-to-sync";
+  else
+    guidance = "https-connect-server";
+  return {
+    classification: sanitizedClassification,
+    remoteUrl,
+    ...host ? { remoteHost: host } : {},
+    remoteProtocol: protocol === "none" ? "none" : protocol,
+    ...branch ? { branch } : {},
+    credentialPresent,
+    provider,
+    tokenSettingsUrl: host ? knownForgeTokenUrl(host) : null,
+    canSync,
+    guidance
+  };
 }
 // src/lib/remote-auth/repair.ts
-import git7 from "isomorphic-git";
-import { cp as cp5, mkdir as mkdir15, rename as rename5, rm as rm7 } from "node:fs/promises";
-import path26 from "node:path";
+import git8 from "isomorphic-git";
+import { cp as cp5, mkdir as mkdir16, rename as rename5, rm as rm7 } from "node:fs/promises";
+import path27 from "node:path";
 var REPAIR_SNAPSHOT_MESSAGE = "Repaired online backup";
 async function moveDir(from, to) {
-  await mkdir15(path26.dirname(to), { recursive: true });
+  await mkdir16(path27.dirname(to), { recursive: true });
   try {
     await rename5(from, to);
   } catch (e) {
@@ -14868,14 +15528,14 @@ async function moveDir(from, to) {
 async function repairOnlineBackup(options) {
   const logger = resolveLogger(options.logFile, "repair");
   const dir = await repoDirFor(options.projectDir);
-  const oldGit = path26.join(dir, ".git");
-  const movedGitTo = path26.join(options.backupDir, "git");
-  const freshDir = path26.join(options.backupDir, "fresh-clone");
+  const oldGit = path27.join(dir, ".git");
+  const movedGitTo = path27.join(options.backupDir, "git");
+  const freshDir = path27.join(options.backupDir, "fresh-clone");
   const { restoredFiles, credential } = await withRepoLock(dir, async () => {
     const transport = await resolveTransport(dir, options);
     let branch;
     try {
-      branch = await git7.currentBranch({ fs: gitFs, dir }) ?? undefined;
+      branch = await git8.currentBranch({ fs: gitFs, dir }) ?? undefined;
     } catch {
       branch = undefined;
     }
@@ -14891,7 +15551,7 @@ async function repairOnlineBackup(options) {
     logger.info("swap", "moving old history aside", { to: movedGitTo });
     await moveDir(oldGit, movedGitTo);
     try {
-      await moveDir(path26.join(freshDir, ".git"), oldGit);
+      await moveDir(path27.join(freshDir, ".git"), oldGit);
     } catch (e) {
       await rm7(oldGit, { recursive: true, force: true });
       await moveDir(movedGitTo, oldGit);
@@ -14901,10 +15561,10 @@ async function repairOnlineBackup(options) {
     const ref = fresh.branch ?? "HEAD";
     let missing = [];
     try {
-      const tracked = await git7.listFiles({ fs: gitFs, dir, ref });
-      missing = tracked.filter((f) => !gitFs.existsSync(path26.join(dir, f)));
+      const tracked = await git8.listFiles({ fs: gitFs, dir, ref });
+      missing = tracked.filter((f) => !gitFs.existsSync(path27.join(dir, f)));
       if (missing.length > 0) {
-        await git7.checkout({ fs: gitFs, dir, ref, filepaths: missing, force: true });
+        await git8.checkout({ fs: gitFs, dir, ref, filepaths: missing, force: true });
         logger.info("restore", "restored files missing on this computer", { files: missing });
       }
     } catch (e) {
@@ -14931,21 +15591,21 @@ async function repairOnlineBackup(options) {
   return { outcome, movedGitTo, restoredFiles };
 }
 // src/lib/remote-auth/scorched-earth.ts
-import git8 from "isomorphic-git";
-import { cp as cp6, mkdir as mkdir16, readdir as readdir10, rm as rm8 } from "node:fs/promises";
-import path27 from "node:path";
+import git9 from "isomorphic-git";
+import { cp as cp6, mkdir as mkdir17, readdir as readdir10, rm as rm8 } from "node:fs/promises";
+import path28 from "node:path";
 async function emptyDir(dir) {
   for (const entry of await readdir10(dir)) {
-    await rm8(path27.join(dir, entry), { recursive: true, force: true });
+    await rm8(path28.join(dir, entry), { recursive: true, force: true });
   }
 }
 async function copyFilesBack(from, to) {
-  const skip = path27.join(from, ".git");
+  const skip = path28.join(from, ".git");
   for (const entry of await readdir10(from)) {
-    const src = path27.join(from, entry);
+    const src = path28.join(from, entry);
     if (src === skip)
       continue;
-    await cp6(src, path27.join(to, entry), { recursive: true, force: true });
+    await cp6(src, path28.join(to, entry), { recursive: true, force: true });
   }
 }
 async function scorchedEarth(options) {
@@ -14957,12 +15617,12 @@ async function scorchedEarth(options) {
       const transport2 = await resolveTransport(dir, options);
       let branch2;
       try {
-        branch2 = await git8.currentBranch({ fs: gitFs, dir }) ?? undefined;
+        branch2 = await git9.currentBranch({ fs: gitFs, dir }) ?? undefined;
       } catch {
         branch2 = undefined;
       }
       logger.info("backup", "copying folder", { to: backupDir });
-      await mkdir16(backupDir, { recursive: true });
+      await mkdir17(backupDir, { recursive: true });
       await cp6(dir, backupDir, { recursive: true });
       logger.info("delete", "emptying folder", { dir });
       await emptyDir(dir);
@@ -14995,7 +15655,7 @@ async function scorchedEarth(options) {
 }
 // src/lib/publish/run-publish.ts
 import { readdir as readdir12, stat as stat12 } from "node:fs/promises";
-import path32 from "node:path";
+import path33 from "node:path";
 
 // src/lib/publish/command-runner.ts
 var CAPTURE_LIMIT = 64 * 1024;
@@ -15074,8 +15734,8 @@ async function resolveSwaCommand(req) {
   const explicit = env.SWA_CLI_PATH?.trim();
   if (explicit)
     return explicit;
-  const run2 = req.deps.runCommand ?? defaultCommandRunner;
-  return await commandExists("swa", run2, req.deps.env) ? "swa" : null;
+  const run3 = req.deps.runCommand ?? defaultCommandRunner;
+  return await commandExists("swa", run3, req.deps.env) ? "swa" : null;
 }
 var SWA_INSTALL_HINT = "Install the Azure SWA CLI first: `npm install -g @azure/static-web-apps-cli` " + "(needs Node.js), or set SWA_CLI_PATH to the swa binary.";
 var azureSwaProvider = {
@@ -15121,9 +15781,9 @@ var azureSwaProvider = {
       throw new Error(SWA_INSTALL_HINT);
     const cfg = req.config;
     const deployEnv = cfg.env?.trim() || "production";
-    const run2 = req.deps.runCommand ?? defaultCommandRunner;
+    const run3 = req.deps.runCommand ?? defaultCommandRunner;
     req.deps.onProgress?.(`Deploying ${req.artifact.path} to Azure SWA (${deployEnv})…`);
-    const result = await run2(swa, ["deploy", req.artifact.path, "--env", deployEnv], {
+    const result = await run3(swa, ["deploy", req.artifact.path, "--env", deployEnv], {
       env: { SWA_CLI_DEPLOYMENT_TOKEN: resolved.credential.token },
       onOutput: req.deps.onProgress
     });
@@ -15144,25 +15804,25 @@ ${tail}` : ""}`);
 };
 
 // src/lib/publish/providers/guided.ts
-import { copyFile as copyFile2, mkdir as mkdir17, writeFile as writeFile14 } from "node:fs/promises";
-import path28 from "node:path";
+import { copyFile as copyFile2, mkdir as mkdir18, writeFile as writeFile15 } from "node:fs/promises";
+import path29 from "node:path";
 async function stageGuidedPackage(req, providerId, listingLines) {
-  const packageDir = path28.join(path28.dirname(req.artifact.path), "publish", providerId);
-  await mkdir17(packageDir, { recursive: true });
-  await copyFile2(req.artifact.path, path28.join(packageDir, path28.basename(req.artifact.path)));
+  const packageDir = path29.join(path29.dirname(req.artifact.path), "publish", providerId);
+  await mkdir18(packageDir, { recursive: true });
+  await copyFile2(req.artifact.path, path29.join(packageDir, path29.basename(req.artifact.path)));
   const { title, authors } = req.project;
   const sheet = [
     `# ${title || "Untitled"}`,
     "",
     `- **Authors:** ${authors.length ? authors.join(", ") : "(not set)"}`,
-    `- **File:** ${path28.basename(req.artifact.path)}`,
+    `- **File:** ${path29.basename(req.artifact.path)}`,
     ...listingLines,
     "",
     "Copy these details into the platform's listing form when uploading.",
     ""
   ].join(`
 `);
-  await writeFile14(path28.join(packageDir, "LISTING.md"), sheet, "utf8");
+  await writeFile15(path29.join(packageDir, "LISTING.md"), sheet, "utf8");
   return packageDir;
 }
 
@@ -15225,9 +15885,9 @@ var drivethrurpgProvider = {
 };
 
 // src/lib/publish/providers/gdrive.ts
-import { mkdtemp as mkdtemp3, readFile as readFile33, readdir as readdir11, rm as rm9, stat as stat9, writeFile as writeFile15 } from "node:fs/promises";
+import { mkdtemp as mkdtemp3, readFile as readFile34, readdir as readdir11, rm as rm9, stat as stat9, writeFile as writeFile16 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
-import path29 from "node:path";
+import path30 from "node:path";
 import { Zip, ZipDeflate } from "fflate";
 
 // src/lib/publish/google-drive.ts
@@ -15612,34 +16272,34 @@ function zipEntriesNonBlocking(entries, opts) {
 async function collectZipEntries(root, dir, out, onWarn) {
   const entries = await readdir11(dir, { withFileTypes: true });
   for (const entry of entries) {
-    const full = path29.join(dir, entry.name);
+    const full = path30.join(dir, entry.name);
     if (entry.isDirectory()) {
       await collectZipEntries(root, full, out, onWarn);
     } else if (entry.isFile()) {
-      const rel = path29.relative(root, full).split(path29.sep).join("/");
-      out[rel] = await readFile33(full);
+      const rel = path30.relative(root, full).split(path30.sep).join("/");
+      out[rel] = await readFile34(full);
     } else if (entry.isSymbolicLink()) {
       const resolved = await stat9(full).catch(() => null);
       if (resolved?.isFile()) {
-        const rel = path29.relative(root, full).split(path29.sep).join("/");
-        out[rel] = await readFile33(full);
+        const rel = path30.relative(root, full).split(path30.sep).join("/");
+        out[rel] = await readFile34(full);
       } else if (resolved?.isDirectory()) {
         await collectZipEntries(root, full, out, onWarn);
       } else {
-        onWarn?.(`Skipped "${path29.relative(root, full)}" in the website export — it's a broken symlink.`);
+        onWarn?.(`Skipped "${path30.relative(root, full)}" in the website export — it's a broken symlink.`);
       }
     } else {
-      onWarn?.(`Skipped "${path29.relative(root, full)}" in the website export — not a file, folder, or symlink.`);
+      onWarn?.(`Skipped "${path30.relative(root, full)}" in the website export — not a file, folder, or symlink.`);
     }
   }
 }
-async function zipHtmlExport(exportDir, title, onWarn, writeArchiveImpl = writeFile15) {
+async function zipHtmlExport(exportDir, title, onWarn, writeArchiveImpl = writeFile16) {
   const entries = {};
   await collectZipEntries(exportDir, exportDir, entries, onWarn);
   const fileName = `${bookSlug(title)}-website.zip`;
-  const tmpRoot = await mkdtemp3(path29.join(tmpdir3(), "gutterpress-gdrive-"));
+  const tmpRoot = await mkdtemp3(path30.join(tmpdir3(), "gutterpress-gdrive-"));
   try {
-    const filePath = path29.join(tmpRoot, fileName);
+    const filePath = path30.join(tmpRoot, fileName);
     const zipped = await zipEntriesNonBlocking(entries, { level: 6 });
     await writeArchiveImpl(filePath, zipped);
     return {
@@ -15687,7 +16347,7 @@ var gdriveProvider = {
     const isHtml = req.artifact.format === "html";
     const source = isHtml ? await zipHtmlExport(req.artifact.path, req.project.title, (msg) => req.deps.onProgress?.(msg)) : {
       filePath: req.artifact.path,
-      fileName: path29.basename(req.artifact.path),
+      fileName: path30.basename(req.artifact.path),
       mimeType: "application/pdf",
       cleanup: async () => {}
     };
@@ -15737,8 +16397,8 @@ var gdriveProvider = {
 };
 
 // src/lib/publish/butler.ts
-import { chmod as chmod2, mkdir as mkdir18, stat as stat10, writeFile as writeFile16 } from "node:fs/promises";
-import path30 from "node:path";
+import { chmod as chmod2, mkdir as mkdir19, stat as stat10, writeFile as writeFile17 } from "node:fs/promises";
+import path31 from "node:path";
 import { unzipSync as unzipSync2 } from "fflate";
 var BUTLER_DOWNLOAD_TIMEOUT_MS = 300000;
 function butlerBrothChannel(platform2 = process.platform, arch2 = process.arch) {
@@ -15775,8 +16435,8 @@ async function ensureButler(deps) {
   }
   if (await commandExists("butler", runCommand, deps.env))
     return "butler";
-  const cacheDir = path30.join(deps.configDir ?? defaultConfigDir(), "tools", "butler");
-  const cached = path30.join(cacheDir, butlerBinaryName());
+  const cacheDir = path31.join(deps.configDir ?? defaultConfigDir(), "tools", "butler");
+  const cached = path31.join(cacheDir, butlerBinaryName());
   if (await fileExists2(cached))
     return cached;
   const channel = butlerBrothChannel();
@@ -15798,14 +16458,14 @@ async function ensureButler(deps) {
     return new Uint8Array(await response.arrayBuffer());
   });
   const files = unzipSync2(archive);
-  await mkdir18(cacheDir, { recursive: true });
+  await mkdir19(cacheDir, { recursive: true });
   let foundBinary = false;
   for (const [name, data] of Object.entries(files)) {
     if (name.endsWith("/"))
       continue;
-    const target = path30.join(cacheDir, path30.basename(name));
-    await writeFile16(target, data);
-    if (path30.basename(name) === butlerBinaryName()) {
+    const target = path31.join(cacheDir, path31.basename(name));
+    await writeFile17(target, data);
+    if (path31.basename(name) === butlerBinaryName()) {
       await chmod2(target, 493).catch(() => {});
       foundBinary = true;
     }
@@ -15926,9 +16586,9 @@ var itchProvider = {
       throw new Error("No itch.io API key found. Connect itch.io (or set BUTLER_API_KEY) first.");
     }
     const butler = await ensureButler(req.deps);
-    const run2 = req.deps.runCommand ?? defaultCommandRunner;
+    const run3 = req.deps.runCommand ?? defaultCommandRunner;
     req.deps.onProgress?.(`Uploading to ${target}:${channel} with butler…`);
-    const result = await run2(butler, ["push", req.artifact.path, `${target}:${channel}`], {
+    const result = await run3(butler, ["push", req.artifact.path, `${target}:${channel}`], {
       env: { BUTLER_API_KEY: resolved.credential.token },
       onOutput: req.deps.onProgress
     });
@@ -16001,8 +16661,8 @@ var kdpProvider = {
 };
 
 // src/lib/publish/providers/local-folder.ts
-import { cp as cp7, mkdir as mkdir19, stat as stat11 } from "node:fs/promises";
-import path31 from "node:path";
+import { cp as cp7, mkdir as mkdir20, stat as stat11 } from "node:fs/promises";
+import path32 from "node:path";
 var LOCAL_PUBLISH_DEFAULT_DIR = "dist";
 var info7 = {
   id: "local",
@@ -16018,7 +16678,7 @@ var info7 = {
 };
 function localPublishDir(req) {
   const dir = typeof req.config.dir === "string" && req.config.dir.trim() ? req.config.dir.trim() : LOCAL_PUBLISH_DEFAULT_DIR;
-  return path31.resolve(req.project.projectDir, dir);
+  return path32.resolve(req.project.projectDir, dir);
 }
 var localFolderProvider = {
   info: info7,
@@ -16039,9 +16699,9 @@ var localFolderProvider = {
   },
   async upload(req) {
     const dir = localPublishDir(req);
-    await mkdir19(dir, { recursive: true });
-    const dest = req.artifact.format === "html" ? dir : path31.join(dir, path31.basename(req.artifact.path));
-    if (path31.resolve(dest) !== path31.resolve(req.artifact.path)) {
+    await mkdir20(dir, { recursive: true });
+    const dest = req.artifact.format === "html" ? dir : path32.join(dir, path32.basename(req.artifact.path));
+    if (path32.resolve(dest) !== path32.resolve(req.artifact.path)) {
       await cp7(req.artifact.path, dest, { recursive: true });
     }
     return { kind: "published", detail: `Saved to ${dest}` };
@@ -16303,9 +16963,9 @@ async function resolvePublishRequest(options, deps) {
   const effectiveDeps = effectiveAccount ? { ...deps, credentialAccount: effectiveAccount } : deps;
   const outDir = resolveOutputDir(manifestDir, config.title);
   const effectiveFormat = resolvePublishFormat(provider.info, providerConfig);
-  const defaultArtifact = effectiveFormat === "pdf" ? path32.join(outDir, artifactName(config.title, "pdf")) : outDir;
+  const defaultArtifact = effectiveFormat === "pdf" ? path33.join(outDir, artifactName(config.title, "pdf")) : outDir;
   const artifact = {
-    path: options.artifactPath ? path32.resolve(options.projectDir, options.artifactPath) : defaultArtifact,
+    path: options.artifactPath ? path33.resolve(options.projectDir, options.artifactPath) : defaultArtifact,
     format: effectiveFormat
   };
   return {
@@ -16369,7 +17029,7 @@ async function artifactIssues(artifact) {
 var BUILD_FINGERPRINT_FILENAME = "build-fingerprint.json";
 async function htmlDirIssues(dir) {
   const issues = [];
-  const isThere = async (rel) => stat12(path32.join(dir, rel)).then(() => true, () => false);
+  const isThere = async (rel) => stat12(path33.join(dir, rel)).then(() => true, () => false);
   if (!await isThere(BOOK_HTML)) {
     issues.push({
       severity: "error",
@@ -16488,17 +17148,17 @@ async function disconnectPublishCredential(key, deps, options = {}) {
   }
 }
 // src/lib/publish/selections.ts
-import { chmod as chmod3, mkdir as mkdir20, readFile as readFile34, writeFile as writeFile17 } from "node:fs/promises";
-import path33 from "node:path";
+import { chmod as chmod3, mkdir as mkdir21, readFile as readFile35, writeFile as writeFile18 } from "node:fs/promises";
+import path34 from "node:path";
 class PublishSelectionsStore {
   filePath;
   queue = Promise.resolve();
   constructor(filePath) {
-    this.filePath = filePath ?? path33.join(defaultConfigDir(), "publish-selections.json");
+    this.filePath = filePath ?? path34.join(defaultConfigDir(), "publish-selections.json");
   }
   async read() {
     try {
-      const raw = await readFile34(this.filePath, "utf8");
+      const raw = await readFile35(this.filePath, "utf8");
       const parsed = JSON.parse(raw);
       if (parsed && typeof parsed === "object") {
         return {
@@ -16511,19 +17171,19 @@ class PublishSelectionsStore {
     return { version: 1, global: {}, projects: {} };
   }
   async write(data) {
-    await mkdir20(path33.dirname(this.filePath), { recursive: true });
-    await writeFile17(this.filePath, JSON.stringify(data, null, 2), {
+    await mkdir21(path34.dirname(this.filePath), { recursive: true });
+    await writeFile18(this.filePath, JSON.stringify(data, null, 2), {
       encoding: "utf8",
       mode: 384
     });
     await chmod3(this.filePath, 384);
   }
   enqueue(fn) {
-    const run2 = this.queue.then(fn, fn);
-    this.queue = run2.catch(() => {
+    const run3 = this.queue.then(fn, fn);
+    this.queue = run3.catch(() => {
       return;
     });
-    return run2;
+    return run3;
   }
   resolve(providerId, projectDir) {
     return this.enqueue(async () => {
@@ -16614,4 +17274,4 @@ async function setPublishProviderConfig(projectDir, providerId, values) {
   await writeManifestDoc(file, doc);
   return settingsFromDoc(doc);
 }
-export { BUNDLED_EXTENSIONS, isBundledExtension, isPathSpecifier, parseExtensionSpecifier, PRESET_IDS, PRESETS, TARGETS, TARGET_IDS, publishTargetFor, MANIFEST_FILENAMES, hasProjectManifest, loadManifest, loadManifestWithPath, resolveConfig, SYNC_SNAPSHOT_MESSAGE, log, resolveActiveStyles, listProjectStyles, EXTENSION_MANIFEST_FILENAME, readExtensionMeta, extensionStyleList, extensionEntry, extensionCarries, pathEscapesFolder, assertExtensionContained, resolveExtension, DEFAULT_NPM_REGISTRY, npmRegistryUrl, ensureProjectGitignore, EXTENSIONS_DIR, RECOMMENDED_EXTENSIONS, BUILT_IN_STYLE_SET_IDS, sameExtension, listProjectExtensions, describeExtension, setExtensionEnabled, reorderExtensions, removeExtension, addExtension, listNpmVersions, checkExtensionUpdates, updateExtensions, listBuiltInStyleSets, addBuiltInStyleSet, validateProjectExtensions, readExtensionCss, restorePinnedExtensions, restoreFailureMessage, getChecks, getCheckById, resolveCheckSelectors, formatReport, ruleRemoteUrls, ruleRiskyProps, ruleSyntax, checkCss, inspectImage, runChecks, checkToolAvailability, reportMissingTools, executeValidation, executeAndReport, splitOutPath, runBuild, openPath, startPreviewServer, defaultConfigDir, FileTokenStore, extractUrlCredential, getSystemDiagnostics, slugifyProjectName, escapeYamlScalar, scaffoldProject, adoptFolder, EXTENSION_KINDS, RESERVED_PREFIX, resolveExtensionPrefix, scaffoldExtension, BUILT_IN_TEMPLATE_IDS, listBuiltInTemplates, saveProjectAsTemplate, listCustomTemplates, importTemplateFromFolder, SNIPPETS_DIR, extractVariables, substituteVariables, listSnippets, saveSnippet, deleteSnippet, listMergedSnippets, listMarkerComponents, importExtensionFromFile, importExtensionFromUrl, MAX_SEARCH_BYTES, SEARCH_KEYWORDS, searchNpmExtensions, setManifestFields, readManifestFields, setActiveStyles, AUTO_SNAPSHOT_DEFAULT_MINUTES, AUTO_SYNC_MIN_MINUTES, AUTO_SYNC_MAX_MINUTES, AUTO_SYNC_DEFAULT_MINUTES, AUTO_SYNC_PUSH_INTERVAL_MINUTES, autoSnapshotDelayMs, autoSyncDelayMs, isGitInternalPath, resolveGitHubClientId, GITHUB_HOST, GitHubAuthProvider, GDRIVE_HOST, resolveGoogleClientId, resolveGoogleClientSecret, GOOGLE_NOT_CONFIGURED_MESSAGE, requireGoogleClientCredentials, pkceChallengeFromVerifier, GoogleAuthProvider, revokeGoogleCredential, publishCredentialKey, publishConnectionStatus, listPublishAccounts, connectGoogleDrive, listGitHubRepositories, listRepoBooks, listGitHubBranches, sanitizeCloneFolderName, cloneRepository, isSshRemoteUrl, testRemoteAccess, knownForgeTokenUrl, connectGenericHost, parseRemoteOrigin, forgeKindForHost, diagnoseProjectRemote, syncProject, refreshRemoteCopies, REPAIR_SNAPSHOT_MESSAGE, repairOnlineBackup, scorchedEarth, listPublishProviders, publishProviderFor, resolvePublishFormat, resolvePublishRequest, runPublish, connectPublishProvider, disconnectPublishCredential, PublishSelectionsStore, readPublishSettings, setPublishProviderConfig };
+export { BUNDLED_EXTENSIONS, isBundledExtension, isPathSpecifier, parseExtensionSpecifier, PRESET_IDS, PRESETS, TARGETS, TARGET_IDS, publishTargetFor, MANIFEST_FILENAMES, hasProjectManifest, loadManifest, loadManifestWithPath, resolveConfig, SYNC_SNAPSHOT_MESSAGE, log, resolveActiveStyles, listProjectStyles, EXTENSION_MANIFEST_FILENAME, readExtensionMeta, extensionStyleList, extensionEntry, extensionCarries, pathEscapesFolder, assertExtensionContained, resolveExtension, DEFAULT_NPM_REGISTRY, npmRegistryUrl, ensureProjectGitignore, EXTENSIONS_DIR, RECOMMENDED_EXTENSIONS, BUILT_IN_STYLE_SET_IDS, sameExtension, listProjectExtensions, describeExtension, setExtensionEnabled, reorderExtensions, removeExtension, addExtension, listNpmVersions, checkExtensionUpdates, updateExtensions, listBuiltInStyleSets, addBuiltInStyleSet, validateProjectExtensions, readExtensionCss, restorePinnedExtensions, restoreFailureMessage, getChecks, getCheckById, resolveCheckSelectors, formatReport, ruleRemoteUrls, ruleRiskyProps, ruleSyntax, checkCss, inspectImage, runChecks, checkToolAvailability, reportMissingTools, executeValidation, executeAndReport, splitOutPath, runBuild, openPath, startPreviewServer, defaultConfigDir, FileTokenStore, extractUrlCredential, getSystemDiagnostics, readPageSetup, setPageSetup, slugifyProjectName, escapeYamlScalar, scaffoldProject, adoptFolder, EXTENSION_KINDS, RESERVED_PREFIX, resolveExtensionPrefix, scaffoldExtension, BUILT_IN_TEMPLATE_IDS, listBuiltInTemplates, saveProjectAsTemplate, listCustomTemplates, importTemplateFromFolder, SNIPPETS_DIR, extractVariables, substituteVariables, listSnippets, saveSnippet, deleteSnippet, listMergedSnippets, listMarkerComponents, importExtensionFromFile, importExtensionFromUrl, MAX_SEARCH_BYTES, SEARCH_KEYWORDS, searchNpmExtensions, setManifestFields, readManifestFields, setActiveStyles, AUTO_SNAPSHOT_DEFAULT_MINUTES, AUTO_SYNC_MIN_MINUTES, AUTO_SYNC_MAX_MINUTES, AUTO_SYNC_DEFAULT_MINUTES, AUTO_SYNC_PUSH_INTERVAL_MINUTES, autoSnapshotDelayMs, autoSyncDelayMs, isGitInternalPath, resolveGitHubClientId, GITHUB_HOST, GitHubAuthProvider, GDRIVE_HOST, resolveGoogleClientId, resolveGoogleClientSecret, GOOGLE_NOT_CONFIGURED_MESSAGE, requireGoogleClientCredentials, pkceChallengeFromVerifier, GoogleAuthProvider, revokeGoogleCredential, publishCredentialKey, publishConnectionStatus, listPublishAccounts, connectGoogleDrive, listGitHubRepositories, listRepoBooks, listGitHubBranches, syncProject, refreshRemoteCopies, isValidRepositoryName, setUpOnlineBackup, sanitizeCloneFolderName, cloneRepository, isSshRemoteUrl, testRemoteAccess, knownForgeTokenUrl, connectGenericHost, parseRemoteOrigin, forgeKindForHost, diagnoseProjectRemote, REPAIR_SNAPSHOT_MESSAGE, repairOnlineBackup, scorchedEarth, listPublishProviders, publishProviderFor, resolvePublishFormat, resolvePublishRequest, runPublish, connectPublishProvider, disconnectPublishCredential, PublishSelectionsStore, readPublishSettings, setPublishProviderConfig };