gutterpress 0.11.17-alpha.2 → 0.11.17-alpha.4

package/dist/{index-c275p061.js → index-gp503ze9.js}

@@ -1,10 +1,15 @@
+import {
+  blackTextToGray
+} from "./index-ht1bcqdd.js";
 import {
   BuildError,
   EXIT_CODES,
   MARGIN_BOX_IGNORED_PROPERTIES,
   getAssetPath,
-  getAssetsDir
-} from "./index-eyaj6nkc.js";
+  getAssetsDir,
+  lastPageMode,
+  parseSize
+} from "./index-q1xqxrh9.js";
 import {
   INSTALL_HINTS,
   execCapture,
@@ -140,7 +145,7 @@ var DTRPG_PRESET = {
   source: {
     files: null
   },
-  print: { signature: 4, reserveLastPage: true },
+  print: { signature: 4, reserveLastPage: true, lastPage: undefined },
   pdfx: {
     flavor: "x1a",
     icc: "profiles/CGATS21_CRPC1.icc",
@@ -158,7 +163,8 @@ var DTRPG_PRESET = {
   },
   lint: {
     enabled: true,
-    configPath: null
+    configPath: null,
+    rules: {}
   },
   validate: {
     enabled: true,
@@ -215,7 +221,7 @@ var BOOK_PRESET = {
   source: {
     files: null
   },
-  print: { signature: 1, reserveLastPage: false },
+  print: { signature: 1, reserveLastPage: false, lastPage: undefined },
   pdfx: {
     flavor: "x1a",
     icc: "profiles/CGATS21_CRPC1.icc",
@@ -233,7 +239,8 @@ var BOOK_PRESET = {
   },
   lint: {
     enabled: true,
-    configPath: null
+    configPath: null,
+    rules: {}
   },
   validate: {
     enabled: true,
@@ -606,6 +613,10 @@ function resolveWithPreset(cliOverrides, manifest, preset) {
   if (legacyPlugins !== undefined) {
     throw new UsageError(pluginsRemovedMessage(legacyPlugins));
   }
+  const lastPage = c.print?.lastPage ?? m.print?.lastPage;
+  if (lastPage !== undefined && lastPage !== "blank" && lastPage !== "short-by-one") {
+    throw new UsageError(`Manifest field \`print.lastPage\` must be "blank" or "short-by-one", got ${JSON.stringify(lastPage)}.`);
+  }
   const rawExtensions = c.extensions ?? m.extensions ?? [];
   if (!Array.isArray(rawExtensions)) {
     throw new UsageError("Manifest field `extensions` must be a list of specifiers.");
@@ -622,7 +633,10 @@ function resolveWithPreset(cliOverrides, manifest, preset) {
     print: mergeShape(c.print, m.print, preset.print),
     page: preset.page ? mergeShape(c.page, m.page, preset.page) : resolveCustomPage(c, m),
     ink: mergeShape(c.ink, m.ink, preset.ink),
-    lint: mergeShape(c.lint, m.lint, preset.lint),
+    lint: {
+      ...mergeShape(c.lint, m.lint, preset.lint),
+      rules: { ...preset.lint.rules, ...m.lint?.rules, ...c.lint?.rules }
+    },
     validate: {
       enabled: c.validate?.enabled ?? m.validate?.enabled ?? preset.validate.enabled,
       checks: { ...preset.validate.checks, ...m.validate?.checks, ...c.validate?.checks },
@@ -1037,7 +1051,7 @@ function resolveContainerShape(name, pluginName, decl) {
     throw new Error(`Plugin "${pluginName}"'s marker "@${name}" has a \`section\` that is not a boolean.`);
   }
   if (decl.section) {
-    for (const field of ["tag", "label", "autoCloseAt"]) {
+    for (const field of ["tag", "label", "autoCloseAt", "selfClosing"]) {
       if (decl[field] !== undefined) {
         throw new Error(`Plugin "${pluginName}"'s marker "@${name}" sets \`section: true\` and \`${field}\` — a section ` + `marker is a core @section, so \`${field}\` does not apply. Remove one of them.`);
       }
@@ -1094,11 +1108,26 @@ function resolveContainerShape(name, pluginName, decl) {
     }
     autoCloseAtEof = decl.autoCloseAt.includes("eof");
   }
+  if (decl.selfClosing !== undefined && typeof decl.selfClosing !== "boolean") {
+    throw new Error(`Plugin "${pluginName}"'s marker "@${name}" has a \`selfClosing\` that is not a boolean.`);
+  }
+  if (decl.selfClosing && decl.autoCloseAt !== undefined) {
+    throw new Error(`Plugin "${pluginName}"'s marker "@${name}" sets \`selfClosing: true\` and \`autoCloseAt\` — a ` + `self-closing marker has no open container to auto-close. Remove one of them.`);
+  }
   if (decl.validate !== undefined && typeof decl.validate !== "function") {
     throw new Error(`Plugin "${pluginName}"'s marker "@${name}" has a \`validate\` that is not a function.`);
   }
   const check = decl.validate ? { validate: decl.validate, validateOwner: pluginName } : {};
-  return { tag, classBase, variants, label, autoCloseAtEof, ...decl.section ? { section: true } : {}, ...check };
+  return {
+    tag,
+    classBase,
+    variants,
+    label,
+    autoCloseAtEof,
+    ...decl.section ? { section: true } : {},
+    ...decl.selfClosing ? { selfClosing: true } : {},
+    ...check
+  };
 }
 function resolveMarkerDeclaration(name, rawDecl, rawRegistry, originOf) {
   const pluginName = originOf.get(name);
@@ -1357,7 +1386,8 @@ function plugin(md, pluginOptions = {}) {
       addClasses(t, baseClass, meta.attrs && meta.attrs.class ? meta.attrs.class : "");
       attachDataAttrs(t, decl.baseKind, variant, meta.attrs || {});
       out.push(t);
-      declaredFrames.push({ kind: decl.baseKind, tag: decl.tag, decl, line: meta.__line });
+      if (!decl.selfClosing)
+        declaredFrames.push({ kind: decl.baseKind, tag: decl.tag, decl, line: meta.__line });
       if (decl.label) {
         const value = meta.attrs && meta.attrs[decl.label.attr];
         if (value) {
@@ -1368,6 +1398,8 @@ function plugin(md, pluginOptions = {}) {
           t.meta.labelled = true;
         }
       }
+      if (decl.selfClosing)
+        out.push(new state.Token("layout_component_close", decl.tag, -1));
     }
     const stack = {
       frames: [],
@@ -1646,7 +1678,7 @@ function plugin(md, pluginOptions = {}) {
               continue;
             }
             if (!closeDeclaredFrame(closeDecl.baseKind)) {
-              warn(state.env, line, "declared_marker_close_without_open", `@${kind} used without an open @${closeDecl.baseKind}; ignoring marker.`, meta);
+              warn(state.env, line, "declared_marker_close_without_open", closeDecl.selfClosing ? `@${kind} is not a marker: @${closeDecl.baseKind} is self-closing and has nothing to close; ignoring marker.` : `@${kind} used without an open @${closeDecl.baseKind}; ignoring marker.`, meta);
             }
             continue;
           }
@@ -2859,7 +2891,8 @@ ${projectCss.trim()}` : null
 `);
   const preloadTags = (opts.preloadImages ?? []).map((href) => `
   <link rel="preload" as="image" href="${href}">`).join("");
-  const printAttrs = (opts.print?.signature && opts.print.signature > 1 ? ` data-gp-signature="${opts.print.signature}"` : "") + (opts.print?.reserveLastPage ? " data-gp-reserve-last-page" : "");
+  const lastPage = opts.print && lastPageMode(opts.print);
+  const printAttrs = (opts.print?.signature && opts.print.signature > 1 ? ` data-gp-signature="${opts.print.signature}"` : "") + (lastPage ? ` data-gp-last-page="${lastPage}"` : "");
   return `<!DOCTYPE html>
 <html lang="en"${printAttrs}>
 <head>
@@ -5641,7 +5674,7 @@ import git from "isomorphic-git";
 // package.json
 var package_default = {
   name: "gutterpress",
-  version: "0.11.17-alpha.2",
+  version: "0.11.17-alpha.4",
   description: "Markdown-to-PDF converter for professional print layout using a native Chromium print engine and Ghostscript.",
   author: "itlackey",
   license: "MPL-2.0",
@@ -5895,7 +5928,8 @@ async function writeBuildFingerprint(input) {
         requestedFlavor: input.pdfx.requestedFlavor,
         resolvedFlavor: input.pdfx.resolvedFlavor,
         iccPath: input.pdfx.iccPath,
-        stripAnnotations: input.pdfx.stripAnnotations
+        stripAnnotations: input.pdfx.stripAnnotations,
+        blackText: input.pdfx.blackText ?? null
       },
       outputDir: input.recordedOutputDir ? path10.resolve(input.recordedOutputDir) : outputDir
     },
@@ -5907,261 +5941,6 @@ async function writeBuildFingerprint(input) {
   return outPath;
 }
 
-// src/lib/black-text-gray.ts
-var MAX_CHANNEL = 0.12;
-var MAX_SPREAD = 0.04;
-function isNearBlack([r, g, b]) {
-  const max = Math.max(r, g, b);
-  return max <= MAX_CHANNEL && max - Math.min(r, g, b) <= MAX_SPREAD;
-}
-var WS = new Set([0, 9, 10, 12, 13, 32]);
-var DELIM = new Set("()<>[]{}/%".split("").map((c) => c.charCodeAt(0)));
-function* tokenize(s) {
-  let i = 0;
-  const n = s.length;
-  while (i < n) {
-    const c = s.charCodeAt(i);
-    if (WS.has(c)) {
-      i++;
-      continue;
-    }
-    const start = i;
-    if (c === 37) {
-      while (i < n && s[i] !== `
-` && s[i] !== "\r")
-        i++;
-      continue;
-    }
-    if (c === 40) {
-      let depth = 0;
-      while (i < n) {
-        const d = s[i++];
-        if (d === "\\")
-          i++;
-        else if (d === "(")
-          depth++;
-        else if (d === ")" && --depth === 0)
-          break;
-      }
-      yield { text: s.slice(start, i), start, end: i, op: false };
-      continue;
-    }
-    if (c === 60 && s[i + 1] === "<") {
-      i += 2;
-      yield { text: "<<", start, end: i, op: false };
-      continue;
-    }
-    if (c === 62 && s[i + 1] === ">") {
-      i += 2;
-      yield { text: ">>", start, end: i, op: false };
-      continue;
-    }
-    if (c === 60) {
-      while (i < n && s[i] !== ">")
-        i++;
-      i++;
-      yield { text: s.slice(start, i), start, end: i, op: false };
-      continue;
-    }
-    if (c === 91 || c === 93 || c === 62 || c === 123 || c === 125 || c === 41) {
-      i++;
-      yield { text: s[start], start, end: i, op: false };
-      continue;
-    }
-    i++;
-    while (i < n && !WS.has(s.charCodeAt(i)) && !DELIM.has(s.charCodeAt(i)))
-      i++;
-    const text = s.slice(start, i);
-    const isOperand = c === 47 || /^[+-]?(\d+\.?\d*|\.\d+)$/.test(text);
-    yield { text, start, end: i, op: !isOperand };
-    if (text === "ID") {
-      const m = /\sEI(?=\s|$)/g;
-      m.lastIndex = i;
-      const hit = m.exec(s);
-      i = hit ? hit.index + hit[0].length : n;
-    }
-  }
-}
-function rewriteBlackText(src) {
-  let fill = null;
-  let stroke = null;
-  const stack = [];
-  let inText = false;
-  let fillDirty = false;
-  let strokeDirty = false;
-  const edits = [];
-  let operands = [];
-  const rgbOf = () => {
-    if (operands.length !== 3)
-      return null;
-    const v = operands.map((t) => Number(t.text));
-    return v.some((x) => Number.isNaN(x)) ? null : { rgb: v, raw: operands.map((t) => t.text).join(" ") };
-  };
-  for (const t of tokenize(src)) {
-    if (!t.op) {
-      operands.push(t);
-      continue;
-    }
-    const op = t.text;
-    switch (op) {
-      case "q":
-        stack.push([fill, stroke]);
-        break;
-      case "Q": {
-        const p = stack.pop();
-        if (p)
-          [fill, stroke] = p;
-        break;
-      }
-      case "BT":
-        inText = true;
-        fillDirty = strokeDirty = false;
-        {
-          let ins = "";
-          if (fill && isNearBlack(fill.rgb)) {
-            ins += " 0 g";
-            fillDirty = true;
-          }
-          if (stroke && isNearBlack(stroke.rgb)) {
-            ins += " 0 G";
-            strokeDirty = true;
-          }
-          if (ins)
-            edits.push({ start: t.end, end: t.end, text: ins });
-        }
-        break;
-      case "ET":
-        if (inText) {
-          let ins = "";
-          if (fillDirty && fill)
-            ins += `${fill.raw} rg `;
-          if (strokeDirty && stroke)
-            ins += `${stroke.raw} RG `;
-          if (ins)
-            edits.push({ start: t.start, end: t.start, text: ins });
-        }
-        inText = false;
-        break;
-      case "rg":
-      case "RG": {
-        const c = rgbOf();
-        const isFill = op === "rg";
-        if (isFill)
-          fill = c;
-        else
-          stroke = c;
-        if (inText && c && isNearBlack(c.rgb)) {
-          edits.push({ start: operands[0].start, end: t.end, text: isFill ? "0 g" : "0 G" });
-          if (isFill)
-            fillDirty = true;
-          else
-            strokeDirty = true;
-        } else if (inText) {
-          if (isFill)
-            fillDirty = false;
-          else
-            strokeDirty = false;
-        }
-        break;
-      }
-      case "g":
-      case "k":
-      case "sc":
-      case "scn":
-      case "cs":
-        fill = null;
-        if (inText)
-          fillDirty = false;
-        break;
-      case "G":
-      case "K":
-      case "SC":
-      case "SCN":
-      case "CS":
-        stroke = null;
-        if (inText)
-          strokeDirty = false;
-        break;
-    }
-    operands = [];
-  }
-  return applyEdits(src, edits);
-}
-function applyEdits(s, edits) {
-  if (!edits.length)
-    return s;
-  let out = "";
-  let pos = 0;
-  for (const e of edits) {
-    out += s.slice(pos, e.start) + e.text;
-    pos = e.end;
-  }
-  return out + s.slice(pos);
-}
-async function blackTextToGray(pdf) {
-  const { PDFDocument, PDFName, PDFRawStream, PDFArray, PDFRef, decodePDFRawStream } = await import("pdf-lib");
-  const doc = await PDFDocument.load(pdf, { updateMetadata: false });
-  const ctx = doc.context;
-  const SKIP = ["Filter", "DecodeParms", "Length"].map((k) => PDFName.of(k));
-  let changed = false;
-  const decode = (s) => {
-    try {
-      return Buffer.from(decodePDFRawStream(s).decode()).toString("latin1");
-    } catch {
-      return null;
-    }
-  };
-  const replace = (ref, old, text) => {
-    const entries = {};
-    for (const [k, v] of old.dict.entries())
-      if (!SKIP.includes(k))
-        entries[k.decodeText()] = v;
-    ctx.assign(ref, ctx.flateStream(Buffer.from(text, "latin1"), entries));
-    changed = true;
-  };
-  for (const [ref, obj] of ctx.enumerateIndirectObjects()) {
-    if (!(obj instanceof PDFRawStream))
-      continue;
-    if (obj.dict.get(PDFName.of("Subtype")) !== PDFName.of("Form"))
-      continue;
-    const text = decode(obj);
-    if (text === null)
-      continue;
-    const next = rewriteBlackText(text);
-    if (next !== text)
-      replace(ref, obj, next);
-  }
-  for (const page of doc.getPages()) {
-    const contents = page.node.Contents();
-    const refs = [];
-    if (contents instanceof PDFArray) {
-      for (let i = 0;i < contents.size(); i++) {
-        const r = contents.get(i);
-        if (r instanceof PDFRef)
-          refs.push(r);
-      }
-    } else if (contents instanceof PDFRawStream) {
-      const r = page.node.get(PDFName.of("Contents"));
-      if (r instanceof PDFRef)
-        refs.push(r);
-    }
-    const streams = refs.map((r) => ctx.lookup(r));
-    if (!refs.length || !streams.every((s) => s instanceof PDFRawStream))
-      continue;
-    const parts = streams.map((s) => decode(s));
-    if (parts.some((p) => p === null))
-      continue;
-    const joined = parts.join(`
-`);
-    const next = rewriteBlackText(joined);
-    if (next === joined)
-      continue;
-    replace(refs[0], streams[0], next);
-    page.node.set(PDFName.of("Contents"), refs[0]);
-  }
-  return changed ? doc.save({ updateFieldAppearances: false }) : pdf;
-}
-
 // src/lib/validation-exec.ts
 import { existsSync as existsSync12 } from "node:fs";
 import { dirname as dirname4, join as join4, resolve as resolve8 } from "node:path";
@@ -6766,6 +6545,32 @@ function getImagePixelSize(page, name, timeoutMs = 2000) {
     }
   });
 }
+var PAINT_OPS = new Set([
+  "stroke",
+  "closeStroke",
+  "fill",
+  "eoFill",
+  "fillStroke",
+  "eoFillStroke",
+  "closeFillStroke",
+  "closeEOFillStroke",
+  "shadingFill",
+  "paintImageXObject",
+  "paintInlineImageXObject",
+  "paintImageXObjectRepeat",
+  "paintImageMaskXObject",
+  "paintImageMaskXObjectGroup",
+  "paintImageMaskXObjectRepeat",
+  "paintSolidColorImageMask",
+  "showText",
+  "showSpacedText",
+  "nextLineShowText",
+  "nextLineSetSpacingShowText"
+].map((name) => OPS[name]).filter((op) => op !== undefined));
+async function pageHasMarks(doc, pageNum) {
+  const ops = await (await doc.getPage(pageNum)).getOperatorList();
+  return ops.fnArray.some((fn, i) => fn === OPS.constructPath ? PAINT_OPS.has(ops.argsArray[i][0]) : PAINT_OPS.has(fn));
+}
 async function getImageResolutions(doc) {
   const { imagesByPage } = await getOpPass(doc);
   const out = [];
@@ -7269,8 +7074,100 @@ var check8 = {
 };
 registerCheck(check8);
 
-// src/checks/pdf/bookmarks.ts
+// src/checks/pdf/black-text.ts
+import { readFile as readFile15 } from "node:fs/promises";
 var check9 = {
+  id: "pdf.print.black-text",
+  name: "Black Text",
+  description: "Warns when text at or below 24pt is painted in a dark four-colour mix (black, or a near-black colour such as a dark brown)",
+  category: "pdf",
+  phase: "post-build",
+  enabledWhen: (config) => config.pdfx.blackText === "k-only",
+  async run(ctx) {
+    if (!ctx.pdfPath)
+      return [];
+    try {
+      const { findRichBlackText, LARGE_TEXT_PT } = await import("./black-text-gray-7dz61456.js");
+      const found = await findRichBlackText(await readFile15(ctx.pdfPath));
+      if (found.runs === 0)
+        return [];
+      return [
+        finding(check9.id, {
+          severity: "warning",
+          message: `Dark four-colour text at ${LARGE_TEXT_PT}pt or smaller on page(s) ${found.pages.join(", ")}.`,
+          file: ctx.pdfPath,
+          detail: "Small text printed with all four inks can look fuzzy if the plates are slightly out of register, which is why print vendors such as DriveThruRPG want small black text on the black plate alone. `pdfx.blackText: k-only` already does that for near-black text; this text is either a dark colour (for example a dark brown, which keeps its colour) or painted in a way the build cannot rewrite (an image or a pattern). To print it on the black plate, make the text black (#000). If the colour is intended, set `lint.rules: { pdf.print.black-text: off }` in manifest.yaml.",
+          code: "rich-black-text",
+          data: { runs: found.runs, pages: found.pages }
+        })
+      ];
+    } catch {
+      return [
+        inspectionFailed(check9.id, "Could not inspect the PDF's text colours.", {
+          file: ctx.pdfPath
+        })
+      ];
+    }
+  }
+};
+registerCheck(check9);
+
+// src/checks/pdf/signature.ts
+var check10 = {
+  id: "pdf.print.signature",
+  name: "Signature",
+  description: "Fails when the interior's page count does not fit the print signature (a multiple of it ending on a blank page, or one short of a multiple)",
+  category: "pdf",
+  phase: "post-build",
+  enabledWhen: (config) => config.print.signature > 1,
+  async run(ctx) {
+    if (!ctx.pdfPath)
+      return [];
+    const doc = await loadPdf(ctx.pdfPath);
+    if (!doc) {
+      return [inspectionFailed(check10.id, "Could not parse the PDF's page count.", { file: ctx.pdfPath })];
+    }
+    const size = ctx.config.print.signature;
+    const pages = doc.numPages;
+    if ((pages + 1) % size === 0)
+      return [];
+    const data = { pages, signature: size };
+    if (pages % size !== 0) {
+      return [
+        finding(check10.id, {
+          severity: "error",
+          message: `Page count ${pages} does not fit a signature of ${size}: it must be a multiple of ${size}, or one short of one.`,
+          file: ctx.pdfPath,
+          detail: "Set `print.signature` in the manifest and rebuild; the build pads the interior for you.",
+          code: "signature-page-count",
+          data
+        })
+      ];
+    }
+    if (!lastPageMode(ctx.config.print))
+      return [];
+    try {
+      if (!await pageHasMarks(doc, pages))
+        return [];
+    } catch {
+      return [inspectionFailed(check10.id, "Could not read the last page.", { file: ctx.pdfPath })];
+    }
+    return [
+      finding(check10.id, {
+        severity: "error",
+        message: `The last page (${pages}) has content, but the printer needs it blank for its own information.`,
+        file: ctx.pdfPath,
+        detail: "The build adds that page for you (`print.lastPage: blank`, or `short-by-one` to stop a page short of a multiple " + `of ${size} and let the printer add it). Check that the interior was built with this manifest, and that nothing in it ` + "forces content onto the final page.",
+        code: "signature-last-page",
+        data
+      })
+    ];
+  }
+};
+registerCheck(check10);
+
+// src/checks/pdf/bookmarks.ts
+var check11 = {
   id: "pdf.nav.bookmarks",
   name: "Bookmarks",
   description: "Checks for PDF outline (bookmarks) tree",
@@ -7284,14 +7181,14 @@ var check9 = {
     const doc = await loadPdf(ctx.pdfPath);
     if (!doc) {
       return [
-        inspectionFailed(check9.id, "Could not inspect PDF for bookmarks.", {
+        inspectionFailed(check11.id, "Could not inspect PDF for bookmarks.", {
           file: ctx.pdfPath
         })
       ];
     }
     if (await getOutlineCount(doc) === 0) {
       return [
-        finding(check9.id, {
+        finding(check11.id, {
           severity: "warning",
           message: "PDF does not contain bookmarks (outline tree).",
           file: ctx.pdfPath
@@ -7301,10 +7198,10 @@ var check9 = {
     return [];
   }
 };
-registerCheck(check9);
+registerCheck(check11);
 
 // src/checks/pdf/toc-links.ts
-var check10 = {
+var check12 = {
   id: "pdf.nav.toc-links",
   name: "TOC Links",
   description: "Detects link annotations on TOC pages",
@@ -7319,7 +7216,7 @@ var check10 = {
     if (!doc) {
       return [
         {
-          checkId: check10.id,
+          checkId: check12.id,
           severity: "warning",
           message: "Could not inspect PDF for TOC links.",
           file: ctx.pdfPath
@@ -7330,7 +7227,7 @@ var check10 = {
     if (!hasLinks) {
       return [
         {
-          checkId: check10.id,
+          checkId: check12.id,
           severity: "warning",
           message: "No link annotations found in PDF (expected for TOC).",
           file: ctx.pdfPath
@@ -7340,10 +7237,10 @@ var check10 = {
     return [];
   }
 };
-registerCheck(check10);
+registerCheck(check12);
 
 // src/checks/pdf/cross-refs.ts
-var check11 = {
+var check13 = {
   id: "pdf.nav.cross-refs",
   name: "Cross References",
   description: "Counts and verifies internal link annotations",
@@ -7356,7 +7253,7 @@ var check11 = {
     if (!doc) {
       return [
         {
-          checkId: check11.id,
+          checkId: check13.id,
           severity: "info",
           message: "Could not inspect PDF for cross-references.",
           file: ctx.pdfPath
@@ -7366,7 +7263,7 @@ var check11 = {
     const linkCount = await countLinkAnnotations(doc);
     return [
       {
-        checkId: check11.id,
+        checkId: check13.id,
         severity: "info",
         message: `PDF contains ${linkCount} internal link annotation${linkCount !== 1 ? "s" : ""}.`,
         file: ctx.pdfPath
@@ -7374,10 +7271,10 @@ var check11 = {
     ];
   }
 };
-registerCheck(check11);
+registerCheck(check13);
 
 // src/checks/pdf/page-labels.ts
-var check12 = {
+var check14 = {
   id: "pdf.nav.page-labels",
   name: "Page Labels",
   description: "Verifies PDF page labels / folio numbering",
@@ -7392,7 +7289,7 @@ var check12 = {
     const labels = await getPageLabels(doc);
     return [
       {
-        checkId: check12.id,
+        checkId: check14.id,
         severity: "info",
         message: labels && labels.length > 0 ? "PDF contains page labels." : "PDF does not contain explicit page labels.",
         file: ctx.pdfPath
@@ -7400,10 +7297,10 @@ var check12 = {
     ];
   }
 };
-registerCheck(check12);
+registerCheck(check14);
 
 // src/checks/pdf/image-resolution.ts
-var check13 = {
+var check15 = {
   id: "pdf.print.image-resolution",
   name: "Image Resolution",
   description: "Checks DPI of images embedded in the PDF",
@@ -7430,7 +7327,7 @@ var check13 = {
       lowResPages.sort((a, b) => a - b);
       return [
         {
-          checkId: check13.id,
+          checkId: check15.id,
           severity: "warning",
           message: `Low-resolution images (below ${minDpi} DPI) found on pages: ${lowResPages.join(", ")}`,
           file: ctx.pdfPath
@@ -7440,10 +7337,10 @@ var check13 = {
     return [];
   }
 };
-registerCheck(check13);
+registerCheck(check15);
 
 // src/checks/pdf/transparency.ts
-var check14 = {
+var check16 = {
   id: "pdf.print.transparency",
   name: "Transparency",
   description: "Checks for transparency markers (/Transparency, /SMask, /BM) in the PDF",
@@ -7465,7 +7362,7 @@ var check14 = {
     if (found.length > 0) {
       return [
         {
-          checkId: check14.id,
+          checkId: check16.id,
           severity: "warning",
           message: `Transparency detected in PDF: ${found.join(", ")}. This may cause issues with some printers.`,
           file: ctx.pdfPath
@@ -7475,7 +7372,7 @@ var check14 = {
     return [];
   }
 };
-registerCheck(check14);
+registerCheck(check16);
 
 // src/checks/pdf/bleed.ts
 function findBox(bytes, box) {
@@ -7485,7 +7382,7 @@ function findBox(bytes, box) {
     return null;
   return [Number(m[1]), Number(m[2]), Number(m[3]), Number(m[4])];
 }
-var check15 = {
+var check17 = {
   id: "pdf.print.bleed",
   name: "Bleed Box",
   description: "Compares MediaBox vs TrimBox/BleedBox to verify bleed area",
@@ -7499,7 +7396,7 @@ var check15 = {
     const bytes = await readPdfBytes(ctx.pdfPath).catch(() => "");
     if (!bytes) {
       return [
-        inspectionFailed(check15.id, "Could not inspect PDF for bleed boxes.", {
+        inspectionFailed(check17.id, "Could not inspect PDF for bleed boxes.", {
           file: ctx.pdfPath
         })
       ];
@@ -7509,14 +7406,14 @@ var check15 = {
     const bleed = findBox(bytes, "BleedBox");
     if (!media) {
       return [
-        inspectionFailed(check15.id, "Could not parse MediaBox from PDF.", {
+        inspectionFailed(check17.id, "Could not parse MediaBox from PDF.", {
           file: ctx.pdfPath
         })
       ];
     }
     if (!trim && !bleed) {
       return [
-        finding(check15.id, {
+        finding(check17.id, {
           severity: "warning",
           message: "No TrimBox or BleedBox found. Bleed area cannot be verified.",
           file: ctx.pdfPath
@@ -7529,7 +7426,7 @@ var check15 = {
       const bleedSize = ctx.config.validate.pdf.bleedSize;
       if (mediaW - trimW < bleedSize * 2 * 0.9) {
         return [
-          finding(check15.id, {
+          finding(check17.id, {
             severity: "warning",
             message: `Bleed area appears insufficient. Expected at least ${bleedSize}pt on each side.`,
             file: ctx.pdfPath
@@ -7540,10 +7437,10 @@ var check15 = {
     return [];
   }
 };
-registerCheck(check15);
+registerCheck(check17);
 
 // src/checks/pdf/pdfx-metadata.ts
-var check16 = {
+var check18 = {
   id: "pdf.print.pdfx-metadata",
   name: "PDF/X Metadata",
   description: "Verifies PDF/X DOCINFO metadata via qpdf JSON",
@@ -7562,30 +7459,30 @@ var check16 = {
       const objects = parseQpdfObjectsJson(stdout);
       if (!objects) {
         return [
-          inspectionFailed(check16.id, "Unable to parse qpdf JSON output for PDF/X metadata checks.", { file: ctx.pdfPath })
+          inspectionFailed(check18.id, "Unable to parse qpdf JSON output for PDF/X metadata checks.", { file: ctx.pdfPath })
         ];
       }
-      return getPdfxMetadataIssues(objects, ctx.config.pdfx.flavor).map((message) => finding(check16.id, {
+      return getPdfxMetadataIssues(objects, ctx.config.pdfx.flavor).map((message) => finding(check18.id, {
         severity: "error",
         message,
         file: ctx.pdfPath
       }));
     } catch {
       return [
-        inspectionFailed(check16.id, "Failed to inspect PDF objects with qpdf for PDF/X metadata.", { file: ctx.pdfPath })
+        inspectionFailed(check18.id, "Failed to inspect PDF objects with qpdf for PDF/X metadata.", { file: ctx.pdfPath })
       ];
     }
   }
 };
-registerCheck(check16);
+registerCheck(check18);
 
 // src/checks/source/htmlhint.ts
 import { existsSync as existsSync9 } from "node:fs";
-import { readFile as readFile15 } from "node:fs/promises";
+import { readFile as readFile16 } from "node:fs/promises";
 import htmlhint from "htmlhint";
 var { HTMLHint } = htmlhint;
 var CONFIG_NAMES2 = [".htmlhintrc"];
-var check17 = {
+var check19 = {
   id: "source.htmlhint",
   name: "HTMLHint",
   description: "Runs htmlhint with project config to validate generated HTML",
@@ -7601,11 +7498,11 @@ var check17 = {
     const resolvedConfig = findConfigFile(ctx.inputDir, CONFIG_NAMES2, configPath);
     if (!resolvedConfig && !configPath)
       return [];
-    const ruleset = resolvedConfig ? JSON.parse(await readFile15(resolvedConfig, "utf8")) : HTMLHint.defaultRuleset;
-    const html = await readFile15(ctx.htmlPath, "utf8");
+    const ruleset = resolvedConfig ? JSON.parse(await readFile16(resolvedConfig, "utf8")) : HTMLHint.defaultRuleset;
+    const html = await readFile16(ctx.htmlPath, "utf8");
     const messages = HTMLHint.verify(html, ruleset);
     return messages.map((m) => ({
-      checkId: check17.id,
+      checkId: check19.id,
       severity: m.type === "error" ? "error" : "warning",
       message: `${m.rule.id}: ${m.message}`,
       file: ctx.htmlPath,
@@ -7614,13 +7511,35 @@ var check17 = {
     }));
   }
 };
-registerCheck(check17);
+registerCheck(check19);
 
 // src/checks/source/stylelint.ts
-import { readFile as readFile16 } from "node:fs/promises";
+import { readFile as readFile17 } from "node:fs/promises";
 
 // src/lib/printsafe.ts
 import postcss2 from "postcss";
+
+// src/lib/lint-rules.ts
+function ruleLevel(rules, id) {
+  const v = rules?.[id];
+  if (v === "off" || v === false)
+    return "off";
+  if (v === "warn" || v === "warning")
+    return "warn";
+  if (v === "error")
+    return "error";
+  return;
+}
+var DIRECTIVE = /^\s*gutterpress-disable-next-line\s+(.*?)\s*$/;
+function parseDisableDirective(commentText) {
+  const m = DIRECTIVE.exec(commentText);
+  if (!m)
+    return null;
+  const ids = m[1].split(/\s--(?:\s|$)/)[0].split(/[\s,]+/).filter(Boolean);
+  return ids.length > 0 ? ids : null;
+}
+
+// src/lib/printsafe.ts
 var ruleRemoteUrls = "printsafe/no-remote-urls";
 var ruleRiskyProps = "printsafe/no-risky-print-effects";
 var ruleSyntax = "printsafe/syntax-error";
@@ -7645,9 +7564,11 @@ var riskyProperties = new Set([
   "animation",
   "animation-name",
   "transition",
-  "will-change",
-  "clip-path"
+  "will-change"
 ]);
+function isRasterizingClipPath(decl) {
+  return decl.prop.toLowerCase() === "clip-path" && /\burl\(/i.test(decl.value);
+}
 var marginBoxAtRuleNames = new Set([
   "top-left-corner",
   "top-left",
@@ -7774,7 +7695,34 @@ function nodeLoc(node) {
     column: node.source?.start?.column ?? 1
   };
 }
-function checkCss(css, from) {
+function checkCss(css, from, options = {}) {
+  return filterFindings(checkCssRaw(css, from), css, options.rules);
+}
+function filterFindings(findings, css, rules) {
+  const silenced = new Map;
+  for (const m of css.matchAll(/\/\*([\s\S]*?)\*\//g)) {
+    const ids = parseDisableDirective(m[1]);
+    if (!ids)
+      continue;
+    const endLine = css.slice(0, m.index + m[0].length).split(`
+`).length;
+    const set = silenced.get(endLine + 1) ?? new Set;
+    for (const id of ids)
+      set.add(id);
+    silenced.set(endLine + 1, set);
+  }
+  const out = [];
+  for (const f of findings) {
+    if (silenced.get(f.line)?.has(f.rule))
+      continue;
+    const level = ruleLevel(rules, f.rule);
+    if (level === "off")
+      continue;
+    out.push(level === "warn" ? { ...f, severity: "warning" } : level === "error" ? { ...f, severity: "error" } : f);
+  }
+  return out;
+}
+function checkCssRaw(css, from) {
   let root;
   try {
     root = postcss2.parse(css, from ? { from } : undefined);
@@ -7823,6 +7771,13 @@ function checkCss(css, from) {
         message: `Property is high-risk for print/PDF: 'filter' rasterizes its subtree to a 300 DPI bitmap in the printed PDF (text becomes unselectable, unsearchable, and inaccessible), and it dominates build time (~90% measured; 57.0s -> 6.2s over 60pp when scoped — see ENGINE.md §10). Scope it to the smallest possible selector. It also means the render-parity gate cannot see a text-only change inside it (docs/render-parity-gate.md, "Known blind spot").`,
         ...nodeLoc(decl)
       });
+    } else if (isRasterizingClipPath(decl)) {
+      warnings.push({
+        rule: ruleRiskyProps,
+        severity: "warning",
+        message: `Property is high-risk for print/PDF (can force rasterization): ${decl.prop} with url(...) references an SVG mask. Use a basic shape (polygon(), inset(), circle(), ellipse(), path()) instead — those print as vector clips.`,
+        ...nodeLoc(decl)
+      });
     } else if (riskyProperties.has(prop)) {
       warnings.push({
         rule: ruleRiskyProps,
@@ -7876,7 +7831,7 @@ function checkCss(css, from) {
 }
 
 // src/checks/source/stylelint.ts
-var check18 = {
+var check20 = {
   id: "source.stylelint",
   name: "Print-safety CSS",
   description: "Checks CSS for print-safety issues (remote URLs, rasterizing effects, and page-layer containment)",
@@ -7893,19 +7848,19 @@ var check18 = {
     for (const file of files) {
       let css;
       try {
-        css = await readFile16(file, "utf8");
+        css = await readFile17(file, "utf8");
       } catch (err) {
         results.push({
-          checkId: check18.id,
+          checkId: check20.id,
           severity: "error",
           message: `Cannot read stylesheet: ${err instanceof Error ? err.message : String(err)}`,
           file
         });
         continue;
       }
-      for (const w of checkCss(css, file)) {
+      for (const w of checkCss(css, file, { rules: ctx.config.lint.rules })) {
         results.push({
-          checkId: check18.id,
+          checkId: check20.id,
           severity: w.severity,
           message: `${w.rule}: ${w.message}`,
           file,
@@ -7917,15 +7872,15 @@ var check18 = {
     return results;
   }
 };
-registerCheck(check18);
+registerCheck(check20);
 
 // src/checks/source/css-ownership.ts
-import { readFile as readFile17 } from "node:fs/promises";
+import { readFile as readFile18 } from "node:fs/promises";
 import postcss3 from "postcss";
 import { parse as parseYaml3 } from "yaml";
 var CONFIG_NAMES3 = [".gutterpress/css-contract.yaml", ".gutterpress/css-contract.yml"];
 async function loadContract(configPath) {
-  const raw = await readFile17(configPath, "utf8");
+  const raw = await readFile18(configPath, "utf8");
   const parsed = parseYaml3(raw);
   if (parsed && typeof parsed === "object")
     return parsed;
@@ -8038,7 +7993,7 @@ function checkOwnership(root, file, maps) {
   });
   return out;
 }
-var check19 = {
+var check21 = {
   id: "source.css-ownership",
   name: "CSS ownership contract",
   description: "Checks an optional per-project CSS ownership contract (.gutterpress/css-contract.yaml): which file may declare which properties/at-rules, and which selectors must never appear unscoped.",
@@ -8061,7 +8016,7 @@ var check19 = {
     } catch (err) {
       return [
         {
-          checkId: check19.id,
+          checkId: check21.id,
           severity: "error",
           message: `Failed to parse CSS ownership contract "${configPath}": ${err instanceof Error ? err.message : String(err)}`,
           file: configPath
@@ -8076,7 +8031,7 @@ var check19 = {
         continue;
       let css;
       try {
-        css = await readFile17(absFile, "utf8");
+        css = await readFile18(absFile, "utf8");
       } catch {
         continue;
       }
@@ -8103,7 +8058,7 @@ var check19 = {
       }
       for (const v of violations) {
         results.push({
-          checkId: check19.id,
+          checkId: check21.id,
           severity: "warning",
           message: v.message,
           file: absFile,
@@ -8115,14 +8070,14 @@ var check19 = {
     return results;
   }
 };
-registerCheck(check19);
+registerCheck(check21);
 
 // src/checks/source/local-refs.ts
 import { existsSync as existsSync10 } from "node:fs";
 import { dirname as dirname3, resolve as resolve6 } from "node:path";
 
 // src/checks/source/local-ref-parser.ts
-import { readFile as readFile18 } from "node:fs/promises";
+import { readFile as readFile19 } from "node:fs/promises";
 function newlineOffsets(content) {
   const offsets = [];
   for (let i = 0;i < content.length; i++)
@@ -8191,7 +8146,7 @@ async function* renderedLocalRefs(ctx, checkId, results) {
   for (const file of files) {
     let refs;
     try {
-      refs = collectRenderedLocalRefs(await readFile18(file, "utf8"));
+      refs = collectRenderedLocalRefs(await readFile19(file, "utf8"));
     } catch {
       results.push(inspectionFailed(checkId, `Could not read source file: ${file}`, { file }));
       continue;
@@ -8202,7 +8157,7 @@ async function* renderedLocalRefs(ctx, checkId, results) {
 }
 
 // src/checks/source/local-refs.ts
-var check20 = {
+var check22 = {
   id: "source.links.local-refs",
   name: "Local Markdown References",
   description: "Checks local markdown links and image refs resolve on disk",
@@ -8210,12 +8165,12 @@ var check20 = {
   phase: "pre-build",
   async run(ctx) {
     const results = [];
-    for await (const { ref, kind, line, file } of renderedLocalRefs(ctx, check20.id, results)) {
+    for await (const { ref, kind, line, file } of renderedLocalRefs(ctx, check22.id, results)) {
       if (isNonFilesystemRef(ref))
         continue;
       const escape = kind === "image" ? proseImageRefError(ref, ctx.inputDir) : null;
       if (escape) {
-        results.push(finding(check20.id, {
+        results.push(finding(check22.id, {
           severity: "error",
           message: escape,
           file,
@@ -8225,7 +8180,7 @@ var check20 = {
       }
       if (localRefExists(ref, kind, file, ctx.inputDir))
         continue;
-      results.push(finding(check20.id, {
+      results.push(finding(check22.id, {
         severity: kind === "image" ? "warning" : "error",
         code: kind === "image" ? "missing-image-placeholder" : undefined,
         message: kind === "image" ? `Local image not found; build will substitute a magenta placeholder: ${ref}` : `Local reference not found: ${ref}`,
@@ -8250,7 +8205,7 @@ function localRefExists(ref, kind, sourceFile, projectRoot) {
       return existsSync10(fileRelative);
   }
 }
-registerCheck(check20);
+registerCheck(check22);
 
 // src/lib/build-staging.ts
 import path11 from "node:path";
@@ -8516,7 +8471,7 @@ async function createStageRoot() {
 }
 
 // src/checks/source/dangling-links.ts
-var check21 = {
+var check23 = {
   id: "source.links.dangling",
   name: "Dangling Links",
   description: "Flags relative links the printed book cannot open (their href is dropped at print time)",
@@ -8524,10 +8479,10 @@ var check21 = {
   phase: "pre-build",
   async run(ctx) {
     const results = [];
-    for await (const { ref, kind, line, file } of renderedLocalRefs(ctx, check21.id, results)) {
+    for await (const { ref, kind, line, file } of renderedLocalRefs(ctx, check23.id, results)) {
       if (kind !== "link" || isPrintResolvableHref(ref))
         continue;
-      results.push(finding(check21.id, {
+      results.push(finding(check23.id, {
         severity: "warning",
         code: "dangling-link",
         data: { ref },
@@ -8539,11 +8494,11 @@ var check21 = {
     return results;
   }
 };
-registerCheck(check21);
+registerCheck(check23);
 
 // src/checks/source/accessibility-alt-text.ts
-import { readFile as readFile19 } from "node:fs/promises";
-var check22 = {
+import { readFile as readFile20 } from "node:fs/promises";
+var check24 = {
   id: "source.accessibility.alt-text",
   name: "Image Alt Text",
   description: "Checks markdown images include non-empty alt text",
@@ -8556,7 +8511,7 @@ var check22 = {
     const results = [];
     for (const file of files) {
       try {
-        const content = await readFile19(file, "utf8");
+        const content = await readFile20(file, "utf8");
         const lines = content.split(`
 `);
         let inFence = false;
@@ -8572,7 +8527,7 @@ var check22 = {
             if (alt.trim())
               continue;
             results.push({
-              checkId: check22.id,
+              checkId: check24.id,
               severity: "warning",
               message: "Image is missing alt text",
               file,
@@ -8597,11 +8552,11 @@ function extractImageAlts(line) {
   }
   return alts;
 }
-registerCheck(check22);
+registerCheck(check24);
 
 // src/checks/source/accessibility-heading-order.ts
-import { readFile as readFile20 } from "node:fs/promises";
-var check23 = {
+import { readFile as readFile21 } from "node:fs/promises";
+var check25 = {
   id: "source.accessibility.heading-order",
   name: "Heading Order",
   description: "Checks markdown heading levels do not jump by more than one",
@@ -8614,11 +8569,12 @@ var check23 = {
     const results = [];
     for (const file of files) {
       try {
-        const content = await readFile20(file, "utf8");
+        const content = await readFile21(file, "utf8");
         const lines = content.split(`
 `);
         let inFence = false;
         let prevLevel;
+        let silencedLine = -1;
         for (let i = 0;i < lines.length; i++) {
           const line = lines[i] ?? "";
           if (/^\s*(```|~~~)/.test(line)) {
@@ -8627,13 +8583,18 @@ var check23 = {
           }
           if (inFence)
             continue;
+          const comment = /^\s*<!--(.*)-->\s*$/.exec(line);
+          if (comment && parseDisableDirective(comment[1])?.includes(check25.id)) {
+            silencedLine = i + 1;
+            continue;
+          }
           const match = line.match(/^(#{1,6})\s+\S/);
           if (!match)
             continue;
           const level = match[1].length;
-          if (prevLevel != null && level > prevLevel + 1) {
+          if (prevLevel != null && level > prevLevel + 1 && i !== silencedLine) {
             results.push({
-              checkId: check23.id,
+              checkId: check25.id,
               severity: "warning",
               message: `Heading level jump from h${prevLevel} to h${level}`,
               file,
@@ -8647,11 +8608,11 @@ var check23 = {
     return results;
   }
 };
-registerCheck(check23);
+registerCheck(check25);
 
 // src/checks/source/layout-markers.ts
-import { readFile as readFile21 } from "node:fs/promises";
-var check24 = {
+import { readFile as readFile22 } from "node:fs/promises";
+var check26 = {
   id: "source.markdown.layout-markers",
   name: "Layout Markers",
   description: "Reports @page/@section/@chapter marker arguments Gutterpress could not understand, plus any unknown gp-* class",
@@ -8663,16 +8624,16 @@ var check24 = {
       return [];
     const results = [];
     const plugins = await loadPlugins(ctx.config.extensions, ctx.inputDir, (ref, error2) => {
-      results.push(inspectionFailed(check24.id, `Plugin "${ref}" could not be loaded, so markers it defines were not checked: ${error2.message}`));
+      results.push(inspectionFailed(check26.id, `Plugin "${ref}" could not be loaded, so markers it defines were not checked: ${error2.message}`));
     });
     const md = createMarkdownRenderer(plugins);
     for (const file of files) {
       try {
-        const content = await readFile21(file, "utf8");
+        const content = await readFile22(file, "utf8");
         const env = {};
         md.render(content, env);
         for (const w of env.layoutWarnings ?? []) {
-          results.push(finding(check24.id, {
+          results.push(finding(check26.id, {
             severity: w.severity ?? "warning",
             message: w.message,
             file,
@@ -8681,16 +8642,16 @@ var check24 = {
           }));
         }
       } catch (error2) {
-        results.push(inspectionFailed(check24.id, `Could not check layout markers in ${file}: ${error2 instanceof Error ? error2.message : String(error2)}`, { file }));
+        results.push(inspectionFailed(check26.id, `Could not check layout markers in ${file}: ${error2 instanceof Error ? error2.message : String(error2)}`, { file }));
       }
     }
     return results;
   }
 };
-registerCheck(check24);
+registerCheck(check26);
 
 // src/checks/source/merge-markers.ts
-import { readFile as readFile22 } from "node:fs/promises";
+import { readFile as readFile23 } from "node:fs/promises";
 import path12 from "node:path";
 
 // src/checks/asset/extensions.ts
@@ -8720,7 +8681,7 @@ var CLOSE_SENTINEL = ">>>>>>> online version";
 function withoutOnlineTag(relPath) {
   return relPath.replace(/\.online(?=\.[^./]*$|$)/, "");
 }
-var check25 = {
+var check27 = {
   id: "source.sync.merge-markers",
   name: "Combined Versions",
   description: "Finds passages and files still holding two versions (yours and the online copy) after a sync",
@@ -8732,9 +8693,9 @@ var check25 = {
     for (const file of textFiles) {
       let content;
       try {
-        content = await readFile22(file, "utf8");
+        content = await readFile23(file, "utf8");
       } catch {
-        results.push(inspectionFailed(check25.id, `Could not read source file: ${file}`, { file }));
+        results.push(inspectionFailed(check27.id, `Could not read source file: ${file}`, { file }));
         continue;
       }
       if (!content.includes(OPEN_SENTINEL) && !content.includes(CLOSE_SENTINEL))
@@ -8746,7 +8707,7 @@ var check25 = {
         const line = lines[i].endsWith("\r") ? lines[i].slice(0, -1) : lines[i];
         if (line === OPEN_SENTINEL) {
           inBlock = true;
-          results.push(finding(check25.id, {
+          results.push(finding(check27.id, {
             severity: "error",
             code: "two-versions-passage",
             message: "This passage has two versions (yours and the online copy) — keep what you want, then delete the marker lines.",
@@ -8755,7 +8716,7 @@ var check25 = {
           }));
         } else if (line === CLOSE_SENTINEL) {
           if (!inBlock) {
-            results.push(finding(check25.id, {
+            results.push(finding(check27.id, {
               severity: "error",
               code: "leftover-version-marker",
               message: "This marker line is left over from combining two versions — delete it.",
@@ -8776,7 +8737,7 @@ var check25 = {
       });
       for (const sibling of siblings.sort()) {
         const rel = path12.relative(ctx.inputDir, sibling).split(path12.sep).join("/");
-        results.push(finding(check25.id, {
+        results.push(finding(check27.id, {
           severity: "warning",
           code: "kept-both-versions",
           message: `Two versions of ${withoutOnlineTag(rel)} are in your book — keep the one you want, then delete the other.`,
@@ -8784,18 +8745,18 @@ var check25 = {
         }));
       }
     } catch (error2) {
-      results.push(inspectionFailed(check25.id, `Could not scan for kept-both files: ${error2 instanceof Error ? error2.message : String(error2)}`));
+      results.push(inspectionFailed(check27.id, `Could not scan for kept-both files: ${error2 instanceof Error ? error2.message : String(error2)}`));
     }
     return results;
   }
 };
-registerCheck(check25);
+registerCheck(check27);
 
 // src/checks/asset/image-file-size.ts
 import { stat as stat4 } from "node:fs/promises";
 
 // src/lib/image-inspect.ts
-import { stat as stat3, readFile as readFile23 } from "node:fs/promises";
+import { stat as stat3, readFile as readFile24 } from "node:fs/promises";
 var DEFAULT_DPI = 72;
 var cache = new Map;
 async function inspectImage(path13) {
@@ -8810,7 +8771,7 @@ async function inspectImage(path13) {
     return hit.info;
   let info2 = null;
   try {
-    const buf = await readFile23(path13);
+    const buf = await readFile24(path13);
     info2 = parseImage(buf);
   } catch {
     info2 = null;
@@ -9015,7 +8976,7 @@ async function collectImageFiles(dirs, exts, ignore2 = ASSET_SCAN_IGNORE_GLOBS)
 }
 
 // src/checks/asset/image-file-size.ts
-var check26 = {
+var check28 = {
   id: "asset.image.file-size",
   name: "Image File Size",
   description: "Checks that image files do not exceed the maximum size limit",
@@ -9036,14 +8997,14 @@ var check26 = {
         if (info2.size > maxSize) {
           const sizeMb = (info2.size / 1e6).toFixed(1);
           const maxMb = (maxSize / 1e6).toFixed(1);
-          results.push(finding(check26.id, {
+          results.push(finding(check28.id, {
             severity: "warning",
             message: `Image file too large: ${sizeMb}MB (max ${maxMb}MB)`,
             file
           }));
         }
       } catch {
-        results.push(inspectionFailed(check26.id, `Could not stat image file: ${file}`, {
+        results.push(inspectionFailed(check28.id, `Could not stat image file: ${file}`, {
           file
         }));
       }
@@ -9051,10 +9012,10 @@ var check26 = {
     return results;
   }
 };
-registerCheck(check26);
+registerCheck(check28);
 
 // src/checks/asset/image-resolution.ts
-var check27 = {
+var check29 = {
   id: "asset.image.resolution",
   name: "Image Resolution",
   description: "Checks source image DPI from embedded density metadata",
@@ -9076,7 +9037,7 @@ var check27 = {
       const { xDpi, yDpi } = info2;
       if (xDpi > 0 && yDpi > 0 && (xDpi < minDpi || yDpi < minDpi)) {
         results.push({
-          checkId: check27.id,
+          checkId: check29.id,
           severity: "warning",
           message: `Image resolution too low: ${xDpi}x${yDpi} DPI (minimum ${minDpi} DPI)`,
           file
@@ -9086,7 +9047,7 @@ var check27 = {
     return results;
   }
 };
-registerCheck(check27);
+registerCheck(check29);
 
 // src/checks/asset/image-color-space.ts
 var LABEL = {
@@ -9094,7 +9055,7 @@ var LABEL = {
   gray: "Gray",
   cmyk: "CMYK"
 };
-var check28 = {
+var check30 = {
   id: "asset.image.color-space",
   name: "Image Color Space",
   description: "Validates image color spaces against allowed list",
@@ -9115,7 +9076,7 @@ var check28 = {
       const cs = info2?.colorSpace;
       if (cs && !allowedLower.has(cs)) {
         results.push({
-          checkId: check28.id,
+          checkId: check30.id,
           severity: "warning",
           message: `Image uses ${LABEL[cs] ?? cs} color space (allowed: ${allowed.join(", ")})`,
           file
@@ -9125,10 +9086,10 @@ var check28 = {
     return results;
   }
 };
-registerCheck(check28);
+registerCheck(check30);
 
 // src/checks/asset/image-alpha.ts
-var check29 = {
+var check31 = {
   id: "asset.image.alpha-channel",
   name: "Image Alpha Channel",
   description: "Checks for alpha channels in PNG/TIFF images",
@@ -9146,7 +9107,7 @@ var check29 = {
       const info2 = await inspectImage(file);
       if (info2?.hasAlpha) {
         results.push({
-          checkId: check29.id,
+          checkId: check31.id,
           severity: "warning",
           message: "Image contains alpha channel, which may cause print issues",
           file
@@ -9156,10 +9117,10 @@ var check29 = {
     return results;
   }
 };
-registerCheck(check29);
+registerCheck(check31);
 
 // src/checks/asset/image-tac.ts
-var check30 = {
+var check32 = {
   id: "asset.image.tac-raster",
   name: "Image TAC (Raster)",
   description: "Rasterizes and checks TAC per image using Ghostscript",
@@ -9178,7 +9139,7 @@ var check30 = {
     const ghostscript = await resolveGhostscript();
     if (!ghostscript) {
       return [
-        inspectionFailed(check30.id, "Could not inspect image ink coverage: Ghostscript executable not found")
+        inspectionFailed(check32.id, "Could not inspect image ink coverage: Ghostscript executable not found")
       ];
     }
     for (const file of files) {
@@ -9196,7 +9157,7 @@ var check30 = {
           if (nums.length === 4 && nums.every((n) => Number.isFinite(n))) {
             const tac = (nums[0] + nums[1] + nums[2] + nums[3]) * 100;
             if (tac > maxTac) {
-              results.push(finding(check30.id, {
+              results.push(finding(check32.id, {
                 severity: "warning",
                 message: `Image TAC exceeds limit: ${tac.toFixed(1)}% (max ${maxTac}%)`,
                 file,
@@ -9208,16 +9169,16 @@ var check30 = {
           }
         }
       } catch {
-        results.push(inspectionFailed(check30.id, `Could not inspect image ink coverage: ${file}`, { file }));
+        results.push(inspectionFailed(check32.id, `Could not inspect image ink coverage: ${file}`, { file }));
       }
     }
     return results;
   }
 };
-registerCheck(check30);
+registerCheck(check32);
 
 // src/checks/asset/approved-fonts.ts
-var check31 = {
+var check33 = {
   id: "asset.font.approved-files",
   name: "Approved Font Files",
   description: "Checks font files against the approved file patterns",
@@ -9256,7 +9217,7 @@ var check31 = {
     for (const font of allFonts) {
       if (!approvedFonts.has(font)) {
         results.push({
-          checkId: check31.id,
+          checkId: check33.id,
           severity: "warning",
           message: "Font file not in approved list",
           file: font
@@ -9266,7 +9227,7 @@ var check31 = {
     return results;
   }
 };
-registerCheck(check31);
+registerCheck(check33);
 
 // src/checks/asset/font-license.ts
 import { existsSync as existsSync11 } from "node:fs";
@@ -9281,7 +9242,7 @@ var LICENSE_NAMES = [
   "OFL-1.1.txt",
   "COPYING"
 ];
-var check32 = {
+var check34 = {
   id: "asset.font.license",
   name: "Font License",
   description: "Checks for license files in font directories",
@@ -9308,7 +9269,7 @@ var check32 = {
       const hasLicense = LICENSE_NAMES.some((name) => existsSync11(resolve7(fontDir, name)));
       if (!hasLicense) {
         results.push({
-          checkId: check32.id,
+          checkId: check34.id,
           severity: "warning",
           message: `No font license file found in directory`,
           file: fontDir
@@ -9318,10 +9279,10 @@ var check32 = {
     return results;
   }
 };
-registerCheck(check32);
+registerCheck(check34);
 
 // src/checks/heuristic/text-density.ts
-var check33 = {
+var check35 = {
   id: "heuristic.whitespace.text-density",
   name: "Text Density",
   description: "Checks characters-per-page ratio",
@@ -9350,7 +9311,7 @@ var check33 = {
     });
     if (lowPages.length > 0) {
       results.push({
-        checkId: check33.id,
+        checkId: check35.id,
         severity: "info",
         message: `Low text density on pages: ${lowPages.join(", ")} (below ${range.min} chars)`,
         file: ctx.pdfPath
@@ -9358,7 +9319,7 @@ var check33 = {
     }
     if (highPages.length > 0) {
       results.push({
-        checkId: check33.id,
+        checkId: check35.id,
         severity: "info",
         message: `High text density on pages: ${highPages.join(", ")} (above ${range.max} chars)`,
         file: ctx.pdfPath
@@ -9367,11 +9328,11 @@ var check33 = {
     return results;
   }
 };
-registerCheck(check33);
+registerCheck(check35);
 
 // src/checks/heuristic/section-density.ts
-import { readFile as readFile24 } from "node:fs/promises";
-var check34 = {
+import { readFile as readFile25 } from "node:fs/promises";
+var check36 = {
   id: "heuristic.chunking.section-density",
   name: "Section Density",
   description: "Checks heading/paragraph/callout density from source Markdown",
@@ -9387,7 +9348,7 @@ var check34 = {
     const results = [];
     for (const file of files) {
       try {
-        const content = await readFile24(file, "utf8");
+        const content = await readFile25(file, "utf8");
         const lines = content.split(`
 `);
         let currentSectionStart = 0;
@@ -9397,7 +9358,7 @@ var check34 = {
           const line = lines[i];
           if (/^#{1,6}\s/.test(line)) {
             if (paragraphCount > maxParas) {
-              results.push(finding(check34.id, {
+              results.push(finding(check36.id, {
                 severity: "info",
                 message: `Section has ${paragraphCount} paragraphs (max recommended: ${maxParas})`,
                 file,
@@ -9417,7 +9378,7 @@ var check34 = {
           }
         }
         if (paragraphCount > maxParas) {
-          results.push(finding(check34.id, {
+          results.push(finding(check36.id, {
             severity: "info",
             message: `Section has ${paragraphCount} paragraphs (max recommended: ${maxParas})`,
             file,
@@ -9425,7 +9386,7 @@ var check34 = {
           }));
         }
       } catch {
-        results.push(inspectionFailed(check34.id, `Could not read source file: ${file}`, {
+        results.push(inspectionFailed(check36.id, `Could not read source file: ${file}`, {
           file
         }));
       }
@@ -9433,10 +9394,10 @@ var check34 = {
     return results;
   }
 };
-registerCheck(check34);
+registerCheck(check36);
 
 // src/checks/heuristic/layer-count.ts
-var check35 = {
+var check37 = {
   id: "heuristic.decoration.layer-count",
   name: "Layer Count",
   description: "Counts image objects per page",
@@ -9461,7 +9422,7 @@ var check35 = {
       heavyPages.sort((a, b) => a - b);
       return [
         {
-          checkId: check35.id,
+          checkId: check37.id,
           severity: "info",
           message: `Pages with many image layers (>${maxLayers}): ${heavyPages.join(", ")}`,
           file: ctx.pdfPath
@@ -9471,10 +9432,10 @@ var check35 = {
     return [];
   }
 };
-registerCheck(check35);
+registerCheck(check37);
 
 // src/checks/heuristic/placement-variance.ts
-var check36 = {
+var check38 = {
   id: "heuristic.layout.placement-variance",
   name: "Placement Variance",
   description: "Analyzes text baseline coordinates for layout consistency",
@@ -9492,7 +9453,7 @@ var check36 = {
     const uniqueX = new Set(positions.map((p) => Math.round(p.x)));
     return [
       {
-        checkId: check36.id,
+        checkId: check38.id,
         severity: "info",
         message: `Layout analysis: ${uniqueX.size} unique horizontal text positions across ${positions.length} text blocks.`,
         file: ctx.pdfPath
@@ -9500,7 +9461,7 @@ var check36 = {
     ];
   }
 };
-registerCheck(check36);
+registerCheck(check38);
 
 // src/checks/runner.ts
 function getCheckSeverityOverride(checkId, config) {
@@ -9530,25 +9491,32 @@ async function runChecks(ctx, opts = {}) {
   }
   const release = retainPdfCache();
   try {
-    for (const check37 of checks2) {
+    for (const check39 of checks2) {
       try {
-        const results = await check37.run(ctx);
-        const severityOverride = getCheckSeverityOverride(check37.id, ctx.config);
+        let results = await check39.run(ctx);
+        const severityOverride = getCheckSeverityOverride(check39.id, ctx.config);
         if (severityOverride) {
           for (const r of results) {
             r.severity = severityOverride;
           }
         }
+        const lintLevel = ruleLevel(ctx.config.lint.rules, check39.id);
+        if (lintLevel === "off")
+          results = [];
+        else if (lintLevel) {
+          for (const r of results)
+            r.severity = lintLevel === "warn" ? "warning" : "error";
+        }
         if (results.length === 0) {
-          passed.push(check37.id);
+          passed.push(check39.id);
         } else {
           allResults.push(...results);
         }
       } catch (err) {
         allResults.push({
-          checkId: check37.id,
+          checkId: check39.id,
           severity: "error",
-          message: `Check "${check37.id}" threw: ${err instanceof Error ? err.message : String(err)}`
+          message: `Check "${check39.id}" threw: ${err instanceof Error ? err.message : String(err)}`
         });
       }
     }
@@ -9588,15 +9556,15 @@ function emptyReport() {
 async function checkToolAvailability(config, opts = {}) {
   const { checks: checks2 } = selectChecks(opts, config);
   const toolToChecks = new Map;
-  for (const check37 of checks2) {
-    if (!check37.requiredTools?.length)
+  for (const check39 of checks2) {
+    if (!check39.requiredTools?.length)
       continue;
-    for (const tool of check37.requiredTools) {
+    for (const tool of check39.requiredTools) {
       const existing = toolToChecks.get(tool);
       if (existing) {
-        existing.push(check37.id);
+        existing.push(check39.id);
       } else {
-        toolToChecks.set(tool, [check37.id]);
+        toolToChecks.set(tool, [check39.id]);
       }
     }
   }
@@ -9612,11 +9580,11 @@ async function checkToolAvailability(config, opts = {}) {
   const missing = results.filter((r) => !r.found).map((r) => r.tool);
   const missingSet = new Set(missing);
   const skippedChecks = [];
-  for (const check37 of checks2) {
-    if (!check37.requiredTools?.length)
+  for (const check39 of checks2) {
+    if (!check39.requiredTools?.length)
       continue;
-    if (check37.requiredTools.some((t) => missingSet.has(t))) {
-      skippedChecks.push(check37.id);
+    if (check39.requiredTools.some((t) => missingSet.has(t))) {
+      skippedChecks.push(check39.id);
     }
   }
   return { available, missing, skippedChecks, toolToChecks };
@@ -9889,7 +9857,7 @@ async function executeValidation(args) {
   };
   if (args.fix) {
     const selected = selectChecks(runnerOptions, config).checks;
-    if (selected.some((check37) => check37.id === MARKDOWNLINT_CHECK_ID)) {
+    if (selected.some((check39) => check39.id === MARKDOWNLINT_CHECK_ID)) {
       await applyMarkdownlintFixes(context);
     } else {
       log.warn(`--fix: ${MARKDOWNLINT_CHECK_ID} is not part of this run — no files were fixed.`);
@@ -10241,7 +10209,8 @@ class HtmlOutput {
         requestedFlavor: null,
         resolvedFlavor: config.pdfx.flavor,
         iccPath: null,
-        stripAnnotations: null
+        stripAnnotations: null,
+        blackText: null
       }
     }, `Wrote: ${path13.join(outDir, BOOK_HTML)}`, { htmlPath: htmlFile, pdfPath: null });
   }
@@ -10261,12 +10230,12 @@ class PdfOutput {
       const rawPdf = pdfxMode ? path13.join(stage, "raw.pdf") : path13.resolve(pdfFile);
       await fsp2.mkdir(path13.dirname(path13.resolve(pdfFile)), { recursive: true });
       log.info("Rendering HTML to PDF via the Gutterpress engine (native Chromium pagination)");
-      const { buildNativePdf } = await import("./engine-5jzhjjvv.js");
+      const { buildNativePdf } = await import("./engine-3xqgm82d.js");
       const engineDiagnostics = await buildNativePdf(htmlFile, rawPdf, {
         title: config.title,
         author: config.authors.length > 0 ? config.authors.join(", ") : undefined,
         signature: config.print.signature,
-        reserveLastPage: config.print.reserveLastPage,
+        lastPage: lastPageMode(config.print),
         allowShrink: opts.allowShrink
       }, browser);
       for (const d of engineDiagnostics)
@@ -10325,7 +10294,8 @@ class PdfOutput {
           requestedFlavor: pdfxMode ?? null,
           resolvedFlavor: config.pdfx.flavor,
           iccPath: effectiveIccPath,
-          stripAnnotations: shouldStripAnnotations
+          stripAnnotations: shouldStripAnnotations,
+          blackText: pdfxMode ? config.pdfx.blackText : null
         }
       }, `Wrote: ${reportedPdf}`, { htmlPath: htmlFile, pdfPath: reportedPdf }, pdfName, engineDiagnostics);
     } finally {
@@ -10366,7 +10336,7 @@ async function runBuild(opts) {
 import path16 from "path";
 import { tmpdir } from "os";
 import { randomBytes as randomBytes2 } from "crypto";
-import { readdir as readdir5, readFile as readFile25, writeFile as writeFile6 } from "node:fs/promises";
+import { readdir as readdir5, readFile as readFile26, writeFile as writeFile6 } from "node:fs/promises";
 
 // src/utils/file-utils.ts
 import { promises as fs3 } from "fs";
@@ -10915,7 +10885,7 @@ async function cleanupOrphanTempDirs() {
     const dir = path16.join(TEMP_DIR_BASE, entry);
     const pidFile = path16.join(dir, PID_FILE_NAME);
     try {
-      const raw = await readFile25(pidFile, "utf8");
+      const raw = await readFile26(pidFile, "utf8");
       const pid = parseInt(raw.trim(), 10);
       if (!isProcessAlive(pid)) {
         debug(`Removing orphan temp dir ${dir} (pid ${pid} not alive)`);
@@ -11022,7 +10992,7 @@ function createServerState(inputPath, tempDir, config, options) {
 import http from "node:http";
 import net from "node:net";
 import { createHash as createHash5, randomUUID as randomUUID3 } from "node:crypto";
-import { readFile as readFile26, stat as stat5 } from "node:fs/promises";
+import { readFile as readFile27, stat as stat5 } from "node:fs/promises";
 import path17 from "path";
 import { WebSocket, WebSocketServer } from "ws";
 
@@ -11121,7 +11091,7 @@ async function serveStatic(absPath, res, cacheControl = "no-store", extraHeaders
   }
   let data;
   try {
-    data = await readFile26(filePath);
+    data = await readFile27(filePath);
   } catch {
     res.writeHead(404);
     res.end("Not Found");
@@ -11170,7 +11140,7 @@ async function serveRevalidatedStatic(req, absPath, res, validators) {
   let data;
   if (!validator || validator.stamp !== stamp) {
     try {
-      data = await readFile26(absPath);
+      data = await readFile27(absPath);
     } catch {
       await serveStatic(absPath, res);
       return;
@@ -11482,7 +11452,7 @@ async function startPreviewServer(options) {
 import { platform, arch, release } from "node:os";
 
 // src/lib/remote-auth/token-store.ts
-import { chmod, mkdir as mkdir7, readFile as readFile27, rename as rename4, writeFile as writeFile7 } from "node:fs/promises";
+import { chmod, mkdir as mkdir7, readFile as readFile28, rename as rename4, writeFile as writeFile7 } from "node:fs/promises";
 import os3 from "node:os";
 import path18 from "node:path";
 function credentialHostKey(hostOrUrl) {
@@ -11526,7 +11496,7 @@ class FileTokenStore {
   async read() {
     let raw;
     try {
-      raw = await readFile27(this.filePath, "utf8");
+      raw = await readFile28(this.filePath, "utf8");
     } catch (e) {
       if (e?.code === "ENOENT") {
         return { version: 1, credentials: {} };
@@ -11726,9 +11696,169 @@ async function getSystemDiagnostics() {
   };
 }
 // src/lib/project-scaffold.ts
-import { access, copyFile, cp as cp2, mkdir as mkdir8, readdir as readdir6, readFile as readFile28, stat as stat6, writeFile as writeFile8 } from "node:fs/promises";
-import { constants as FS, existsSync as existsSync13 } from "node:fs";
+import { access, copyFile, cp as cp2, mkdir as mkdir9, readdir as readdir6, readFile as readFile30, stat as stat6, writeFile as writeFile9 } from "node:fs/promises";
+import { constants as FS, existsSync as existsSync14 } from "node:fs";
+import path20 from "node:path";
+
+// src/lib/page-size.ts
+import { existsSync as existsSync13 } from "node:fs";
+import { mkdir as mkdir8, readFile as readFile29, writeFile as writeFile8 } from "node:fs/promises";
 import path19 from "node:path";
+import postcss4 from "postcss";
+import { Scalar as Scalar2 } from "yaml";
+function isPositivePoints(value) {
+  return typeof value === "number" && Number.isFinite(value) && value > 0;
+}
+function writePageBounds(doc, page) {
+  const out = { width: page.width, height: page.height };
+  const tolerance = page.tolerance ?? numberAt(doc, ["page", "tolerance"]);
+  if (tolerance !== undefined)
+    out.tolerance = tolerance;
+  doc.set("page", doc.createNode(out));
+}
+function numberAt(doc, keyPath) {
+  const v = doc.getIn(keyPath);
+  return isPositivePoints(v) ? v : undefined;
+}
+function pageSizeForChoice(choice) {
+  if (!PRESET_IDS.includes(choice.preset)) {
+    throw new UsageError(`Unknown preset "${choice.preset}". Choose one of: ${PRESET_IDS.join(", ")}.`);
+  }
+  if (choice.preset === "custom") {
+    const { page } = choice;
+    if (!page || !isPositivePoints(page.width) || !isPositivePoints(page.height)) {
+      throw new UsageError("A custom page size needs a positive width and height in points (72pt = 1in).");
+    }
+    return { width: page.width, height: page.height };
+  }
+  const base = PRESETS[choice.preset].page;
+  return { width: base.width, height: base.height };
+}
+var round3 = (n) => Math.round(n * 1000) / 1000;
+function cssLength(pt) {
+  const inches = round3(pt / 72);
+  return Math.abs(inches * 72 - pt) < 0.000001 ? `${inches}in` : `${round3(pt)}pt`;
+}
+function formatPageSize(page) {
+  return `${cssLength(page.width)} ${cssLength(page.height)}`;
+}
+var SAME_SIZE_PT = 0.5;
+function sameSize(a, b) {
+  return Math.abs(a.width - b.width) < SAME_SIZE_PT && Math.abs(a.height - b.height) < SAME_SIZE_PT;
+}
+function plainPageRules(root) {
+  const rules = [];
+  root.walkAtRules("page", (rule) => {
+    if (rule.params.trim() === "")
+      rules.push(rule);
+  });
+  return rules;
+}
+function sizeDeclsOf(rule) {
+  const decls = [];
+  rule.each((node) => {
+    if (node.type === "decl" && node.prop.toLowerCase() === "size")
+      decls.push(node);
+  });
+  return decls;
+}
+function readPageSizeFromCss(css) {
+  let root;
+  try {
+    root = postcss4.parse(css);
+  } catch {
+    return null;
+  }
+  const decls = plainPageRules(root).flatMap(sizeDeclsOf);
+  const last = decls[decls.length - 1];
+  return last ? parseSize(last.value) ?? null : null;
+}
+function setPageSizeInCss(css, page) {
+  const root = postcss4.parse(css);
+  const decls = plainPageRules(root).flatMap(sizeDeclsOf);
+  const last = decls[decls.length - 1];
+  const value = formatPageSize(page);
+  if (last) {
+    const current = parseSize(last.value);
+    if (current && sameSize(current, page))
+      return css;
+    last.value = value;
+    return root.toString();
+  }
+  const rule = `@page {
+  size: ${value};
+}
+`;
+  if (css.trim() === "")
+    return css + rule;
+  return `${css}${css.endsWith(`
+`) ? "" : `
+`}
+${rule}`;
+}
+async function ownStylesheets(projectDir) {
+  const rels = await resolveActiveStyles(projectDir).catch(() => []);
+  return rels.map((rel) => path19.resolve(projectDir, rel)).filter((abs) => {
+    const inside = path19.relative(projectDir, abs);
+    return !inside.startsWith("..") && !path19.isAbsolute(inside) && existsSync13(abs);
+  });
+}
+var relDisplay2 = (projectDir, abs) => path19.relative(projectDir, abs).split(path19.sep).join("/");
+async function findCssSize(projectDir, sheets) {
+  let found = null;
+  for (const file of sheets) {
+    const size = readPageSizeFromCss(await readFile29(file, "utf8"));
+    if (size)
+      found = { file, size };
+  }
+  return found;
+}
+async function readPageSetup(projectDir) {
+  const { doc } = await loadManifestDoc(projectDir);
+  const declared = doc.get("preset");
+  const preset = declared === undefined || declared === null ? "dtrpg" : PRESET_IDS.includes(String(declared)) ? declared : null;
+  const base = preset ? PRESETS[preset].page : null;
+  const width = numberAt(doc, ["page", "width"]) ?? base?.width;
+  const height = numberAt(doc, ["page", "height"]) ?? base?.height;
+  const tolerance = numberAt(doc, ["page", "tolerance"]) ?? base?.tolerance ?? 0.5;
+  const found = await findCssSize(projectDir, await ownStylesheets(projectDir));
+  return {
+    preset,
+    bounds: width !== undefined && height !== undefined ? { width, height, tolerance } : null,
+    css: found ? { ...found.size, file: relDisplay2(projectDir, found.file) } : null
+  };
+}
+async function setPageSetup(projectDir, choice) {
+  const size = pageSizeForChoice(choice);
+  const sheets = await ownStylesheets(projectDir);
+  const found = await findCssSize(projectDir, sheets);
+  const newSheet = path19.join(projectDir, "styles", "book.css");
+  const target = found?.file ?? sheets[sheets.length - 1] ?? newSheet;
+  const before = existsSync13(target) ? await readFile29(target, "utf8") : "";
+  let after;
+  try {
+    after = setPageSizeInCss(before, size);
+  } catch (e) {
+    throw new UsageError(`Could not update the page size: ${relDisplay2(projectDir, target)} has a CSS error ` + `(${e instanceof Error ? e.message : String(e)}). Fix it, then try again.`);
+  }
+  const { doc, file } = await loadManifestDoc(projectDir);
+  doc.set("preset", choice.preset);
+  if (choice.preset === "custom")
+    writePageBounds(doc, size);
+  else
+    doc.delete("page");
+  if (target === newSheet && !sheets.includes(newSheet)) {
+    ensureSeq(doc, "styles").add(new Scalar2("styles/book.css"));
+  }
+  await writeManifestDoc(file, doc);
+  if (after !== before || !existsSync13(target)) {
+    await mkdir8(path19.dirname(target), { recursive: true });
+    await writeFile8(target, after, "utf8");
+  }
+  return readPageSetup(projectDir);
+}
+
+// src/lib/project-scaffold.ts
 function starterOverridesCss() {
   return `/**
  * Your book's own styles.
@@ -11757,9 +11887,6 @@ function escapeYamlScalar(value) {
   return value.replace(/\\/g, "\\\\").replace(/"/g, "\\\"");
 }
 var DEFAULT_AUTHOR = "Anonymous";
-function isPositivePoints(value) {
-  return typeof value === "number" && Number.isFinite(value) && value > 0;
-}
 function requirePreset(preset, customPage) {
   if (!preset || !PRESET_IDS.includes(preset)) {
     const got = preset ? ` (got "${preset}")` : "";
@@ -11801,7 +11928,7 @@ async function scaffoldProject(options) {
     throw new CreateProjectErrorImpl("invalid-name", `Could not derive a valid folder name from "${name}".`);
   }
   const parentDir = options.parentDir;
-  if (!parentDir || !path19.isAbsolute(parentDir)) {
+  if (!parentDir || !path20.isAbsolute(parentDir)) {
     throw new CreateProjectErrorImpl("parent-not-writable", "The save location must be an absolute path.");
   }
   try {
@@ -11809,7 +11936,7 @@ async function scaffoldProject(options) {
   } catch {
     throw new CreateProjectErrorImpl("parent-not-writable", `The chosen save location can't be written to: ${parentDir}`);
   }
-  const projectDir = path19.join(parentDir, folderName);
+  const projectDir = path20.join(parentDir, folderName);
   let targetExists = true;
   try {
     await access(projectDir, FS.F_OK);
@@ -11824,23 +11951,23 @@ async function scaffoldProject(options) {
   const preset = customTemplateDir && options.preset === undefined ? undefined : requirePreset(options.preset, options.customPage);
   const targets = preset ? resolveScaffoldTargets(options.targets, preset) : undefined;
   try {
-    await mkdir8(projectDir, { recursive: true });
+    await mkdir9(projectDir, { recursive: true });
     if (customTemplateDir) {
       const entries = await readdir6(customTemplateDir, { withFileTypes: true });
       for (const entry of entries) {
         if (entry.name === ".gutterpress-template.json")
           continue;
-        await cp2(path19.join(customTemplateDir, entry.name), path19.join(projectDir, entry.name), { recursive: true });
+        await cp2(path20.join(customTemplateDir, entry.name), path20.join(projectDir, entry.name), { recursive: true });
       }
-      await mkdir8(path19.join(projectDir, "assets"), { recursive: true });
+      await mkdir9(path20.join(projectDir, "assets"), { recursive: true });
     } else {
       const tplManifest = await getAssetPath(`templates/${template}/manifest.yaml`);
       const tplChapter = await getAssetPath(`templates/${template}/chapter-01.md`);
-      await mkdir8(path19.join(projectDir, "assets"), { recursive: true });
-      await copyFile(tplManifest, path19.join(projectDir, MANIFEST_FILENAMES[0]));
-      await copyFile(tplChapter, path19.join(projectDir, "chapter-01.md"));
-      await mkdir8(path19.join(projectDir, "styles"), { recursive: true });
-      await writeFile8(path19.join(projectDir, "styles", "book.css"), starterOverridesCss(), "utf8");
+      await mkdir9(path20.join(projectDir, "assets"), { recursive: true });
+      await copyFile(tplManifest, path20.join(projectDir, MANIFEST_FILENAMES[0]));
+      await copyFile(tplChapter, path20.join(projectDir, "chapter-01.md"));
+      await mkdir9(path20.join(projectDir, "styles"), { recursive: true });
+      await writeFile9(path20.join(projectDir, "styles", "book.css"), starterOverridesCss(), "utf8");
     }
   } catch (e) {
     throw new CreateProjectErrorImpl("scaffold-io", `Could not create the book files: ${e instanceof Error ? e.message : String(e)}`);
@@ -11850,34 +11977,26 @@ async function scaffoldProject(options) {
   } catch (e) {
     throw new CreateProjectErrorImpl("scaffold-io", `Could not write .gitignore: ${e instanceof Error ? e.message : String(e)}`);
   }
-  const manifestPath = MANIFEST_FILENAMES.map((name2) => path19.join(projectDir, name2)).find(existsSync13) ?? path19.join(projectDir, MANIFEST_FILENAMES[0]);
+  const manifestPath = MANIFEST_FILENAMES.map((name2) => path20.join(projectDir, name2)).find(existsSync14) ?? path20.join(projectDir, MANIFEST_FILENAMES[0]);
   const author = (options.author ?? "").trim() || DEFAULT_AUTHOR;
   const substitutions = {
     "{{TITLE}}": escapeYamlScalar(name),
     "{{AUTHOR}}": escapeYamlScalar(author)
   };
-  let openFile = path19.join(projectDir, "chapter-01.md");
+  let openFile = path20.join(projectDir, "chapter-01.md");
   try {
     await fillTemplateFile(manifestPath, substitutions);
     if (preset) {
       const { doc, file } = await loadManifestDoc(projectDir);
       doc.set("preset", preset);
       doc.set("targets", doc.createNode(targets ?? []));
-      if (options.customPage) {
-        const page = {
-          width: options.customPage.width,
-          height: options.customPage.height
-        };
-        if (options.customPage.tolerance !== undefined) {
-          page.tolerance = options.customPage.tolerance;
-        }
-        doc.set("page", doc.createNode(page));
-      }
+      if (options.customPage)
+        writePageBounds(doc, options.customPage);
       await writeManifestDoc(file, doc);
     }
     const firstSource = await firstSourceFile(manifestPath);
     if (firstSource)
-      openFile = path19.join(projectDir, firstSource);
+      openFile = path20.join(projectDir, firstSource);
     await fillTemplateFile(openFile, { "{{TITLE}}": name }).catch(() => {});
   } catch (e) {
     throw new CreateProjectErrorImpl("scaffold-io", `Could not finalize the book files: ${e instanceof Error ? e.message : String(e)}`);
@@ -11899,7 +12018,7 @@ async function scaffoldProject(options) {
       versionHistory = "none";
       const { findEnclosingRepoDir } = await import("./project-source-ekcyp63q.js");
       const enclosingRepoDir = await findEnclosingRepoDir(projectDir);
-      versionHistoryError = enclosingRepoDir ? `This book was added to ${path19.basename(enclosingRepoDir)}'s shared version history; save a snapshot to record it.` : e instanceof Error ? e.message : String(e);
+      versionHistoryError = enclosingRepoDir ? `This book was added to ${path20.basename(enclosingRepoDir)}'s shared version history; save a snapshot to record it.` : e instanceof Error ? e.message : String(e);
     }
   }
   const result = {
@@ -11919,7 +12038,7 @@ function prettifyFolderName(base) {
 }
 async function adoptFolder(options) {
   const dir = options.dir;
-  if (typeof dir !== "string" || !path19.isAbsolute(dir)) {
+  if (typeof dir !== "string" || !path20.isAbsolute(dir)) {
     throw new CreateProjectErrorImpl("scaffold-io", "An absolute folder path is required.");
   }
   let st;
@@ -11931,11 +12050,11 @@ async function adoptFolder(options) {
   if (!st.isDirectory()) {
     throw new CreateProjectErrorImpl("scaffold-io", `Not a folder: ${dir}`);
   }
-  if (MANIFEST_FILENAMES.some((name) => existsSync13(path19.join(dir, name)))) {
+  if (MANIFEST_FILENAMES.some((name) => existsSync14(path20.join(dir, name)))) {
     throw new CreateProjectErrorImpl("target-exists", "This folder is already a Gutterpress book.");
   }
   const template = options.template ?? "book";
-  const title = (options.title ?? "").trim() || prettifyFolderName(path19.basename(dir));
+  const title = (options.title ?? "").trim() || prettifyFolderName(path20.basename(dir));
   const author = (options.author ?? "").trim() || DEFAULT_AUTHOR;
   let mdFiles;
   try {
@@ -11943,14 +12062,14 @@ async function adoptFolder(options) {
     mdFiles = entries.filter((e) => e.isFile() && /\.(md|markdown)$/i.test(e.name)).map((e) => e.name).sort((a, b) => a.localeCompare(b));
     if (mdFiles.length === 0) {
       const tplChapter = await getAssetPath(`templates/${template}/chapter-01.md`);
-      await copyFile(tplChapter, path19.join(dir, "chapter-01.md"));
-      await fillTemplateFile(path19.join(dir, "chapter-01.md"), { "{{TITLE}}": title }).catch(() => {});
+      await copyFile(tplChapter, path20.join(dir, "chapter-01.md"));
+      await fillTemplateFile(path20.join(dir, "chapter-01.md"), { "{{TITLE}}": title }).catch(() => {});
       mdFiles = ["chapter-01.md"];
     }
-    await mkdir8(path19.join(dir, "styles"), { recursive: true });
-    const bookCssPath = path19.join(dir, "styles", "book.css");
-    if (!existsSync13(bookCssPath)) {
-      await writeFile8(bookCssPath, starterOverridesCss(), "utf8");
+    await mkdir9(path20.join(dir, "styles"), { recursive: true });
+    const bookCssPath = path20.join(dir, "styles", "book.css");
+    if (!existsSync14(bookCssPath)) {
+      await writeFile9(bookCssPath, starterOverridesCss(), "utf8");
     }
     const filesYaml = mdFiles.map((f) => `    - "${escapeYamlScalar(f)}"`).join(`
 `);
@@ -11966,8 +12085,8 @@ ${filesYaml}
 styles:
   - styles/book.css
 `;
-    await writeFile8(path19.join(dir, MANIFEST_FILENAMES[0]), manifest, "utf8");
-    await mkdir8(path19.join(dir, "assets"), { recursive: true });
+    await writeFile9(path20.join(dir, MANIFEST_FILENAMES[0]), manifest, "utf8");
+    await mkdir9(path20.join(dir, "assets"), { recursive: true });
     await ensureProjectGitignore(dir);
   } catch (e) {
     if (e instanceof CreateProjectErrorImpl)
@@ -11994,8 +12113,8 @@ styles:
   }
   const result = {
     projectDir: dir,
-    manifestPath: path19.join(dir, MANIFEST_FILENAMES[0]),
-    openFile: path19.join(dir, mdFiles[0]),
+    manifestPath: path20.join(dir, MANIFEST_FILENAMES[0]),
+    openFile: path20.join(dir, mdFiles[0]),
     versionHistory
   };
   if (versionHistoryError !== undefined)
@@ -12005,7 +12124,7 @@ styles:
 async function firstSourceFile(manifestPath) {
   let text;
   try {
-    text = await readFile28(manifestPath, "utf8");
+    text = await readFile30(manifestPath, "utf8");
   } catch {
     return;
   }
@@ -12017,16 +12136,16 @@ async function firstSourceFile(manifestPath) {
   return m ? m[1].trim() : undefined;
 }
 async function fillTemplateFile(filePath, substitutions) {
-  let text = await readFile28(filePath, "utf8");
+  let text = await readFile30(filePath, "utf8");
   for (const [token, value] of Object.entries(substitutions)) {
     text = text.split(token).join(value);
   }
-  await writeFile8(filePath, text, "utf8");
+  await writeFile9(filePath, text, "utf8");
 }
 // src/lib/extension-scaffold.ts
-import { access as access2, mkdir as mkdir9, readFile as readFile29, writeFile as writeFile9 } from "node:fs/promises";
+import { access as access2, mkdir as mkdir10, readFile as readFile31, writeFile as writeFile10 } from "node:fs/promises";
 import { constants as FS2 } from "node:fs";
-import path20 from "node:path";
+import path21 from "node:path";
 var EXTENSION_KINDS = ["plugin", "theme"];
 var RESERVED_PREFIX = "gp-";
 var TEMPLATE_FILES = {
@@ -12104,7 +12223,7 @@ async function scaffoldExtension(options) {
   }
   const prefix = resolveExtensionPrefix(slug, options.prefix);
   const parentDir = options.parentDir;
-  if (!parentDir || !path20.isAbsolute(parentDir)) {
+  if (!parentDir || !path21.isAbsolute(parentDir)) {
     throw new ExtensionScaffoldError("parent-not-writable", "The save location must be an absolute path.");
   }
   try {
@@ -12112,7 +12231,7 @@ async function scaffoldExtension(options) {
   } catch {
     throw new ExtensionScaffoldError("parent-not-writable", `The chosen save location can't be written to: ${parentDir}`);
   }
-  const extensionDir = path20.join(parentDir, slug);
+  const extensionDir = path21.join(parentDir, slug);
   let targetExists = true;
   try {
     await access2(extensionDir, FS2.F_OK);
@@ -12136,14 +12255,14 @@ async function scaffoldExtension(options) {
   const entries = TEMPLATE_FILES[kind];
   const written = [];
   try {
-    await mkdir9(extensionDir, { recursive: true });
+    await mkdir10(extensionDir, { recursive: true });
     for (const [assetName, relDest] of entries) {
       const src = await getAssetPath(`extension-templates/${kind}/${assetName}`);
-      const dest = path20.join(extensionDir, relDest);
-      await mkdir9(path20.dirname(dest), { recursive: true });
-      const text = await readFile29(src, "utf8");
+      const dest = path21.join(extensionDir, relDest);
+      await mkdir10(path21.dirname(dest), { recursive: true });
+      const text = await readFile31(src, "utf8");
       const table = relDest.endsWith(".json") ? jsonSafe : plain;
-      await writeFile9(dest, substitute(text, table), "utf8");
+      await writeFile10(dest, substitute(text, table), "utf8");
       written.push(relDest);
     }
   } catch (e) {
@@ -12151,11 +12270,11 @@ async function scaffoldExtension(options) {
   }
   return {
     extensionDir,
-    manifestPath: path20.join(extensionDir, "package.json"),
+    manifestPath: path21.join(extensionDir, "package.json"),
     kind,
     slug,
     prefix,
-    openFile: path20.join(extensionDir, OPEN_FILE[kind]),
+    openFile: path21.join(extensionDir, OPEN_FILE[kind]),
     files: written
   };
 }
@@ -12167,10 +12286,10 @@ function substitute(text, table) {
   return out;
 }
 // src/lib/project-templates.ts
-import { cp as cp3, mkdir as mkdir10, readFile as readFile30, readdir as readdir7, stat as stat7, writeFile as writeFile10 } from "node:fs/promises";
-import { constants as FS3, existsSync as existsSync14 } from "node:fs";
+import { cp as cp3, mkdir as mkdir11, readFile as readFile32, readdir as readdir7, stat as stat7, writeFile as writeFile11 } from "node:fs/promises";
+import { constants as FS3, existsSync as existsSync15 } from "node:fs";
 import { access as access3 } from "node:fs/promises";
-import path21 from "node:path";
+import path22 from "node:path";
 import { isMap as isMap2, isScalar as isScalar2, isSeq as isSeq3, parseDocument as parseDocument2 } from "yaml";
 var BUILT_IN_TEMPLATE_IDS = [
   "book",
@@ -12179,7 +12298,7 @@ var BUILT_IN_TEMPLATE_IDS = [
 ];
 async function readTemplateChoices(manifestPath) {
   try {
-    const text = await readFile30(manifestPath, "utf8");
+    const text = await readFile32(manifestPath, "utf8");
     const doc = parseDocument2(text);
     const out = {};
     const preset = doc.get("preset");
@@ -12255,7 +12374,7 @@ function rewriteEntry(node, newPath) {
     node.value = newPath;
 }
 function commonAncestorDir(absFiles) {
-  const dirSegs = absFiles.map((f) => path21.resolve(f).split(path21.sep).slice(0, -1));
+  const dirSegs = absFiles.map((f) => path22.resolve(f).split(path22.sep).slice(0, -1));
   if (dirSegs.length === 0)
     return "";
   let common = dirSegs[0];
@@ -12265,22 +12384,22 @@ function commonAncestorDir(absFiles) {
       i++;
     common = common.slice(0, i);
   }
-  return common.join(path21.sep) || path21.sep;
+  return common.join(path22.sep) || path22.sep;
 }
 function pickVendorDir(templateDir, base) {
-  const preferred = path21.basename(base) || VENDOR_DIR;
-  if (!existsSync14(path21.join(templateDir, preferred)))
+  const preferred = path22.basename(base) || VENDOR_DIR;
+  if (!existsSync15(path22.join(templateDir, preferred)))
     return preferred;
   for (let n = 1;; n++) {
     const candidate = `${preferred}-${n}`;
-    if (!existsSync14(path21.join(templateDir, candidate)))
+    if (!existsSync15(path22.join(templateDir, candidate)))
       return candidate;
   }
 }
 var TEMPLATE_META_FILE = ".gutterpress-template.json";
 async function reconcileSharedRefs(templateDir, sourceProjectDir, mode) {
   const { doc, file } = await loadManifestDoc(templateDir);
-  const escapes = (p) => escapesProjectRoot(sourceProjectDir, path21.resolve(sourceProjectDir, p));
+  const escapes = (p) => escapesProjectRoot(sourceProjectDir, path22.resolve(sourceProjectDir, p));
   const stylesSeq = doc.get("styles", true);
   const extensionsSeq = doc.get("extensions", true);
   const escapingStyles = collectEscaping(isSeq3(stylesSeq) ? stylesSeq.items : [], scalarString, escapes);
@@ -12296,16 +12415,16 @@ async function reconcileSharedRefs(templateDir, sourceProjectDir, mode) {
     return { vendoredRefs: [], excludedRefs };
   }
   const styleClosure = await collectStyleDependencies(sourceProjectDir, escapingStyles.map((s) => s.value));
-  const extensionFiles = escapingExtensions.map((p) => path21.resolve(sourceProjectDir, p.value));
+  const extensionFiles = escapingExtensions.map((p) => path22.resolve(sourceProjectDir, p.value));
   const externalFiles = [...new Set([...styleClosure, ...extensionFiles])].filter((f) => escapesProjectRoot(sourceProjectDir, f));
   const base = commonAncestorDir(externalFiles);
   const vendorDir = pickVendorDir(templateDir, base);
-  await Promise.all(externalFiles.filter((abs) => existsSync14(abs)).map(async (abs) => {
-    const dest = path21.join(templateDir, vendorDir, path21.relative(base, abs));
-    await mkdir10(path21.dirname(dest), { recursive: true });
+  await Promise.all(externalFiles.filter((abs) => existsSync15(abs)).map(async (abs) => {
+    const dest = path22.join(templateDir, vendorDir, path22.relative(base, abs));
+    await mkdir11(path22.dirname(dest), { recursive: true });
     await cp3(abs, dest, { recursive: true });
   }));
-  const bookLocal = (value) => toPosixPath(path21.join(vendorDir, path21.relative(base, path21.resolve(sourceProjectDir, value))));
+  const bookLocal = (value) => toPosixPath(path22.join(vendorDir, path22.relative(base, path22.resolve(sourceProjectDir, value))));
   const vendoredRefs = [];
   for (const { node, value } of escapingStyles) {
     const rewritten = bookLocal(value);
@@ -12325,7 +12444,7 @@ async function saveProjectAsTemplate(options) {
   const id = slugify(name);
   if (!id)
     throw new Error(`Could not derive a template id from "${name}".`);
-  const dir = path21.join(templatesRoot, id);
+  const dir = path22.join(templatesRoot, id);
   let exists = true;
   try {
     await access3(dir, FS3.F_OK);
@@ -12335,20 +12454,20 @@ async function saveProjectAsTemplate(options) {
   if (exists) {
     throw new Error(`A template named "${name}" already exists. Choose a different name.`);
   }
-  await mkdir10(dir, { recursive: true });
+  await mkdir11(dir, { recursive: true });
   const entries = await readdir7(projectDir, { withFileTypes: true });
   for (const entry of entries) {
     if (SKIP_ENTRIES.has(entry.name))
       continue;
     if (entry.name === TEMPLATE_META_FILE)
       continue;
-    await cp3(path21.join(projectDir, entry.name), path21.join(dir, entry.name), { recursive: true });
+    await cp3(path22.join(projectDir, entry.name), path22.join(dir, entry.name), { recursive: true });
   }
   const manifestName = MANIFEST_FILENAMES.find((name2) => entries.some((entry) => entry.name === name2));
   const shared = manifestName ? await reconcileSharedRefs(dir, projectDir, options.sharedRefs ?? "vendor") : { vendoredRefs: [], excludedRefs: [] };
   if (manifestName)
-    await retokeniseManifest(path21.join(dir, manifestName));
-  await writeFile10(path21.join(dir, TEMPLATE_META_FILE), JSON.stringify({ label: name }, null, 2), "utf8");
+    await retokeniseManifest(path22.join(dir, manifestName));
+  await writeFile11(path22.join(dir, TEMPLATE_META_FILE), JSON.stringify({ label: name }, null, 2), "utf8");
   return {
     id,
     label: name,
@@ -12361,12 +12480,12 @@ async function saveProjectAsTemplate(options) {
 async function retokeniseManifest(manifestPath) {
   let text;
   try {
-    text = await readFile30(manifestPath, "utf8");
+    text = await readFile32(manifestPath, "utf8");
   } catch {
     return;
   }
   text = text.replace(/^title:\s*.*$/m, 'title: "{{TITLE}}"').replace(/^(authors:[^\n]*\n[ \t]*-[ \t]*).*$/m, '$1"{{AUTHOR}}"');
-  await writeFile10(manifestPath, text, "utf8");
+  await writeFile11(manifestPath, text, "utf8");
 }
 async function listCustomTemplates(templatesRoot) {
   let entries;
@@ -12379,10 +12498,10 @@ async function listCustomTemplates(templatesRoot) {
   for (const entry of entries) {
     if (!entry.isDirectory())
       continue;
-    const dir = path21.join(templatesRoot, entry.name);
+    const dir = path22.join(templatesRoot, entry.name);
     let label = prettify(entry.name);
     try {
-      const meta = JSON.parse(await readFile30(path21.join(dir, TEMPLATE_META_FILE), "utf8"));
+      const meta = JSON.parse(await readFile32(path22.join(dir, TEMPLATE_META_FILE), "utf8"));
       if (typeof meta.label === "string" && meta.label)
         label = meta.label;
     } catch {}
@@ -12392,7 +12511,7 @@ async function listCustomTemplates(templatesRoot) {
       description: "Your saved template.",
       kind: "custom",
       dir,
-      ...await readTemplateChoices(path21.join(dir, MANIFEST_FILENAMES[0]))
+      ...await readTemplateChoices(path22.join(dir, MANIFEST_FILENAMES[0]))
     });
   }
   out.sort((a, b) => a.label.localeCompare(b.label));
@@ -12404,12 +12523,12 @@ async function importTemplateFromFolder(options) {
   if (!srcStat.isDirectory()) {
     throw new Error("The chosen path is not a folder.");
   }
-  const name = options.name?.trim() || prettify(path21.basename(sourceDir));
+  const name = options.name?.trim() || prettify(path22.basename(sourceDir));
   return saveProjectAsTemplate({ projectDir: sourceDir, name, templatesRoot });
 }
 // src/lib/snippets.ts
-import { readdir as readdir8, readFile as readFile31, writeFile as writeFile11, mkdir as mkdir11, rm as rm4 } from "node:fs/promises";
-import path22 from "node:path";
+import { readdir as readdir8, readFile as readFile33, writeFile as writeFile12, mkdir as mkdir12, rm as rm4 } from "node:fs/promises";
+import path23 from "node:path";
 var SNIPPETS_DIR = "snippets";
 var LEVEL_RANK = { project: 0, extension: 1, core: 2 };
 var PLACEHOLDER_RE = /\{\{\s*([a-zA-Z0-9_.-]+)\s*\}\}/g;
@@ -12429,9 +12548,9 @@ function substituteVariables(template, values) {
   return template.replace(PLACEHOLDER_RE, (_full, name) => Object.prototype.hasOwnProperty.call(values, name) ? values[name] : "");
 }
 function resolveSnippetPath(projectDir, fileName) {
-  const dir = path22.resolve(projectDir, SNIPPETS_DIR);
-  const full = path22.resolve(dir, fileName);
-  if (full !== path22.join(dir, path22.basename(fileName)) || path22.dirname(full) !== dir) {
+  const dir = path23.resolve(projectDir, SNIPPETS_DIR);
+  const full = path23.resolve(dir, fileName);
+  if (full !== path23.join(dir, path23.basename(fileName)) || path23.dirname(full) !== dir) {
     throw new Error(`Unsafe snippet filename: ${fileName}`);
   }
   return full;
@@ -12449,7 +12568,7 @@ async function scanSnippetFiles(dir) {
       continue;
     let body = "";
     try {
-      body = await readFile31(path22.join(dir, fileName), "utf8");
+      body = await readFile33(path23.join(dir, fileName), "utf8");
     } catch {
       continue;
     }
@@ -12464,7 +12583,7 @@ async function scanSnippetFiles(dir) {
   return entries;
 }
 async function listSnippets(projectDir) {
-  const files = await scanSnippetFiles(path22.join(projectDir, SNIPPETS_DIR));
+  const files = await scanSnippetFiles(path23.join(projectDir, SNIPPETS_DIR));
   return files.map((file) => ({ ...file, source: { kind: "project" } }));
 }
 async function saveSnippet(projectDir, name, body) {
@@ -12472,9 +12591,9 @@ async function saveSnippet(projectDir, name, body) {
   if (!stem)
     throw new Error(`Could not derive a filename from "${name}".`);
   const fileName = `${stem}.md`;
-  const dir = path22.join(projectDir, SNIPPETS_DIR);
-  await mkdir11(dir, { recursive: true });
-  await writeFile11(resolveSnippetPath(projectDir, fileName), body, "utf8");
+  const dir = path23.join(projectDir, SNIPPETS_DIR);
+  await mkdir12(dir, { recursive: true });
+  await writeFile12(resolveSnippetPath(projectDir, fileName), body, "utf8");
   return { name, fileName, variables: extractVariables(body), body, source: { kind: "project" } };
 }
 async function deleteSnippet(projectDir, fileName) {
@@ -12504,7 +12623,7 @@ async function collectLibrary(projectDir) {
       continue;
     const source = { kind: "extension", ref: entry.use, name: entry.label };
     const folder = await declaredSnippetsFolder(entry);
-    const snippets2 = folder ? (await scanSnippetFiles(path22.join(entry.dir, folder))).map((file) => ({ ...file, source })) : [];
+    const snippets2 = folder ? (await scanSnippetFiles(path23.join(entry.dir, folder))).map((file) => ({ ...file, source })) : [];
     loaded.push({ entry, source, folder, snippets: snippets2, markers: await declaredMarkers(entry, projectDir) });
   }
   let registry;
@@ -12518,24 +12637,29 @@ async function collectLibrary(projectDir) {
       const resolved = registry.get(name);
       if (!resolved || resolved.deprecated !== undefined)
         continue;
-      components.push({ name, source, variants: Object.keys(resolved.variants ?? {}) });
+      components.push({
+        name,
+        source,
+        variants: Object.keys(resolved.variants ?? {}),
+        ...resolved.selfClosing ? { selfClosing: true } : {}
+      });
       if (!entry.dir)
         continue;
       const own = typeof decl.snippet === "string" && decl.snippet.trim() ? decl.snippet.trim() : null;
-      const rel = own ?? path22.join(folder ?? SNIPPETS_DIR, `${name}.md`);
+      const rel = own ?? path23.join(folder ?? SNIPPETS_DIR, `${name}.md`);
       if (pathEscapesFolder(rel))
         continue;
-      const listed = folder && path22.dirname(path22.join(entry.dir, rel)) === path22.join(entry.dir, folder) ? snippets2.find((s) => s.fileName === path22.basename(rel)) : undefined;
+      const listed = folder && path23.dirname(path23.join(entry.dir, rel)) === path23.join(entry.dir, folder) ? snippets2.find((s) => s.fileName === path23.basename(rel)) : undefined;
       if (listed) {
         listed.component = name;
         continue;
       }
-      const body = await readFile31(path22.join(entry.dir, rel), "utf8").catch(() => null);
+      const body = await readFile33(path23.join(entry.dir, rel), "utf8").catch(() => null);
       if (body === null)
         continue;
       snippets2.push({
-        name: prettify(path22.basename(rel).replace(/\.md$/i, "")),
-        fileName: rel.split(path22.sep).join("/"),
+        name: prettify(path23.basename(rel).replace(/\.md$/i, "")),
+        fileName: rel.split(path23.sep).join("/"),
         variables: extractVariables(body),
         body,
         source,
@@ -12579,10 +12703,10 @@ async function listMarkerComponents(projectDir) {
   return (await collectLibrary(projectDir)).components;
 }
 // src/lib/extension-import.ts
-import { existsSync as existsSync15 } from "node:fs";
-import { cp as cp4, mkdir as mkdir12, mkdtemp as mkdtemp2, readFile as readFile32, rm as rm5, writeFile as writeFile12 } from "node:fs/promises";
+import { existsSync as existsSync16 } from "node:fs";
+import { cp as cp4, mkdir as mkdir13, mkdtemp as mkdtemp2, readFile as readFile34, rm as rm5, writeFile as writeFile13 } from "node:fs/promises";
 import { tmpdir as tmpdir2 } from "node:os";
-import path23 from "node:path";
+import path24 from "node:path";
 import { unzipSync } from "fflate";
 var MAX_THEME_ARCHIVE_BYTES = 25 * 1024 * 1024;
 var MAX_THEME_UNZIPPED_BYTES = 25 * 1024 * 1024;
@@ -12649,11 +12773,11 @@ function mb2(n) {
   return `${Math.round(n / (1024 * 1024))}MB`;
 }
 async function finalizeExtensionImport(projectDir, sourceDir, relPaths, fallbackName) {
-  const cssPath = path23.join(sourceDir, "theme.css");
-  if (!existsSync15(cssPath)) {
+  const cssPath = path24.join(sourceDir, "theme.css");
+  if (!existsSync16(cssPath)) {
     throw new Error("A theme must contain a theme.css file.");
   }
-  const css = await readFile32(cssPath, "utf8");
+  const css = await readFile34(cssPath, "utf8");
   const { reject, warnings: printFindings } = classifyThemeCssFindings(checkCss(css, "theme.css"));
   if (reject) {
     throw new Error(`theme.css could not be parsed — ${reject.message}`);
@@ -12662,7 +12786,7 @@ async function finalizeExtensionImport(projectDir, sourceDir, relPaths, fallback
   for (const w of printFindings) {
     warnings.push({ code: "print-safety", message: w.message });
   }
-  const metaExists = existsSync15(path23.join(sourceDir, EXTENSION_MANIFEST_FILENAME));
+  const metaExists = existsSync16(path24.join(sourceDir, EXTENSION_MANIFEST_FILENAME));
   const meta = metaExists ? await readExtensionMeta(sourceDir) : {};
   if (!metaExists) {
     warnings.push({
@@ -12681,7 +12805,7 @@ async function finalizeExtensionImport(projectDir, sourceDir, relPaths, fallback
   for (let i = 0;i < extraSheets.length; i++) {
     const rel = extraSheets[i];
     const sheetPath = extraSheetPaths[i];
-    const sheetCss = await readFile32(sheetPath, "utf8");
+    const sheetCss = await readFile34(sheetPath, "utf8");
     const { reject: sheetReject, warnings: sheetFindings } = classifyThemeCssFindings(checkCss(sheetCss, rel));
     if (sheetReject) {
       throw new Error(`${rel} could not be parsed — ${sheetReject.message}`);
@@ -12700,8 +12824,8 @@ async function finalizeExtensionImport(projectDir, sourceDir, relPaths, fallback
     });
   }
   const id = await uniqueExtensionId(projectDir, meta.name?.trim() || fallbackName);
-  const dest = path23.join(projectDir, EXTENSIONS_DIR, id);
-  await mkdir12(path23.dirname(dest), { recursive: true });
+  const dest = path24.join(projectDir, EXTENSIONS_DIR, id);
+  await mkdir13(path24.dirname(dest), { recursive: true });
   await cp4(sourceDir, dest, { recursive: true });
   await completeLandedManifest(dest, id, meta, metaExists);
   const entry = await addExtension(projectDir, `./${EXTENSIONS_DIR}/${id}`);
@@ -12710,18 +12834,18 @@ async function finalizeExtensionImport(projectDir, sourceDir, relPaths, fallback
 async function completeLandedManifest(dest, id, meta, metaExists) {
   if (metaExists && extensionStyleList(meta).length > 0)
     return;
-  const file = path23.join(dest, EXTENSION_MANIFEST_FILENAME);
+  const file = path24.join(dest, EXTENSION_MANIFEST_FILENAME);
   let pkg = {};
   if (metaExists) {
     try {
-      const parsed = JSON.parse(await readFile32(file, "utf8"));
+      const parsed = JSON.parse(await readFile34(file, "utf8"));
       if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
         pkg = parsed;
       }
     } catch {}
   }
   const gutterpress = pkg.gutterpress && typeof pkg.gutterpress === "object" && !Array.isArray(pkg.gutterpress) ? pkg.gutterpress : {};
-  await writeFile12(file, JSON.stringify({
+  await writeFile13(file, JSON.stringify({
     ...pkg,
     name: typeof pkg.name === "string" && pkg.name.trim() ? pkg.name : id,
     gutterpress: { ...gutterpress, styles: ["theme.css"] }
@@ -12768,7 +12892,7 @@ async function importExtensionFromZip(projectDir, archive) {
     throw new Error("No theme.css found in the package. A theme needs a theme.css at the package root or inside a single folder.");
   }
   const prefix = root === "" ? "" : `${root}/`;
-  const tmp = await mkdtemp2(path23.join(tmpdir2(), "gutterpress-theme-"));
+  const tmp = await mkdtemp2(path24.join(tmpdir2(), "gutterpress-theme-"));
   try {
     const relPaths = [];
     for (const [name, data] of Object.entries(files)) {
@@ -12780,13 +12904,13 @@ async function importExtensionFromZip(projectDir, archive) {
       const rel = prefix ? norm.slice(prefix.length) : norm;
       if (!rel || rel.split("/").some((seg) => seg === ".."))
         continue;
-      const dest = path23.join(tmp, rel);
-      if (dest !== tmp && !dest.startsWith(tmp + path23.sep)) {
+      const dest = path24.join(tmp, rel);
+      if (dest !== tmp && !dest.startsWith(tmp + path24.sep)) {
         throw new Error(`The package contains an unsafe path and was rejected: ${name}`);
       }
       relPaths.push(rel);
-      await mkdir12(path23.dirname(dest), { recursive: true });
-      await writeFile12(dest, data);
+      await mkdir13(path24.dirname(dest), { recursive: true });
+      await writeFile13(dest, data);
     }
     return await finalizeExtensionImport(projectDir, tmp, relPaths, root || "imported-look");
   } finally {
@@ -12799,10 +12923,10 @@ async function importExtensionFromCssText(projectDir, css, name) {
     throw new Error(`The CSS could not be parsed — ${reject.message}`);
   }
   const displayName = name.trim() || "Imported theme";
-  const tmp = await mkdtemp2(path23.join(tmpdir2(), "gutterpress-theme-"));
+  const tmp = await mkdtemp2(path24.join(tmpdir2(), "gutterpress-theme-"));
   try {
-    await writeFile12(path23.join(tmp, "theme.css"), css, "utf8");
-    await writeFile12(path23.join(tmp, EXTENSION_MANIFEST_FILENAME), JSON.stringify({ name: slugify(displayName, "look"), gutterpress: { styles: ["theme.css"] } }, null, 2), "utf8");
+    await writeFile13(path24.join(tmp, "theme.css"), css, "utf8");
+    await writeFile13(path24.join(tmp, EXTENSION_MANIFEST_FILENAME), JSON.stringify({ name: slugify(displayName, "look"), gutterpress: { styles: ["theme.css"] } }, null, 2), "utf8");
     const result = await finalizeExtensionImport(projectDir, tmp, ["theme.css", EXTENSION_MANIFEST_FILENAME], displayName);
     result.warnings.unshift({
       code: "no-theme-json",
@@ -12814,14 +12938,14 @@ async function importExtensionFromCssText(projectDir, css, name) {
   }
 }
 async function importExtensionFromFile(projectDir, filePath) {
-  const ext = path23.extname(filePath).toLowerCase();
+  const ext = path24.extname(filePath).toLowerCase();
   if (ext === ".zip") {
-    const buf = await readFile32(filePath);
+    const buf = await readFile34(filePath);
     return importExtensionFromZip(projectDir, new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength));
   }
   if (ext === ".css") {
-    const css = await readFile32(filePath, "utf8");
-    return importExtensionFromCssText(projectDir, css, prettify(path23.basename(filePath, ".css")));
+    const css = await readFile34(filePath, "utf8");
+    return importExtensionFromCssText(projectDir, css, prettify(path24.basename(filePath, ".css")));
   }
   throw new Error("Choose a .zip extension package or a .css stylesheet.");
 }
@@ -12869,7 +12993,7 @@ async function importExtensionFromUrl(projectDir, url) {
   let baseName;
   if (looksLikeCssUrl(trimmed)) {
     css = await fetchText(trimmed);
-    baseName = path23.basename(new URL(trimmed, "https://x/").pathname, ".css") || "look";
+    baseName = path24.basename(new URL(trimmed, "https://x/").pathname, ".css") || "look";
   } else {
     const base = trimmed.endsWith("/") ? trimmed : `${trimmed}/`;
     css = await fetchText(`${base}theme.css`);
@@ -12878,14 +13002,14 @@ async function importExtensionFromUrl(projectDir, url) {
       if (parsed && typeof parsed === "object")
         meta = parsed;
     } catch {}
-    baseName = typeof meta.name === "string" && meta.name || path23.basename(new URL(base, "https://x/").pathname.replace(/\/$/, "")) || "look";
+    baseName = typeof meta.name === "string" && meta.name || path24.basename(new URL(base, "https://x/").pathname.replace(/\/$/, "")) || "look";
   }
   if (!css.trim())
     throw new Error(`Fetched CSS from ${trimmed} was empty.`);
   assertLooksLikeCss(css, trimmed);
-  const tmp = await mkdtemp2(path23.join(tmpdir2(), "gutterpress-ext-"));
+  const tmp = await mkdtemp2(path24.join(tmpdir2(), "gutterpress-ext-"));
   try {
-    await writeFile12(path23.join(tmp, "theme.css"), css, "utf8");
+    await writeFile13(path24.join(tmp, "theme.css"), css, "utf8");
     const gp = meta.gutterpress && typeof meta.gutterpress === "object" && !Array.isArray(meta.gutterpress) ? meta.gutterpress : {};
     const finalMeta = {
       name: typeof meta.name === "string" && meta.name || slugify(baseName, "look"),
@@ -12897,7 +13021,7 @@ async function importExtensionFromUrl(projectDir, url) {
         preview: typeof gp.preview === "string" ? gp.preview : null
       }
     };
-    await writeFile12(path23.join(tmp, EXTENSION_MANIFEST_FILENAME), JSON.stringify(finalMeta, null, 2), "utf8");
+    await writeFile13(path24.join(tmp, EXTENSION_MANIFEST_FILENAME), JSON.stringify(finalMeta, null, 2), "utf8");
     return await finalizeExtensionImport(projectDir, tmp, ["theme.css", EXTENSION_MANIFEST_FILENAME], baseName);
   } finally {
     await rm5(tmp, { recursive: true, force: true });
@@ -13018,7 +13142,7 @@ async function searchNpmExtensions(query, options = {}) {
   return { matches, total: pages.reduce((sum, page) => sum + page.total, 0) };
 }
 // src/lib/manifest-config.ts
-import { isSeq as isSeq4, isMap as isMap3, YAMLSeq as YAMLSeq3, Scalar as Scalar2 } from "yaml";
+import { isSeq as isSeq4, isMap as isMap3, YAMLSeq as YAMLSeq3, Scalar as Scalar3 } from "yaml";
 function hasKey(obj, key) {
   return Object.prototype.hasOwnProperty.call(obj, key);
 }
@@ -13101,7 +13225,7 @@ async function setActiveStyles(projectDir, paths) {
   } else {
     const seq = new YAMLSeq3(doc.schema);
     for (const p of paths)
-      seq.add(new Scalar2(p));
+      seq.add(new Scalar3(p));
     doc.set("styles", seq);
   }
   await writeManifestDoc(file, doc);
@@ -13643,7 +13767,8 @@ async function listGitHubRepositories(credential, options = {}) {
         fullName: r.full_name,
         private: r.private,
         defaultBranch: r.default_branch,
-        htmlUrl: r.html_url
+        htmlUrl: r.html_url,
+        ...r.size === 0 && !r.archived && r.permissions?.push !== false ? { maybeEmpty: true } : {}
       });
     }
     if (body.length < PER_PAGE)
@@ -13708,10 +13833,12 @@ async function listGitHubBranches(credential, owner, repo, options = {}) {
   }
   return branches;
 }
-// src/lib/remote-auth/clone.ts
-import { mkdir as mkdir13, readdir as readdir9, rm as rm6 } from "node:fs/promises";
-import path24 from "node:path";
-import git3 from "isomorphic-git";
+// src/lib/remote-auth/online-backup.ts
+import git5 from "isomorphic-git";
+
+// src/lib/remote-auth/sync.ts
+import git4 from "isomorphic-git";
+import { randomUUID as randomUUID4 } from "node:crypto";
 
 // src/lib/remote-auth/git-http.ts
 import httpNode from "isomorphic-git/http/node";
@@ -13804,634 +13931,85 @@ function withIdleTimeout(http3, idleMs = GIT_HTTP_IDLE_TIMEOUT_MS, uploadMs = GI
 }
 var defaultGitHttp = withIdleTimeout(httpNode);
 
-// src/lib/remote-auth/transport.ts
+// src/lib/remote-auth/converge-merge.ts
+import { mkdir as mkdir14, unlink as unlink3, writeFile as writeFile14 } from "node:fs/promises";
+import path25 from "node:path";
 import git2 from "isomorphic-git";
-async function repoDirFor(projectDir) {
-  const source = await detectProjectSource(projectDir);
-  if (source.type === "local-git-folder")
-    return gitScopeFor(source);
-  return projectDir;
+import diff3Merge from "diff3";
+function isMergeConflictError(e) {
+  return e?.code === "MergeConflictError";
 }
-function isCredentialTransmissionSafe(url) {
-  try {
-    const u = new URL(url);
-    if (u.protocol === "https:")
-      return true;
-    if (u.protocol === "http:") {
-      const host = u.hostname.toLowerCase();
-      return host === "127.0.0.1" || host === "[::1]" || host === "localhost";
-    }
-    return false;
-  } catch {
-    return false;
-  }
+function isCheckoutConflict(e) {
+  return e?.code === "CheckoutConflictError";
 }
-
-class InsecureTransportError extends Error {
-  code = "InsecureTransport";
-  constructor() {
-    super("This online address isn't secure, so the saved connection wasn't sent — " + "connections are never sent over an insecure address. Switch the address " + "to a secure one (starting with https) to sync with a saved connection.");
-    this.name = "InsecureTransportError";
+var CONVERGE_PREPARE_MESSAGE = "Getting your changes ready to combine with the online version";
+var CONVERGE_RESTORE_MESSAGE = "Kept both versions of the files that can't be combined";
+var CONVERGE_MERGE_MESSAGE = "Combined your changes with the online version";
+var MARKER_UNSAFE_EXT = /\.svg$/i;
+var OUR_LABEL = "your version";
+var THEIR_LABEL = "online version";
+function stringLooksBinary(s) {
+  return s.includes("\x00");
+}
+var LINEBREAKS = /^.*(\r?\n|$)/gm;
+function mergeWithMarkers(baseContent, ourContent, theirContent) {
+  const result = diff3Merge(ourContent.match(LINEBREAKS) ?? [], baseContent.match(LINEBREAKS) ?? [], theirContent.match(LINEBREAKS) ?? []);
+  let merged = "";
+  for (const item of result) {
+    if (item.ok)
+      merged += item.ok.join("");
+    if (item.conflict) {
+      merged += `<<<<<<< ${OUR_LABEL}
+`;
+      merged += item.conflict.a.join("");
+      merged += `=======
+`;
+      merged += item.conflict.b.join("");
+      merged += `>>>>>>> ${THEIR_LABEL}
+`;
+    }
   }
+  return merged;
 }
-function isInsecureTransportError(e) {
-  return e?.code === "InsecureTransport";
+async function readBlob(dir, cache2, oid, filepath) {
+  return git2.readBlob({ fs: gitFs, dir, cache: cache2, oid, filepath });
 }
-function onAuthFor(credential) {
-  if (!credential)
-    return {};
-  return {
-    onAuth: (url) => {
-      if (!isCredentialTransmissionSafe(url))
-        throw new InsecureTransportError;
-      return {
-        username: credential.kind === "github-oauth" ? "x-access-token" : credential.username || credential.token,
-        password: credential.token
-      };
-    }
-  };
+async function writeTreeFile(dir, filepath, content) {
+  const abs = path25.join(dir, filepath);
+  await mkdir14(path25.dirname(abs), { recursive: true });
+  await writeFile14(abs, content);
 }
-async function resolveTransport(dir, options) {
-  const origin = await syncRemoteFor(dir);
-  if (!origin?.url)
-    throw new Error(MSG_NO_REMOTE);
-  const { cleanUrl, credential: urlCredential } = extractUrlCredential(origin.url);
-  let parsed;
-  try {
-    parsed = new URL(cleanUrl);
-  } catch {
-    throw new Error(MSG_SSH_REMOTE);
-  }
-  if (!/^https?:$/.test(parsed.protocol))
-    throw new Error(MSG_SSH_REMOTE);
-  const host = credentialHostKey(cleanUrl);
-  let credential = options.credential ?? undefined;
-  if (!credential && options.tokenStore) {
-    try {
-      credential = await options.tokenStore.get(host) ?? undefined;
-    } catch {
-      credential = undefined;
+async function bothAddedPaths(dir, cache2, ourTip, theirTip, allowUnrelated) {
+  const bases = await git2.findMergeBase({ fs: gitFs, dir, cache: cache2, oids: [ourTip, theirTip] });
+  const base = bases[0];
+  if (!base && !allowUnrelated)
+    return null;
+  const out = [];
+  await git2.walk({
+    fs: gitFs,
+    dir,
+    cache: cache2,
+    trees: [
+      git2.TREE({ ref: ourTip }),
+      git2.TREE({ ref: theirTip }),
+      ...base ? [git2.TREE({ ref: base })] : []
+    ],
+    map: async (filepath, entries) => {
+      if (filepath === ".")
+        return true;
+      const [ours, theirs, inBase] = entries;
+      const types = await Promise.all([ours, theirs, inBase].map((e) => e ? e.type() : Promise.resolve(undefined)));
+      if (types.some((t) => t === "tree"))
+        return true;
+      if (!ours || !theirs || inBase)
+        return null;
+      const [a, b] = await Promise.all([ours.oid(), theirs.oid()]);
+      if (a !== b)
+        out.push(filepath);
+      return null;
     }
-  }
-  if (!credential && urlCredential)
-    credential = urlCredential;
-  return {
-    remote: origin.remote,
-    url: cleanUrl,
-    host,
-    ...credential ? { credential } : {}
-  };
-}
-function classifyTransportFailure(e) {
-  if (isInsecureTransportError(e))
-    return "insecure_transport";
-  const err = e;
-  if (err?.code === "HttpError") {
-    const status = err.data?.statusCode;
-    if (status === 401 || status === 403 || status === 404)
-      return "auth_required";
-  }
-  const msg = `${err?.message ?? String(e)} ${err?.data?.prettyDetails ?? ""}`;
-  if (/\b401\b|\b403\b|\b404\b|unauthorized|authentication|not authorized|permission denied|forbidden|access denied|not allowed to push|pre-receive hook declined|hook declined/i.test(msg)) {
-    return "auth_required";
-  }
-  if (/ENOTFOUND|ECONNREFUSED|ECONNRESET|ETIMEDOUT|EAI_AGAIN|network|fetch failed|couldn't reach|socket hang ?up/i.test(msg)) {
-    return "network_unavailable";
-  }
-  return null;
-}
-function failureOutcome(e, snapshotId) {
-  const kind = classifyTransportFailure(e);
-  const base = snapshotId ? { snapshotId } : {};
-  if (kind === "auth_required")
-    return { status: "auth", message: MSG_AUTH, ...base };
-  if (kind === "network_unavailable")
-    return { status: "offline", message: MSG_OFFLINE, ...base };
-  if (kind === "insecure_transport") {
-    return { status: "error", message: MSG_INSECURE_TRANSPORT, ...base };
-  }
-  return {
-    status: "error",
-    message: "Syncing didn't complete. Your work is saved on this computer — please try again.",
-    ...base
-  };
-}
-function setupErrorMessage(e) {
-  if (e instanceof Error && (e.message === MSG_NO_REMOTE || e.message === MSG_SSH_REMOTE || e.message === MSG_NO_BRANCH)) {
-    return e.message;
-  }
-  return null;
-}
-async function snapshotBeforeAction(args) {
-  const { projectDir, dir, cache: cache2 } = args;
-  const hasChanges = await hasPendingChanges(dir, cache2);
-  const staleStaging = gitFs.existsSync(snapshotStagingMarkerPath(dir));
-  if (!hasChanges && !staleStaging)
-    return;
-  const snap = await snapshotWorkingTreeUnlocked({
-    projectDir,
-    repoRoot: dir,
-    message: args.message?.trim() || SYNC_SNAPSHOT_MESSAGE,
-    authorName: args.authorName,
-    authorEmail: args.authorEmail,
-    cache: cache2
-  });
-  return snap.id;
-}
-async function currentBranchOrThrow(dir) {
-  const branch = await git2.currentBranch({ fs: gitFs, dir });
-  if (!branch)
-    throw new Error(MSG_NO_BRANCH);
-  return branch;
-}
-async function resolveRefOrNull(dir, ref) {
-  try {
-    return await git2.resolveRef({ fs: gitFs, dir, ref });
-  } catch {
-    return null;
-  }
-}
-async function guardTrackingRef(dir, ref, cache2, fn) {
-  const before = await resolveRefOrNull(dir, ref);
-  try {
-    return await fn();
-  } catch (e) {
-    try {
-      const after = await resolveRefOrNull(dir, ref);
-      if (after && after !== before) {
-        const landed = await git2.readObject({ fs: gitFs, dir, oid: after, cache: cache2 }).then(() => true, () => false);
-        if (!landed) {
-          if (before)
-            await git2.writeRef({ fs: gitFs, dir, ref, value: before, force: true });
-          else
-            await git2.deleteRef({ fs: gitFs, dir, ref });
-        }
-      }
-    } catch {}
-    throw e;
-  }
-}
-async function fetchRemoteTip(dir, branch, transport, http3, cache2) {
-  try {
-    const trackingRef = `refs/remotes/${transport.remote}/${branch}`;
-    const result = await guardTrackingRef(dir, trackingRef, cache2, () => git2.fetch({
-      fs: gitFs,
-      http: http3,
-      dir,
-      cache: cache2,
-      remote: transport.remote,
-      ref: trackingRef,
-      remoteRef: branch,
-      singleBranch: true,
-      tags: false,
-      ...onAuthFor(transport.credential)
-    }));
-    return result.fetchHead ?? null;
-  } catch (e) {
-    const code = e?.code;
-    if (code === "NoRefspecError")
-      return null;
-    if (code === "NotFoundError" || e?.data?.statusCode === 404) {
-      const err = new Error("The online repository couldn't be accessed with the saved connection. Reconnect and try again.", { cause: e });
-      err.code = "HttpError";
-      err.data = { statusCode: 401 };
-      throw err;
-    }
-    throw e;
-  }
-}
-function short(oid) {
-  return oid ? oid.slice(0, 8) : "none";
-}
-
-// src/lib/remote-auth/clone.ts
-function sanitizeCloneFolderName(name) {
-  return String(name ?? "").replace(/[\\/]/g, "-").replace(/^\.+/, "").trim();
-}
-async function assertCloneTarget(dir) {
-  try {
-    const entries = await readdir9(dir);
-    if (entries.length > 0) {
-      throw new Error("That folder already has files in it. Choose an empty folder for the book.");
-    }
-  } catch (e) {
-    if (e.code === "ENOENT")
-      return;
-    throw e;
-  }
-}
-function friendlyCloneError(e) {
-  if (isInsecureTransportError(e)) {
-    return new Error("That repository address isn't secure, so the saved connection wasn't sent — connections are never sent over an insecure address. Use a secure address (starting with https), or a local loopback address for a server on this computer.", { cause: e });
-  }
-  const msg = e instanceof Error ? e.message : String(e);
-  if (/401|403|auth|credential/i.test(msg)) {
-    return new Error("GitHub didn't accept the connection for this repository. Reconnect GitHub and try again.", { cause: e });
-  }
-  if (/404|not found/i.test(msg)) {
-    return new Error("That repository couldn't be found. It may have been renamed or you may no longer have access.", { cause: e });
-  }
-  if (/ENOTFOUND|ECONNREFUSED|ETIMEDOUT|EAI_AGAIN|network|fetch failed/i.test(msg)) {
-    return new Error(OFFLINE_MESSAGE, { cause: e });
-  }
-  if (e instanceof Error && /already has files/i.test(e.message)) {
-    return e;
-  }
-  return new Error("The book couldn't be downloaded from GitHub. Please try again.", { cause: e });
-}
-async function cloneRepository(options) {
-  const { dir, onProgress, tokenStore } = options;
-  if (!path24.isAbsolute(dir)) {
-    throw new Error("cloneRepository requires an absolute destination path.");
-  }
-  let parsed;
-  try {
-    parsed = new URL(options.url);
-  } catch {
-    throw new Error("That repository address is not a valid web URL.");
-  }
-  if (!/^https?:$/.test(parsed.protocol)) {
-    throw new Error("Only HTTPS repository addresses are supported. SSH addresses (git@…) can't be used here.");
-  }
-  const { cleanUrl, credential: urlCredential } = extractUrlCredential(options.url);
-  const credential = options.credential ?? urlCredential;
-  if (urlCredential && tokenStore && !await tokenStore.get(urlCredential.host)) {
-    await tokenStore.set(urlCredential.host, urlCredential);
-  }
-  return withRepoLock(dir, async () => {
-    await assertCloneTarget(dir);
-    const dirExistedBefore = gitFs.existsSync(dir);
-    await mkdir13(dir, { recursive: true });
-    try {
-      await git3.clone({
-        fs: gitFs,
-        http: options.httpClient ?? defaultGitHttp,
-        dir,
-        url: cleanUrl,
-        singleBranch: true,
-        ...options.branch ? { ref: options.branch } : {},
-        ...options.depth ? { depth: options.depth } : {},
-        ...onAuthFor(credential),
-        ...onProgress ? {
-          onProgress: (p) => onProgress({
-            phase: p.phase,
-            loaded: p.loaded,
-            ...p.total ? { total: p.total } : {}
-          })
-        } : {}
-      });
-    } catch (e) {
-      const friendly = friendlyCloneError(e);
-      if (!dirExistedBefore) {
-        try {
-          await rm6(dir, { recursive: true, force: true });
-        } catch {
-          throw new Error(`${friendly.message} A partial download was left at ${dir} — delete that folder before trying again.`, { cause: e });
-        }
-      }
-      throw friendly;
-    }
-    let branch;
-    try {
-      branch = await git3.currentBranch({ fs: gitFs, dir }) ?? undefined;
-    } catch {
-      branch = undefined;
-    }
-    return { projectDir: dir, ...branch ? { branch } : {} };
-  });
-}
-// src/lib/remote-auth/test-access.ts
-import git4 from "isomorphic-git";
-import httpNode2 from "isomorphic-git/http/node";
-function isSshRemoteUrl(url) {
-  const trimmed = url.trim();
-  if (/^ssh:\/\//i.test(trimmed))
-    return true;
-  return /^[\w.-]+@[\w.][\w.-]*:/.test(trimmed) || /^[\w.-]+@\[/.test(trimmed);
-}
-var FAILURE_MESSAGES = {
-  auth: "The Git server didn't accept the saved connection. Reconnect to this server with a current access token and try again.",
-  "not-found": "The server answered, but no repository was found at that address. It may have been moved, renamed, or you may no longer have access.",
-  unreachable: "Couldn't reach the Git server. Check your internet connection (and VPN, if this is a private server), then try again.",
-  "ssh-unsupported": "This book's online address uses SSH (git@…), which gutterpress can't check or sync with. Everything on this computer still works — sync with your usual Git tool.",
-  "insecure-transport": "This address isn't secure, so the saved connection wasn't sent — connections are never sent over an insecure address. Switch the address to a secure one (starting with https), or to a local loopback address for a server on this computer, to use a saved connection.",
-  tls: "The server's security certificate couldn't be verified. If this is a private server with its own certificate, ask its administrator about trusting it (NODE_EXTRA_CA_CERTS).",
-  unknown: "The connection test failed unexpectedly. The server may not be a Git server, or it may be temporarily unavailable."
-};
-function failure(reason) {
-  return { ok: false, reason, message: FAILURE_MESSAGES[reason] };
-}
-function classifyRemoteAccessError(e) {
-  if (isInsecureTransportError(e))
-    return failure("insecure-transport");
-  const msg = e instanceof Error ? e.message : String(e);
-  if (/401|403|auth|credential|denied|cancel/i.test(msg))
-    return failure("auth");
-  if (/404|not found/i.test(msg))
-    return failure("not-found");
-  if (/certificate|self.signed|unable_to_verify|cert_|tls|ssl/i.test(msg) && !/fetch failed/i.test(msg)) {
-    return failure("tls");
-  }
-  if (/ENOTFOUND|ECONNREFUSED|ECONNRESET|ETIMEDOUT|EAI_AGAIN|EHOSTUNREACH|network|fetch failed|timed out/i.test(msg)) {
-    return failure("unreachable");
-  }
-  return failure("unknown");
-}
-async function testRemoteAccess(options) {
-  if (isSshRemoteUrl(options.url))
-    return failure("ssh-unsupported");
-  let parsed;
-  try {
-    parsed = new URL(options.url);
-  } catch {
-    return failure("unknown");
-  }
-  if (!/^https?:$/.test(parsed.protocol))
-    return failure("ssh-unsupported");
-  const { cleanUrl, credential: urlCredential } = extractUrlCredential(options.url);
-  const credential = options.credential ?? urlCredential;
-  const timeoutMs = options.timeoutMs ?? 15000;
-  let timer;
-  const timeout = new Promise((resolve9) => {
-    timer = setTimeout(() => resolve9(failure("unreachable")), timeoutMs);
-  });
-  const probe = (async () => {
-    try {
-      const refs = await git4.listServerRefs({
-        http: options.httpClient ?? httpNode2,
-        url: cleanUrl,
-        protocolVersion: 1,
-        symrefs: true,
-        ...onAuthFor(credential),
-        ...credential ? { onAuthFailure: () => ({ cancel: true }) } : {}
-      });
-      const head = refs.find((r) => r.ref === "HEAD" && r.target);
-      const defaultBranch = head?.target?.replace(/^refs\/heads\//, "");
-      return {
-        ok: true,
-        refCount: refs.filter((r) => r.ref !== "HEAD").length,
-        ...defaultBranch ? { defaultBranch } : {}
-      };
-    } catch (e) {
-      return classifyRemoteAccessError(e);
-    }
-  })();
-  try {
-    return await Promise.race([probe, timeout]);
-  } finally {
-    clearTimeout(timer);
-  }
-}
-// src/lib/remote-auth/generic-auth.ts
-function normalizeForgeHost(input) {
-  return credentialHostKey(input);
-}
-function knownForgeTokenUrl(host) {
-  const h = normalizeForgeHost(host);
-  if (!h)
-    return null;
-  const name = h.split(":")[0];
-  if (name === GITHUB_HOST || name.endsWith(`.${GITHUB_HOST}`))
-    return null;
-  if (name === "bitbucket.org") {
-    return "https://bitbucket.org/account/settings/app-passwords/";
-  }
-  if (name === "dev.azure.com" || name.endsWith(".visualstudio.com")) {
-    return "https://dev.azure.com/_usersSettings/tokens";
-  }
-  if (name.includes("gitlab")) {
-    return `https://${h}/-/user_settings/personal_access_tokens`;
-  }
-  if (name.includes("gitea") || name.includes("forgejo")) {
-    return `https://${h}/user/settings/applications`;
-  }
-  return null;
-}
-function connectError(result, host) {
-  switch (result.reason) {
-    case "auth":
-      return new Error("The Git server didn't accept that access token. Check the token (and username, if your server needs one) and try again.");
-    case "ssh-unsupported":
-      return new Error("Enter the server's web address (starting with https://), not an SSH address (git@…).");
-    case "unreachable":
-      return new Error(`Couldn't reach ${host}. Check the server address and your connection, then try again.`);
-    case "tls":
-      return new Error(result.message);
-    case "not-found":
-      return new Error("The server answered, but that repository wasn't found. Check the repository address and that the token has access to it.");
-    default:
-      return new Error(`Couldn't verify the connection to ${host}. Check the server address and try again.`);
-  }
-}
-async function connectGenericHost(input, options = {}) {
-  const host = normalizeForgeHost(input.host);
-  if (!host) {
-    throw new Error("Enter your Git server's web address (like https://git.example.com).");
-  }
-  const token = input.token?.trim();
-  if (!token) {
-    throw new Error("Paste an access token from your Git server to connect.");
-  }
-  const username = input.username?.trim() || undefined;
-  const candidate = {
-    host,
-    kind: "token",
-    token,
-    ...username ? { username } : {},
-    label: username ? `${host} — ${username}` : host,
-    createdAt: Date.now()
-  };
-  const probeUrl = input.repoUrl?.trim() || `https://${host}/`;
-  const result = await testRemoteAccess({
-    url: probeUrl,
-    credential: candidate,
-    ...options.httpClient ? { httpClient: options.httpClient } : {},
-    ...options.timeoutMs ? { timeoutMs: options.timeoutMs } : {}
-  });
-  if (!result.ok) {
-    const rootProbe = !input.repoUrl?.trim();
-    const inconclusiveButReachable = rootProbe && (result.reason === "not-found" || result.reason === "unknown");
-    if (!inconclusiveButReachable)
-      throw connectError(result, host);
-  }
-  return candidate;
-}
-// src/lib/remote-auth/diagnose.ts
-function parseRemoteOrigin(url) {
-  const trimmed = url.trim();
-  if (!trimmed)
-    return { protocol: "none" };
-  const scp = /^[\w.-]+@([\w.][\w.-]*):/.exec(trimmed);
-  if (scp)
-    return { protocol: "ssh", host: credentialHostKey(trimmed) };
-  try {
-    const parsed = new URL(trimmed);
-    const host = credentialHostKey(trimmed);
-    if (/^https?:$/.test(parsed.protocol))
-      return { protocol: "https", host };
-    if (/^ssh:$/.test(parsed.protocol) || isSshRemoteUrl(trimmed)) {
-      return { protocol: "ssh", host };
-    }
-    return { protocol: "none" };
-  } catch {
-    return { protocol: "none" };
-  }
-}
-function forgeKindForHost(host) {
-  const name = host.toLowerCase().split(":")[0];
-  if (name === GITHUB_HOST || name.endsWith(`.${GITHUB_HOST}`))
-    return "github";
-  if (name === "bitbucket.org" || name.includes("bitbucket"))
-    return "bitbucket";
-  if (name === "dev.azure.com" || name.endsWith(".visualstudio.com"))
-    return "azure";
-  if (name.includes("gitlab"))
-    return "gitlab";
-  if (name.includes("forgejo"))
-    return "forgejo";
-  if (name.includes("gitea"))
-    return "gitea";
-  return "generic";
-}
-async function diagnoseProjectRemote(projectDir, options = {}) {
-  const classification = options.source ?? await detectProjectSource(projectDir);
-  const rawRemoteUrl = classification.type === "local-git-folder" ? classification.remoteUrl : undefined;
-  const branch = classification.type === "local-git-folder" ? classification.branch : undefined;
-  if (!rawRemoteUrl) {
-    return {
-      classification,
-      remoteProtocol: "none",
-      ...branch ? { branch } : {},
-      credentialPresent: false,
-      provider: null,
-      tokenSettingsUrl: null,
-      canSync: false,
-      guidance: "local-only"
-    };
-  }
-  const { protocol, host } = parseRemoteOrigin(rawRemoteUrl);
-  const urlExtraction = protocol === "https" ? extractUrlCredential(rawRemoteUrl) : null;
-  const remoteUrl = urlExtraction ? urlExtraction.cleanUrl : rawRemoteUrl;
-  const sanitizedClassification = classification.type === "local-git-folder" && classification.remoteUrl ? { ...classification, remoteUrl } : classification;
-  let credentialPresent = false;
-  if (host && options.tokenStore) {
-    try {
-      credentialPresent = await options.tokenStore.get(host) !== null;
-    } catch {
-      credentialPresent = false;
-    }
-  }
-  if (!credentialPresent && urlExtraction?.credential)
-    credentialPresent = true;
-  const provider = host && protocol !== "none" ? forgeKindForHost(host) : null;
-  const canSync = protocol === "https" && credentialPresent;
-  let guidance;
-  if (protocol === "ssh")
-    guidance = "ssh-use-own-tools";
-  else if (protocol !== "https")
-    guidance = "local-only";
-  else if (credentialPresent)
-    guidance = "ready-to-sync";
-  else if (provider === "github")
-    guidance = "connect-github-to-sync";
-  else
-    guidance = "https-connect-server";
-  return {
-    classification: sanitizedClassification,
-    remoteUrl,
-    ...host ? { remoteHost: host } : {},
-    remoteProtocol: protocol === "none" ? "none" : protocol,
-    ...branch ? { branch } : {},
-    credentialPresent,
-    provider,
-    tokenSettingsUrl: host ? knownForgeTokenUrl(host) : null,
-    canSync,
-    guidance
-  };
-}
-// src/lib/remote-auth/sync.ts
-import git6 from "isomorphic-git";
-import { randomUUID as randomUUID4 } from "node:crypto";
-
-// src/lib/remote-auth/converge-merge.ts
-import { mkdir as mkdir14, unlink as unlink3, writeFile as writeFile13 } from "node:fs/promises";
-import path25 from "node:path";
-import git5 from "isomorphic-git";
-import diff3Merge from "diff3";
-function isMergeConflictError(e) {
-  return e?.code === "MergeConflictError";
-}
-function isCheckoutConflict(e) {
-  return e?.code === "CheckoutConflictError";
-}
-var CONVERGE_PREPARE_MESSAGE = "Getting your changes ready to combine with the online version";
-var CONVERGE_RESTORE_MESSAGE = "Kept both versions of the files that can't be combined";
-var CONVERGE_MERGE_MESSAGE = "Combined your changes with the online version";
-var MARKER_UNSAFE_EXT = /\.svg$/i;
-var OUR_LABEL = "your version";
-var THEIR_LABEL = "online version";
-function stringLooksBinary(s) {
-  return s.includes("\x00");
-}
-var LINEBREAKS = /^.*(\r?\n|$)/gm;
-function mergeWithMarkers(baseContent, ourContent, theirContent) {
-  const result = diff3Merge(ourContent.match(LINEBREAKS) ?? [], baseContent.match(LINEBREAKS) ?? [], theirContent.match(LINEBREAKS) ?? []);
-  let merged = "";
-  for (const item of result) {
-    if (item.ok)
-      merged += item.ok.join("");
-    if (item.conflict) {
-      merged += `<<<<<<< ${OUR_LABEL}
-`;
-      merged += item.conflict.a.join("");
-      merged += `=======
-`;
-      merged += item.conflict.b.join("");
-      merged += `>>>>>>> ${THEIR_LABEL}
-`;
-    }
-  }
-  return merged;
-}
-async function readBlob(dir, cache2, oid, filepath) {
-  return git5.readBlob({ fs: gitFs, dir, cache: cache2, oid, filepath });
-}
-async function writeTreeFile(dir, filepath, content) {
-  const abs = path25.join(dir, filepath);
-  await mkdir14(path25.dirname(abs), { recursive: true });
-  await writeFile13(abs, content);
-}
-async function bothAddedPaths(dir, cache2, ourTip, theirTip, allowUnrelated) {
-  const bases = await git5.findMergeBase({ fs: gitFs, dir, cache: cache2, oids: [ourTip, theirTip] });
-  const base = bases[0];
-  if (!base && !allowUnrelated)
-    return null;
-  const out = [];
-  await git5.walk({
-    fs: gitFs,
-    dir,
-    cache: cache2,
-    trees: [
-      git5.TREE({ ref: ourTip }),
-      git5.TREE({ ref: theirTip }),
-      ...base ? [git5.TREE({ ref: base })] : []
-    ],
-    map: async (filepath, entries) => {
-      if (filepath === ".")
-        return true;
-      const [ours, theirs, inBase] = entries;
-      const types = await Promise.all([ours, theirs, inBase].map((e) => e ? e.type() : Promise.resolve(undefined)));
-      if (types.some((t) => t === "tree"))
-        return true;
-      if (!ours || !theirs || inBase)
-        return null;
-      const [a, b] = await Promise.all([ours.oid(), theirs.oid()]);
-      if (a !== b)
-        out.push(filepath);
-      return null;
-    }
-  });
-  return out;
+  });
+  return out;
 }
 async function convergeMerge(params) {
   const { dir, cache: cache2, branch, theirs, author } = params;
@@ -14445,14 +14023,14 @@ async function convergeMerge(params) {
     authorEmail: params.authorEmail,
     cache: cache2
   });
-  const ourTip = await git5.resolveRef({ fs: gitFs, dir, ref: branch });
+  const ourTip = await git2.resolveRef({ fs: gitFs, dir, ref: branch });
   const combined = new Set;
   const keptBothFiles = [];
   let tipBeforeMerge = ourTip;
   const attempt = async () => {
-    tipBeforeMerge = await git5.resolveRef({ fs: gitFs, dir, ref: branch });
+    tipBeforeMerge = await git2.resolveRef({ fs: gitFs, dir, ref: branch });
     step("merge", { local: tipBeforeMerge, fetched: theirs });
-    return git5.merge({
+    return git2.merge({
       fs: gitFs,
       dir,
       cache: cache2,
@@ -14539,37 +14117,237 @@ async function convergeMerge(params) {
   }
   step("checkout");
   try {
-    await git5.checkout({ fs: gitFs, dir, cache: cache2, ref: branch, force: false });
-  } catch (e) {
-    if (!isCheckoutConflict(e))
-      throw e;
-    logger.warn("checkout", "checkout refused; restoring branch", errorLogData(e));
-    step("rollback", { local: tipBeforeMerge });
-    await git5.writeRef({
+    await git2.checkout({ fs: gitFs, dir, cache: cache2, ref: branch, force: false });
+  } catch (e) {
+    if (!isCheckoutConflict(e))
+      throw e;
+    logger.warn("checkout", "checkout refused; restoring branch", errorLogData(e));
+    step("rollback", { local: tipBeforeMerge });
+    await git2.writeRef({
+      fs: gitFs,
+      dir,
+      ref: await git2.expandRef({ fs: gitFs, dir, ref: branch }),
+      value: tipBeforeMerge,
+      force: true
+    });
+    step("checkout");
+    throw e;
+  }
+  if (postRestore.length > 0) {
+    for (const r of postRestore) {
+      step("restore-conflict-file", { filepath: r.path });
+      await writeTreeFile(dir, r.path, r.bytes);
+    }
+    step("snapshot-restored");
+    if (await hasPendingChanges(dir))
+      await snapshot(CONVERGE_RESTORE_MESSAGE);
+  }
+  step("merged-ref");
+  return {
+    oid: await git2.resolveRef({ fs: gitFs, dir, ref: branch }),
+    combinedFiles: [...combined].sort(),
+    keptBothFiles
+  };
+}
+
+// src/lib/remote-auth/transport.ts
+import git3 from "isomorphic-git";
+async function repoDirFor(projectDir) {
+  const source = await detectProjectSource(projectDir);
+  if (source.type === "local-git-folder")
+    return gitScopeFor(source);
+  return projectDir;
+}
+function isCredentialTransmissionSafe(url) {
+  try {
+    const u = new URL(url);
+    if (u.protocol === "https:")
+      return true;
+    if (u.protocol === "http:") {
+      const host = u.hostname.toLowerCase();
+      return host === "127.0.0.1" || host === "[::1]" || host === "localhost";
+    }
+    return false;
+  } catch {
+    return false;
+  }
+}
+
+class InsecureTransportError extends Error {
+  code = "InsecureTransport";
+  constructor() {
+    super("This online address isn't secure, so the saved connection wasn't sent — " + "connections are never sent over an insecure address. Switch the address " + "to a secure one (starting with https) to sync with a saved connection.");
+    this.name = "InsecureTransportError";
+  }
+}
+function isInsecureTransportError(e) {
+  return e?.code === "InsecureTransport";
+}
+function onAuthFor(credential) {
+  if (!credential)
+    return {};
+  return {
+    onAuth: (url) => {
+      if (!isCredentialTransmissionSafe(url))
+        throw new InsecureTransportError;
+      return {
+        username: credential.kind === "github-oauth" ? "x-access-token" : credential.username || credential.token,
+        password: credential.token
+      };
+    }
+  };
+}
+async function resolveTransport(dir, options) {
+  const origin = await syncRemoteFor(dir);
+  if (!origin?.url)
+    throw new Error(MSG_NO_REMOTE);
+  const { cleanUrl, credential: urlCredential } = extractUrlCredential(origin.url);
+  let parsed;
+  try {
+    parsed = new URL(cleanUrl);
+  } catch {
+    throw new Error(MSG_SSH_REMOTE);
+  }
+  if (!/^https?:$/.test(parsed.protocol))
+    throw new Error(MSG_SSH_REMOTE);
+  const host = credentialHostKey(cleanUrl);
+  let credential = options.credential ?? undefined;
+  if (!credential && options.tokenStore) {
+    try {
+      credential = await options.tokenStore.get(host) ?? undefined;
+    } catch {
+      credential = undefined;
+    }
+  }
+  if (!credential && urlCredential)
+    credential = urlCredential;
+  return {
+    remote: origin.remote,
+    url: cleanUrl,
+    host,
+    ...credential ? { credential } : {}
+  };
+}
+function classifyTransportFailure(e) {
+  if (isInsecureTransportError(e))
+    return "insecure_transport";
+  const err = e;
+  if (err?.code === "HttpError") {
+    const status = err.data?.statusCode;
+    if (status === 401 || status === 403 || status === 404)
+      return "auth_required";
+  }
+  const msg = `${err?.message ?? String(e)} ${err?.data?.prettyDetails ?? ""}`;
+  if (/\b401\b|\b403\b|\b404\b|unauthorized|authentication|not authorized|permission denied|forbidden|access denied|not allowed to push|pre-receive hook declined|hook declined/i.test(msg)) {
+    return "auth_required";
+  }
+  if (/ENOTFOUND|ECONNREFUSED|ECONNRESET|ETIMEDOUT|EAI_AGAIN|network|fetch failed|couldn't reach|socket hang ?up/i.test(msg)) {
+    return "network_unavailable";
+  }
+  return null;
+}
+function failureOutcome(e, snapshotId) {
+  const kind = classifyTransportFailure(e);
+  const base = snapshotId ? { snapshotId } : {};
+  if (kind === "auth_required")
+    return { status: "auth", message: MSG_AUTH, ...base };
+  if (kind === "network_unavailable")
+    return { status: "offline", message: MSG_OFFLINE, ...base };
+  if (kind === "insecure_transport") {
+    return { status: "error", message: MSG_INSECURE_TRANSPORT, ...base };
+  }
+  return {
+    status: "error",
+    message: "Syncing didn't complete. Your work is saved on this computer — please try again.",
+    ...base
+  };
+}
+function setupErrorMessage(e) {
+  if (e instanceof Error && (e.message === MSG_NO_REMOTE || e.message === MSG_SSH_REMOTE || e.message === MSG_NO_BRANCH)) {
+    return e.message;
+  }
+  return null;
+}
+async function snapshotBeforeAction(args) {
+  const { projectDir, dir, cache: cache2 } = args;
+  const hasChanges = await hasPendingChanges(dir, cache2);
+  const staleStaging = gitFs.existsSync(snapshotStagingMarkerPath(dir));
+  if (!hasChanges && !staleStaging)
+    return;
+  const snap = await snapshotWorkingTreeUnlocked({
+    projectDir,
+    repoRoot: dir,
+    message: args.message?.trim() || SYNC_SNAPSHOT_MESSAGE,
+    authorName: args.authorName,
+    authorEmail: args.authorEmail,
+    cache: cache2
+  });
+  return snap.id;
+}
+async function currentBranchOrThrow(dir) {
+  const branch = await git3.currentBranch({ fs: gitFs, dir });
+  if (!branch)
+    throw new Error(MSG_NO_BRANCH);
+  return branch;
+}
+async function resolveRefOrNull(dir, ref) {
+  try {
+    return await git3.resolveRef({ fs: gitFs, dir, ref });
+  } catch {
+    return null;
+  }
+}
+async function guardTrackingRef(dir, ref, cache2, fn) {
+  const before = await resolveRefOrNull(dir, ref);
+  try {
+    return await fn();
+  } catch (e) {
+    try {
+      const after = await resolveRefOrNull(dir, ref);
+      if (after && after !== before) {
+        const landed = await git3.readObject({ fs: gitFs, dir, oid: after, cache: cache2 }).then(() => true, () => false);
+        if (!landed) {
+          if (before)
+            await git3.writeRef({ fs: gitFs, dir, ref, value: before, force: true });
+          else
+            await git3.deleteRef({ fs: gitFs, dir, ref });
+        }
+      }
+    } catch {}
+    throw e;
+  }
+}
+async function fetchRemoteTip(dir, branch, transport, http3, cache2) {
+  try {
+    const trackingRef = `refs/remotes/${transport.remote}/${branch}`;
+    const result = await guardTrackingRef(dir, trackingRef, cache2, () => git3.fetch({
       fs: gitFs,
+      http: http3,
       dir,
-      ref: await git5.expandRef({ fs: gitFs, dir, ref: branch }),
-      value: tipBeforeMerge,
-      force: true
-    });
-    step("checkout");
-    throw e;
-  }
-  if (postRestore.length > 0) {
-    for (const r of postRestore) {
-      step("restore-conflict-file", { filepath: r.path });
-      await writeTreeFile(dir, r.path, r.bytes);
+      cache: cache2,
+      remote: transport.remote,
+      ref: trackingRef,
+      remoteRef: branch,
+      singleBranch: true,
+      tags: false,
+      ...onAuthFor(transport.credential)
+    }));
+    return result.fetchHead ?? null;
+  } catch (e) {
+    const code = e?.code;
+    if (code === "NoRefspecError")
+      return null;
+    if (code === "NotFoundError" || e?.data?.statusCode === 404) {
+      const err = new Error("The online repository couldn't be accessed with the saved connection. Reconnect and try again.", { cause: e });
+      err.code = "HttpError";
+      err.data = { statusCode: 401 };
+      throw err;
     }
-    step("snapshot-restored");
-    if (await hasPendingChanges(dir))
-      await snapshot(CONVERGE_RESTORE_MESSAGE);
+    throw e;
   }
-  step("merged-ref");
-  return {
-    oid: await git5.resolveRef({ fs: gitFs, dir, ref: branch }),
-    combinedFiles: [...combined].sort(),
-    keptBothFiles
-  };
+}
+function short(oid) {
+  return oid ? oid.slice(0, 8) : "none";
 }
 // src/lib/remote-auth/sync.ts
 function isPushRejected(e) {
@@ -14594,10 +14372,10 @@ function isDamagedObjectError(e) {
 }
 async function historyUnreadable(dir) {
   try {
-    const oid = await git6.resolveRef({ fs: gitFs, dir, ref: "HEAD" });
-    await git6.readCommit({ fs: gitFs, dir, oid });
-    await git6.listFiles({ fs: gitFs, dir });
-    await git6.listFiles({ fs: gitFs, dir, ref: "HEAD" });
+    const oid = await git4.resolveRef({ fs: gitFs, dir, ref: "HEAD" });
+    await git4.readCommit({ fs: gitFs, dir, oid });
+    await git4.listFiles({ fs: gitFs, dir });
+    await git4.listFiles({ fs: gitFs, dir, ref: "HEAD" });
     return false;
   } catch {
     return true;
@@ -14692,7 +14470,7 @@ async function syncProject(options) {
           step("fetch", { attempt: attempt + 1, branch, remote: transport.remote });
           const remoteTip = await fetchRemoteTip(dir, branch, transport, http3, cache2);
           step("local-ref", { fetched: remoteTip ?? "none" });
-          let localTip = await git6.resolveRef({ fs: gitFs, dir, ref: branch });
+          let localTip = await git4.resolveRef({ fs: gitFs, dir, ref: branch });
           if (push || remoteTip !== null && remoteTip !== localTip) {
             step("snapshot-after-fetch");
             const lateSnapshot = await snapshotBeforeAction({
@@ -14705,7 +14483,7 @@ async function syncProject(options) {
             });
             if (lateSnapshot) {
               snapshotId = lateSnapshot;
-              localTip = await git6.resolveRef({ fs: gitFs, dir, ref: branch });
+              localTip = await git4.resolveRef({ fs: gitFs, dir, ref: branch });
             }
           }
           logger.info("sync", `branch=${branch} local=${short(localTip)} fetched=${short(remoteTip)} snapshot=${snapshotId ? short(snapshotId) : "none"}`);
@@ -14739,8 +14517,8 @@ async function syncProject(options) {
               pulled = true;
               step("compare-trees");
               const [before, after] = await Promise.all([
-                git6.readCommit({ fs: gitFs, dir, cache: cache2, oid: localTip }),
-                git6.readCommit({ fs: gitFs, dir, cache: cache2, oid: tip })
+                git4.readCommit({ fs: gitFs, dir, cache: cache2, oid: localTip }),
+                git4.readCommit({ fs: gitFs, dir, cache: cache2, oid: tip })
               ]);
               filesChanged = filesChanged || before.commit.tree !== after.commit.tree;
               for (const f of converge.combinedFiles)
@@ -14770,7 +14548,7 @@ async function syncProject(options) {
           }
           step("push", { branch, local: tip, fetched: remoteTip ?? "none" });
           try {
-            await git6.push({
+            await git4.push({
               fs: gitFs,
               http: http3,
               dir,
@@ -14812,50 +14590,562 @@ async function syncProject(options) {
     });
   };
   try {
-    return finish(await run2());
-  } catch (e) {
-    logger.warn(stage, `${stage} failed`, errorLogData(e));
-    return finish(failureOutcome(e));
+    return finish(await run2());
+  } catch (e) {
+    logger.warn(stage, `${stage} failed`, errorLogData(e));
+    return finish(failureOutcome(e));
+  }
+}
+async function refreshRemoteCopies(options) {
+  const http3 = options.httpClient ?? defaultGitHttp;
+  try {
+    const dir = await repoDirFor(options.projectDir);
+    const transport = await resolveTransport(dir, {
+      ...options.credential ? { credential: options.credential } : {},
+      ...options.tokenStore ? { tokenStore: options.tokenStore } : {}
+    });
+    await git4.fetch({
+      fs: gitFs,
+      http: http3,
+      dir,
+      remote: transport.remote,
+      singleBranch: false,
+      prune: true,
+      tags: false,
+      ...onAuthFor(transport.credential)
+    });
+    return { refreshed: true };
+  } catch (e) {
+    const message = e?.message ?? "";
+    if (message === MSG_NO_REMOTE || message === MSG_SSH_REMOTE) {
+      return { refreshed: false, reason: "no-remote" };
+    }
+    const status = e?.data?.statusCode;
+    if (status === 401 || status === 403 || status === 404) {
+      return { refreshed: false, reason: "auth" };
+    }
+    return { refreshed: false, reason: "offline" };
+  }
+}
+
+// src/lib/remote-auth/online-backup.ts
+var API_BASE3 = "https://api.github.com";
+var REQUEST_TIMEOUT_MS4 = 15000;
+var MAX_NAME_LENGTH = 100;
+var MSG = {
+  notConnected: "Connect your GitHub account first (Settings > Accounts), then set up online backup.",
+  auth: "GitHub didn't accept the saved connection. Reconnect GitHub in Settings > Accounts and try again.",
+  offline: "Gutterpress couldn't reach GitHub. Check your internet connection and try again. Nothing was changed.",
+  noHistory: "Turn on version history for this book first. Online backup copies the versions Gutterpress keeps on this computer.",
+  alreadyHasRemote: "This book already has an online copy.",
+  noName: "Give the online copy a name.",
+  badName: "A repository name can only use letters, numbers, hyphens (-), underscores (_) and dots (.), and be at most 100 characters.",
+  notFound: "Gutterpress couldn't find that repository on GitHub, or your account can't see it. Choose another one.",
+  noPermission: "Your GitHub account isn't allowed to add to that repository (it may be archived or read-only). Choose another one.",
+  noCreatePermission: "GitHub wouldn't let Gutterpress create a repository with this connection. Create an empty repository on github.com yourself, then choose it from your existing repositories here.",
+  notEmpty: "That repository already has files in it, and online backup needs an empty one. Choose an empty repository, or create a new one.",
+  pushFailed: "Your book couldn't be copied to GitHub. Your writing is safe on this computer. Please try again."
+};
+var nameTaken = (name) => `You already have a repository named "${name}" on GitHub. Pick a different name, or choose that repository from your existing empty repositories.`;
+
+class BackupFailure extends Error {
+  reason;
+  repository;
+  constructor(reason, message, repository) {
+    super(message);
+    this.reason = reason;
+    this.repository = repository;
+  }
+}
+function isValidRepositoryName(name) {
+  return name.length > 0 && name.length <= MAX_NAME_LENGTH && /^[A-Za-z0-9._-]+$/.test(name) && name !== "." && name !== "..";
+}
+function toRemoteRepository(r) {
+  return {
+    owner: r.owner.login,
+    name: r.name,
+    fullName: r.full_name,
+    private: r.private,
+    defaultBranch: r.default_branch,
+    htmlUrl: r.html_url
+  };
+}
+async function request(fetchImpl, method, path26, token, body) {
+  return withFetchTimeout({ timeoutMs: REQUEST_TIMEOUT_MS4, offlineMessage: MSG.offline }, (signal) => fetchImpl(`${API_BASE3}${path26}`, {
+    method,
+    headers: {
+      ...githubApiHeaders(token),
+      ...body === undefined ? {} : { "Content-Type": "application/json" }
+    },
+    ...body === undefined ? {} : { body: JSON.stringify(body) },
+    signal
+  })).catch((e) => {
+    throw new BackupFailure("offline", e instanceof Error ? e.message : MSG.offline);
+  });
+}
+async function createRepository(fetchImpl, token, name, isPrivate) {
+  const res = await request(fetchImpl, "POST", "/user/repos", token, {
+    name,
+    private: isPrivate,
+    auto_init: false,
+    description: "Online backup made with Gutterpress"
+  });
+  if (res.status === 201 || res.status === 200)
+    return await res.json();
+  if (res.status === 401)
+    throw new BackupFailure("auth", MSG.auth);
+  if (res.status === 403)
+    throw new BackupFailure("no-permission", MSG.noCreatePermission);
+  if (res.status === 422) {
+    const body = await res.json().catch(() => ({}));
+    const taken = (body.errors ?? []).some((e) => /already exists/i.test(e.message ?? ""));
+    throw new BackupFailure("name-taken", taken ? nameTaken(name) : MSG.badName);
+  }
+  throw new BackupFailure("push-failed", `GitHub couldn't create the repository (error ${res.status}). Please try again.`);
+}
+async function loadEmptyRepository(fetchImpl, credential, owner, name) {
+  const path26 = `/repos/${encodeURIComponent(owner)}/${encodeURIComponent(name)}`;
+  const res = await request(fetchImpl, "GET", path26, credential.token);
+  if (res.status === 401)
+    throw new BackupFailure("auth", MSG.auth);
+  if (res.status === 404)
+    throw new BackupFailure("not-found", MSG.notFound);
+  if (res.status === 403)
+    throw new BackupFailure("no-permission", MSG.noPermission);
+  if (!res.ok) {
+    throw new BackupFailure("push-failed", `GitHub returned an unexpected error (error ${res.status}). Please try again.`);
+  }
+  const repo = await res.json();
+  if (repo.archived || repo.permissions?.push === false) {
+    throw new BackupFailure("no-permission", MSG.noPermission);
+  }
+  const branches = await listGitHubBranches(credential, owner, name, { fetchImpl }).catch((e) => {
+    const msg = e instanceof Error ? e.message : "";
+    throw new BackupFailure(/reconnect/i.test(msg) ? "auth" : /reach/i.test(msg) ? "offline" : "push-failed", msg || MSG.pushFailed);
+  });
+  if (branches.length > 0)
+    throw new BackupFailure("not-empty", MSG.notEmpty, toRemoteRepository(repo));
+  return repo;
+}
+async function run2(options) {
+  const fetchImpl = options.fetchImpl ?? fetch;
+  const credential = options.credential ?? await options.tokenStore?.get(GITHUB_HOST).catch(() => null) ?? undefined;
+  if (!credential)
+    throw new BackupFailure("not-connected", MSG.notConnected);
+  const source = await detectProjectSource(options.projectDir);
+  if (source.type !== "local-git-folder")
+    throw new BackupFailure("no-history", MSG.noHistory);
+  if (source.hasRemote)
+    throw new BackupFailure("already-has-remote", MSG.alreadyHasRemote);
+  const dir = await repoDirFor(options.projectDir);
+  const head = await git5.resolveRef({ fs: gitFs, dir, ref: "HEAD" }).catch(() => null);
+  if (!head)
+    throw new BackupFailure("no-history", MSG.noHistory);
+  const { target } = options;
+  let repo;
+  if (target.kind === "create") {
+    const name = target.name.trim();
+    if (!name)
+      throw new BackupFailure("invalid-name", MSG.noName);
+    if (!isValidRepositoryName(name))
+      throw new BackupFailure("invalid-name", MSG.badName);
+    repo = await createRepository(fetchImpl, credential.token, name, target.private ?? true);
+  } else {
+    repo = await loadEmptyRepository(fetchImpl, credential, target.owner, target.name);
+  }
+  const repository = toRemoteRepository(repo);
+  if (!/^https?:\/\//.test(repo.clone_url)) {
+    throw new BackupFailure("push-failed", MSG.pushFailed, repository);
+  }
+  await withRepoLock(dir, () => git5.addRemote({ fs: gitFs, dir, remote: "origin", url: repo.clone_url }));
+  const sync = await syncProject({
+    projectDir: options.projectDir,
+    credential,
+    ...options.authorName ? { authorName: options.authorName } : {},
+    ...options.authorEmail ? { authorEmail: options.authorEmail } : {},
+    ...options.httpClient ? { httpClient: options.httpClient } : {},
+    ...options.logFile ? { logFile: options.logFile } : {}
+  });
+  if (sync.status === "synced" || sync.status === "up-to-date") {
+    return { status: "connected", repository, sync };
+  }
+  await withRepoLock(dir, () => git5.deleteRemote({ fs: gitFs, dir, remote: "origin" })).catch(() => {});
+  if (sync.status === "auth")
+    throw new BackupFailure("auth", sync.message, repository);
+  if (sync.status === "offline")
+    throw new BackupFailure("offline", sync.message, repository);
+  throw new BackupFailure("push-failed", sync.message || MSG.pushFailed, repository);
+}
+async function setUpOnlineBackup(options) {
+  try {
+    return await run2(options);
+  } catch (e) {
+    if (e instanceof BackupFailure) {
+      return {
+        status: "failed",
+        reason: e.reason,
+        message: e.message,
+        ...e.repository ? { repository: e.repository } : {}
+      };
+    }
+    throw e;
+  }
+}
+// src/lib/remote-auth/clone.ts
+import { mkdir as mkdir15, readdir as readdir9, rm as rm6 } from "node:fs/promises";
+import path26 from "node:path";
+import git6 from "isomorphic-git";
+function sanitizeCloneFolderName(name) {
+  return String(name ?? "").replace(/[\\/]/g, "-").replace(/^\.+/, "").trim();
+}
+async function assertCloneTarget(dir) {
+  try {
+    const entries = await readdir9(dir);
+    if (entries.length > 0) {
+      throw new Error("That folder already has files in it. Choose an empty folder for the book.");
+    }
+  } catch (e) {
+    if (e.code === "ENOENT")
+      return;
+    throw e;
+  }
+}
+function friendlyCloneError(e) {
+  if (isInsecureTransportError(e)) {
+    return new Error("That repository address isn't secure, so the saved connection wasn't sent — connections are never sent over an insecure address. Use a secure address (starting with https), or a local loopback address for a server on this computer.", { cause: e });
+  }
+  const msg = e instanceof Error ? e.message : String(e);
+  if (/401|403|auth|credential/i.test(msg)) {
+    return new Error("GitHub didn't accept the connection for this repository. Reconnect GitHub and try again.", { cause: e });
+  }
+  if (/404|not found/i.test(msg)) {
+    return new Error("That repository couldn't be found. It may have been renamed or you may no longer have access.", { cause: e });
+  }
+  if (/ENOTFOUND|ECONNREFUSED|ETIMEDOUT|EAI_AGAIN|network|fetch failed/i.test(msg)) {
+    return new Error(OFFLINE_MESSAGE, { cause: e });
+  }
+  if (e instanceof Error && /already has files/i.test(e.message)) {
+    return e;
+  }
+  return new Error("The book couldn't be downloaded from GitHub. Please try again.", { cause: e });
+}
+async function cloneRepository(options) {
+  const { dir, onProgress, tokenStore } = options;
+  if (!path26.isAbsolute(dir)) {
+    throw new Error("cloneRepository requires an absolute destination path.");
+  }
+  let parsed;
+  try {
+    parsed = new URL(options.url);
+  } catch {
+    throw new Error("That repository address is not a valid web URL.");
+  }
+  if (!/^https?:$/.test(parsed.protocol)) {
+    throw new Error("Only HTTPS repository addresses are supported. SSH addresses (git@…) can't be used here.");
+  }
+  const { cleanUrl, credential: urlCredential } = extractUrlCredential(options.url);
+  const credential = options.credential ?? urlCredential;
+  if (urlCredential && tokenStore && !await tokenStore.get(urlCredential.host)) {
+    await tokenStore.set(urlCredential.host, urlCredential);
+  }
+  return withRepoLock(dir, async () => {
+    await assertCloneTarget(dir);
+    const dirExistedBefore = gitFs.existsSync(dir);
+    await mkdir15(dir, { recursive: true });
+    try {
+      await git6.clone({
+        fs: gitFs,
+        http: options.httpClient ?? defaultGitHttp,
+        dir,
+        url: cleanUrl,
+        singleBranch: true,
+        ...options.branch ? { ref: options.branch } : {},
+        ...options.depth ? { depth: options.depth } : {},
+        ...onAuthFor(credential),
+        ...onProgress ? {
+          onProgress: (p) => onProgress({
+            phase: p.phase,
+            loaded: p.loaded,
+            ...p.total ? { total: p.total } : {}
+          })
+        } : {}
+      });
+    } catch (e) {
+      const friendly = friendlyCloneError(e);
+      if (!dirExistedBefore) {
+        try {
+          await rm6(dir, { recursive: true, force: true });
+        } catch {
+          throw new Error(`${friendly.message} A partial download was left at ${dir} — delete that folder before trying again.`, { cause: e });
+        }
+      }
+      throw friendly;
+    }
+    let branch;
+    try {
+      branch = await git6.currentBranch({ fs: gitFs, dir }) ?? undefined;
+    } catch {
+      branch = undefined;
+    }
+    return { projectDir: dir, ...branch ? { branch } : {} };
+  });
+}
+// src/lib/remote-auth/test-access.ts
+import git7 from "isomorphic-git";
+import httpNode2 from "isomorphic-git/http/node";
+function isSshRemoteUrl(url) {
+  const trimmed = url.trim();
+  if (/^ssh:\/\//i.test(trimmed))
+    return true;
+  return /^[\w.-]+@[\w.][\w.-]*:/.test(trimmed) || /^[\w.-]+@\[/.test(trimmed);
+}
+var FAILURE_MESSAGES = {
+  auth: "The Git server didn't accept the saved connection. Reconnect to this server with a current access token and try again.",
+  "not-found": "The server answered, but no repository was found at that address. It may have been moved, renamed, or you may no longer have access.",
+  unreachable: "Couldn't reach the Git server. Check your internet connection (and VPN, if this is a private server), then try again.",
+  "ssh-unsupported": "This book's online address uses SSH (git@…), which gutterpress can't check or sync with. Everything on this computer still works — sync with your usual Git tool.",
+  "insecure-transport": "This address isn't secure, so the saved connection wasn't sent — connections are never sent over an insecure address. Switch the address to a secure one (starting with https), or to a local loopback address for a server on this computer, to use a saved connection.",
+  tls: "The server's security certificate couldn't be verified. If this is a private server with its own certificate, ask its administrator about trusting it (NODE_EXTRA_CA_CERTS).",
+  unknown: "The connection test failed unexpectedly. The server may not be a Git server, or it may be temporarily unavailable."
+};
+function failure(reason) {
+  return { ok: false, reason, message: FAILURE_MESSAGES[reason] };
+}
+function classifyRemoteAccessError(e) {
+  if (isInsecureTransportError(e))
+    return failure("insecure-transport");
+  const msg = e instanceof Error ? e.message : String(e);
+  if (/401|403|auth|credential|denied|cancel/i.test(msg))
+    return failure("auth");
+  if (/404|not found/i.test(msg))
+    return failure("not-found");
+  if (/certificate|self.signed|unable_to_verify|cert_|tls|ssl/i.test(msg) && !/fetch failed/i.test(msg)) {
+    return failure("tls");
+  }
+  if (/ENOTFOUND|ECONNREFUSED|ECONNRESET|ETIMEDOUT|EAI_AGAIN|EHOSTUNREACH|network|fetch failed|timed out/i.test(msg)) {
+    return failure("unreachable");
+  }
+  return failure("unknown");
+}
+async function testRemoteAccess(options) {
+  if (isSshRemoteUrl(options.url))
+    return failure("ssh-unsupported");
+  let parsed;
+  try {
+    parsed = new URL(options.url);
+  } catch {
+    return failure("unknown");
+  }
+  if (!/^https?:$/.test(parsed.protocol))
+    return failure("ssh-unsupported");
+  const { cleanUrl, credential: urlCredential } = extractUrlCredential(options.url);
+  const credential = options.credential ?? urlCredential;
+  const timeoutMs = options.timeoutMs ?? 15000;
+  let timer;
+  const timeout = new Promise((resolve9) => {
+    timer = setTimeout(() => resolve9(failure("unreachable")), timeoutMs);
+  });
+  const probe = (async () => {
+    try {
+      const refs = await git7.listServerRefs({
+        http: options.httpClient ?? httpNode2,
+        url: cleanUrl,
+        protocolVersion: 1,
+        symrefs: true,
+        ...onAuthFor(credential),
+        ...credential ? { onAuthFailure: () => ({ cancel: true }) } : {}
+      });
+      const head = refs.find((r) => r.ref === "HEAD" && r.target);
+      const defaultBranch = head?.target?.replace(/^refs\/heads\//, "");
+      return {
+        ok: true,
+        refCount: refs.filter((r) => r.ref !== "HEAD").length,
+        ...defaultBranch ? { defaultBranch } : {}
+      };
+    } catch (e) {
+      return classifyRemoteAccessError(e);
+    }
+  })();
+  try {
+    return await Promise.race([probe, timeout]);
+  } finally {
+    clearTimeout(timer);
   }
 }
-async function refreshRemoteCopies(options) {
-  const http3 = options.httpClient ?? defaultGitHttp;
+// src/lib/remote-auth/generic-auth.ts
+function normalizeForgeHost(input) {
+  return credentialHostKey(input);
+}
+function knownForgeTokenUrl(host) {
+  const h = normalizeForgeHost(host);
+  if (!h)
+    return null;
+  const name = h.split(":")[0];
+  if (name === GITHUB_HOST || name.endsWith(`.${GITHUB_HOST}`))
+    return null;
+  if (name === "bitbucket.org") {
+    return "https://bitbucket.org/account/settings/app-passwords/";
+  }
+  if (name === "dev.azure.com" || name.endsWith(".visualstudio.com")) {
+    return "https://dev.azure.com/_usersSettings/tokens";
+  }
+  if (name.includes("gitlab")) {
+    return `https://${h}/-/user_settings/personal_access_tokens`;
+  }
+  if (name.includes("gitea") || name.includes("forgejo")) {
+    return `https://${h}/user/settings/applications`;
+  }
+  return null;
+}
+function connectError(result, host) {
+  switch (result.reason) {
+    case "auth":
+      return new Error("The Git server didn't accept that access token. Check the token (and username, if your server needs one) and try again.");
+    case "ssh-unsupported":
+      return new Error("Enter the server's web address (starting with https://), not an SSH address (git@…).");
+    case "unreachable":
+      return new Error(`Couldn't reach ${host}. Check the server address and your connection, then try again.`);
+    case "tls":
+      return new Error(result.message);
+    case "not-found":
+      return new Error("The server answered, but that repository wasn't found. Check the repository address and that the token has access to it.");
+    default:
+      return new Error(`Couldn't verify the connection to ${host}. Check the server address and try again.`);
+  }
+}
+async function connectGenericHost(input, options = {}) {
+  const host = normalizeForgeHost(input.host);
+  if (!host) {
+    throw new Error("Enter your Git server's web address (like https://git.example.com).");
+  }
+  const token = input.token?.trim();
+  if (!token) {
+    throw new Error("Paste an access token from your Git server to connect.");
+  }
+  const username = input.username?.trim() || undefined;
+  const candidate = {
+    host,
+    kind: "token",
+    token,
+    ...username ? { username } : {},
+    label: username ? `${host} — ${username}` : host,
+    createdAt: Date.now()
+  };
+  const probeUrl = input.repoUrl?.trim() || `https://${host}/`;
+  const result = await testRemoteAccess({
+    url: probeUrl,
+    credential: candidate,
+    ...options.httpClient ? { httpClient: options.httpClient } : {},
+    ...options.timeoutMs ? { timeoutMs: options.timeoutMs } : {}
+  });
+  if (!result.ok) {
+    const rootProbe = !input.repoUrl?.trim();
+    const inconclusiveButReachable = rootProbe && (result.reason === "not-found" || result.reason === "unknown");
+    if (!inconclusiveButReachable)
+      throw connectError(result, host);
+  }
+  return candidate;
+}
+// src/lib/remote-auth/diagnose.ts
+function parseRemoteOrigin(url) {
+  const trimmed = url.trim();
+  if (!trimmed)
+    return { protocol: "none" };
+  const scp = /^[\w.-]+@([\w.][\w.-]*):/.exec(trimmed);
+  if (scp)
+    return { protocol: "ssh", host: credentialHostKey(trimmed) };
   try {
-    const dir = await repoDirFor(options.projectDir);
-    const transport = await resolveTransport(dir, {
-      ...options.credential ? { credential: options.credential } : {},
-      ...options.tokenStore ? { tokenStore: options.tokenStore } : {}
-    });
-    await git6.fetch({
-      fs: gitFs,
-      http: http3,
-      dir,
-      remote: transport.remote,
-      singleBranch: false,
-      prune: true,
-      tags: false,
-      ...onAuthFor(transport.credential)
-    });
-    return { refreshed: true };
-  } catch (e) {
-    const message = e?.message ?? "";
-    if (message === MSG_NO_REMOTE || message === MSG_SSH_REMOTE) {
-      return { refreshed: false, reason: "no-remote" };
+    const parsed = new URL(trimmed);
+    const host = credentialHostKey(trimmed);
+    if (/^https?:$/.test(parsed.protocol))
+      return { protocol: "https", host };
+    if (/^ssh:$/.test(parsed.protocol) || isSshRemoteUrl(trimmed)) {
+      return { protocol: "ssh", host };
     }
-    const status = e?.data?.statusCode;
-    if (status === 401 || status === 403 || status === 404) {
-      return { refreshed: false, reason: "auth" };
+    return { protocol: "none" };
+  } catch {
+    return { protocol: "none" };
+  }
+}
+function forgeKindForHost(host) {
+  const name = host.toLowerCase().split(":")[0];
+  if (name === GITHUB_HOST || name.endsWith(`.${GITHUB_HOST}`))
+    return "github";
+  if (name === "bitbucket.org" || name.includes("bitbucket"))
+    return "bitbucket";
+  if (name === "dev.azure.com" || name.endsWith(".visualstudio.com"))
+    return "azure";
+  if (name.includes("gitlab"))
+    return "gitlab";
+  if (name.includes("forgejo"))
+    return "forgejo";
+  if (name.includes("gitea"))
+    return "gitea";
+  return "generic";
+}
+async function diagnoseProjectRemote(projectDir, options = {}) {
+  const classification = options.source ?? await detectProjectSource(projectDir);
+  const rawRemoteUrl = classification.type === "local-git-folder" ? classification.remoteUrl : undefined;
+  const branch = classification.type === "local-git-folder" ? classification.branch : undefined;
+  if (!rawRemoteUrl) {
+    return {
+      classification,
+      remoteProtocol: "none",
+      ...branch ? { branch } : {},
+      credentialPresent: false,
+      provider: null,
+      tokenSettingsUrl: null,
+      canSync: false,
+      guidance: "local-only"
+    };
+  }
+  const { protocol, host } = parseRemoteOrigin(rawRemoteUrl);
+  const urlExtraction = protocol === "https" ? extractUrlCredential(rawRemoteUrl) : null;
+  const remoteUrl = urlExtraction ? urlExtraction.cleanUrl : rawRemoteUrl;
+  const sanitizedClassification = classification.type === "local-git-folder" && classification.remoteUrl ? { ...classification, remoteUrl } : classification;
+  let credentialPresent = false;
+  if (host && options.tokenStore) {
+    try {
+      credentialPresent = await options.tokenStore.get(host) !== null;
+    } catch {
+      credentialPresent = false;
     }
-    return { refreshed: false, reason: "offline" };
   }
+  if (!credentialPresent && urlExtraction?.credential)
+    credentialPresent = true;
+  const provider = host && protocol !== "none" ? forgeKindForHost(host) : null;
+  const canSync = protocol === "https" && credentialPresent;
+  let guidance;
+  if (protocol === "ssh")
+    guidance = "ssh-use-own-tools";
+  else if (protocol !== "https")
+    guidance = "local-only";
+  else if (credentialPresent)
+    guidance = "ready-to-sync";
+  else if (provider === "github")
+    guidance = "connect-github-to-sync";
+  else
+    guidance = "https-connect-server";
+  return {
+    classification: sanitizedClassification,
+    remoteUrl,
+    ...host ? { remoteHost: host } : {},
+    remoteProtocol: protocol === "none" ? "none" : protocol,
+    ...branch ? { branch } : {},
+    credentialPresent,
+    provider,
+    tokenSettingsUrl: host ? knownForgeTokenUrl(host) : null,
+    canSync,
+    guidance
+  };
 }
 // src/lib/remote-auth/repair.ts
-import git7 from "isomorphic-git";
-import { cp as cp5, mkdir as mkdir15, rename as rename5, rm as rm7 } from "node:fs/promises";
-import path26 from "node:path";
+import git8 from "isomorphic-git";
+import { cp as cp5, mkdir as mkdir16, rename as rename5, rm as rm7 } from "node:fs/promises";
+import path27 from "node:path";
 var REPAIR_SNAPSHOT_MESSAGE = "Repaired online backup";
 async function moveDir(from, to) {
-  await mkdir15(path26.dirname(to), { recursive: true });
+  await mkdir16(path27.dirname(to), { recursive: true });
   try {
     await rename5(from, to);
   } catch (e) {
@@ -14868,14 +15158,14 @@ async function moveDir(from, to) {
 async function repairOnlineBackup(options) {
   const logger = resolveLogger(options.logFile, "repair");
   const dir = await repoDirFor(options.projectDir);
-  const oldGit = path26.join(dir, ".git");
-  const movedGitTo = path26.join(options.backupDir, "git");
-  const freshDir = path26.join(options.backupDir, "fresh-clone");
+  const oldGit = path27.join(dir, ".git");
+  const movedGitTo = path27.join(options.backupDir, "git");
+  const freshDir = path27.join(options.backupDir, "fresh-clone");
   const { restoredFiles, credential } = await withRepoLock(dir, async () => {
     const transport = await resolveTransport(dir, options);
     let branch;
     try {
-      branch = await git7.currentBranch({ fs: gitFs, dir }) ?? undefined;
+      branch = await git8.currentBranch({ fs: gitFs, dir }) ?? undefined;
     } catch {
       branch = undefined;
     }
@@ -14891,7 +15181,7 @@ async function repairOnlineBackup(options) {
     logger.info("swap", "moving old history aside", { to: movedGitTo });
     await moveDir(oldGit, movedGitTo);
     try {
-      await moveDir(path26.join(freshDir, ".git"), oldGit);
+      await moveDir(path27.join(freshDir, ".git"), oldGit);
     } catch (e) {
       await rm7(oldGit, { recursive: true, force: true });
       await moveDir(movedGitTo, oldGit);
@@ -14901,10 +15191,10 @@ async function repairOnlineBackup(options) {
     const ref = fresh.branch ?? "HEAD";
     let missing = [];
     try {
-      const tracked = await git7.listFiles({ fs: gitFs, dir, ref });
-      missing = tracked.filter((f) => !gitFs.existsSync(path26.join(dir, f)));
+      const tracked = await git8.listFiles({ fs: gitFs, dir, ref });
+      missing = tracked.filter((f) => !gitFs.existsSync(path27.join(dir, f)));
       if (missing.length > 0) {
-        await git7.checkout({ fs: gitFs, dir, ref, filepaths: missing, force: true });
+        await git8.checkout({ fs: gitFs, dir, ref, filepaths: missing, force: true });
         logger.info("restore", "restored files missing on this computer", { files: missing });
       }
     } catch (e) {
@@ -14931,21 +15221,21 @@ async function repairOnlineBackup(options) {
   return { outcome, movedGitTo, restoredFiles };
 }
 // src/lib/remote-auth/scorched-earth.ts
-import git8 from "isomorphic-git";
-import { cp as cp6, mkdir as mkdir16, readdir as readdir10, rm as rm8 } from "node:fs/promises";
-import path27 from "node:path";
+import git9 from "isomorphic-git";
+import { cp as cp6, mkdir as mkdir17, readdir as readdir10, rm as rm8 } from "node:fs/promises";
+import path28 from "node:path";
 async function emptyDir(dir) {
   for (const entry of await readdir10(dir)) {
-    await rm8(path27.join(dir, entry), { recursive: true, force: true });
+    await rm8(path28.join(dir, entry), { recursive: true, force: true });
   }
 }
 async function copyFilesBack(from, to) {
-  const skip = path27.join(from, ".git");
+  const skip = path28.join(from, ".git");
   for (const entry of await readdir10(from)) {
-    const src = path27.join(from, entry);
+    const src = path28.join(from, entry);
     if (src === skip)
       continue;
-    await cp6(src, path27.join(to, entry), { recursive: true, force: true });
+    await cp6(src, path28.join(to, entry), { recursive: true, force: true });
   }
 }
 async function scorchedEarth(options) {
@@ -14957,12 +15247,12 @@ async function scorchedEarth(options) {
       const transport2 = await resolveTransport(dir, options);
       let branch2;
       try {
-        branch2 = await git8.currentBranch({ fs: gitFs, dir }) ?? undefined;
+        branch2 = await git9.currentBranch({ fs: gitFs, dir }) ?? undefined;
       } catch {
         branch2 = undefined;
       }
       logger.info("backup", "copying folder", { to: backupDir });
-      await mkdir16(backupDir, { recursive: true });
+      await mkdir17(backupDir, { recursive: true });
       await cp6(dir, backupDir, { recursive: true });
       logger.info("delete", "emptying folder", { dir });
       await emptyDir(dir);
@@ -14995,7 +15285,7 @@ async function scorchedEarth(options) {
 }
 // src/lib/publish/run-publish.ts
 import { readdir as readdir12, stat as stat12 } from "node:fs/promises";
-import path32 from "node:path";
+import path33 from "node:path";
 
 // src/lib/publish/command-runner.ts
 var CAPTURE_LIMIT = 64 * 1024;
@@ -15074,8 +15364,8 @@ async function resolveSwaCommand(req) {
   const explicit = env.SWA_CLI_PATH?.trim();
   if (explicit)
     return explicit;
-  const run2 = req.deps.runCommand ?? defaultCommandRunner;
-  return await commandExists("swa", run2, req.deps.env) ? "swa" : null;
+  const run3 = req.deps.runCommand ?? defaultCommandRunner;
+  return await commandExists("swa", run3, req.deps.env) ? "swa" : null;
 }
 var SWA_INSTALL_HINT = "Install the Azure SWA CLI first: `npm install -g @azure/static-web-apps-cli` " + "(needs Node.js), or set SWA_CLI_PATH to the swa binary.";
 var azureSwaProvider = {
@@ -15121,9 +15411,9 @@ var azureSwaProvider = {
       throw new Error(SWA_INSTALL_HINT);
     const cfg = req.config;
     const deployEnv = cfg.env?.trim() || "production";
-    const run2 = req.deps.runCommand ?? defaultCommandRunner;
+    const run3 = req.deps.runCommand ?? defaultCommandRunner;
     req.deps.onProgress?.(`Deploying ${req.artifact.path} to Azure SWA (${deployEnv})…`);
-    const result = await run2(swa, ["deploy", req.artifact.path, "--env", deployEnv], {
+    const result = await run3(swa, ["deploy", req.artifact.path, "--env", deployEnv], {
       env: { SWA_CLI_DEPLOYMENT_TOKEN: resolved.credential.token },
       onOutput: req.deps.onProgress
     });
@@ -15144,25 +15434,25 @@ ${tail}` : ""}`);
 };
 
 // src/lib/publish/providers/guided.ts
-import { copyFile as copyFile2, mkdir as mkdir17, writeFile as writeFile14 } from "node:fs/promises";
-import path28 from "node:path";
+import { copyFile as copyFile2, mkdir as mkdir18, writeFile as writeFile15 } from "node:fs/promises";
+import path29 from "node:path";
 async function stageGuidedPackage(req, providerId, listingLines) {
-  const packageDir = path28.join(path28.dirname(req.artifact.path), "publish", providerId);
-  await mkdir17(packageDir, { recursive: true });
-  await copyFile2(req.artifact.path, path28.join(packageDir, path28.basename(req.artifact.path)));
+  const packageDir = path29.join(path29.dirname(req.artifact.path), "publish", providerId);
+  await mkdir18(packageDir, { recursive: true });
+  await copyFile2(req.artifact.path, path29.join(packageDir, path29.basename(req.artifact.path)));
   const { title, authors } = req.project;
   const sheet = [
     `# ${title || "Untitled"}`,
     "",
     `- **Authors:** ${authors.length ? authors.join(", ") : "(not set)"}`,
-    `- **File:** ${path28.basename(req.artifact.path)}`,
+    `- **File:** ${path29.basename(req.artifact.path)}`,
     ...listingLines,
     "",
     "Copy these details into the platform's listing form when uploading.",
     ""
   ].join(`
 `);
-  await writeFile14(path28.join(packageDir, "LISTING.md"), sheet, "utf8");
+  await writeFile15(path29.join(packageDir, "LISTING.md"), sheet, "utf8");
   return packageDir;
 }
 
@@ -15225,9 +15515,9 @@ var drivethrurpgProvider = {
 };
 
 // src/lib/publish/providers/gdrive.ts
-import { mkdtemp as mkdtemp3, readFile as readFile33, readdir as readdir11, rm as rm9, stat as stat9, writeFile as writeFile15 } from "node:fs/promises";
+import { mkdtemp as mkdtemp3, readFile as readFile35, readdir as readdir11, rm as rm9, stat as stat9, writeFile as writeFile16 } from "node:fs/promises";
 import { tmpdir as tmpdir3 } from "node:os";
-import path29 from "node:path";
+import path30 from "node:path";
 import { Zip, ZipDeflate } from "fflate";
 
 // src/lib/publish/google-drive.ts
@@ -15612,34 +15902,34 @@ function zipEntriesNonBlocking(entries, opts) {
 async function collectZipEntries(root, dir, out, onWarn) {
   const entries = await readdir11(dir, { withFileTypes: true });
   for (const entry of entries) {
-    const full = path29.join(dir, entry.name);
+    const full = path30.join(dir, entry.name);
     if (entry.isDirectory()) {
       await collectZipEntries(root, full, out, onWarn);
     } else if (entry.isFile()) {
-      const rel = path29.relative(root, full).split(path29.sep).join("/");
-      out[rel] = await readFile33(full);
+      const rel = path30.relative(root, full).split(path30.sep).join("/");
+      out[rel] = await readFile35(full);
     } else if (entry.isSymbolicLink()) {
       const resolved = await stat9(full).catch(() => null);
       if (resolved?.isFile()) {
-        const rel = path29.relative(root, full).split(path29.sep).join("/");
-        out[rel] = await readFile33(full);
+        const rel = path30.relative(root, full).split(path30.sep).join("/");
+        out[rel] = await readFile35(full);
       } else if (resolved?.isDirectory()) {
         await collectZipEntries(root, full, out, onWarn);
       } else {
-        onWarn?.(`Skipped "${path29.relative(root, full)}" in the website export — it's a broken symlink.`);
+        onWarn?.(`Skipped "${path30.relative(root, full)}" in the website export — it's a broken symlink.`);
       }
     } else {
-      onWarn?.(`Skipped "${path29.relative(root, full)}" in the website export — not a file, folder, or symlink.`);
+      onWarn?.(`Skipped "${path30.relative(root, full)}" in the website export — not a file, folder, or symlink.`);
     }
   }
 }
-async function zipHtmlExport(exportDir, title, onWarn, writeArchiveImpl = writeFile15) {
+async function zipHtmlExport(exportDir, title, onWarn, writeArchiveImpl = writeFile16) {
   const entries = {};
   await collectZipEntries(exportDir, exportDir, entries, onWarn);
   const fileName = `${bookSlug(title)}-website.zip`;
-  const tmpRoot = await mkdtemp3(path29.join(tmpdir3(), "gutterpress-gdrive-"));
+  const tmpRoot = await mkdtemp3(path30.join(tmpdir3(), "gutterpress-gdrive-"));
   try {
-    const filePath = path29.join(tmpRoot, fileName);
+    const filePath = path30.join(tmpRoot, fileName);
     const zipped = await zipEntriesNonBlocking(entries, { level: 6 });
     await writeArchiveImpl(filePath, zipped);
     return {
@@ -15687,7 +15977,7 @@ var gdriveProvider = {
     const isHtml = req.artifact.format === "html";
     const source = isHtml ? await zipHtmlExport(req.artifact.path, req.project.title, (msg) => req.deps.onProgress?.(msg)) : {
       filePath: req.artifact.path,
-      fileName: path29.basename(req.artifact.path),
+      fileName: path30.basename(req.artifact.path),
       mimeType: "application/pdf",
       cleanup: async () => {}
     };
@@ -15737,8 +16027,8 @@ var gdriveProvider = {
 };
 
 // src/lib/publish/butler.ts
-import { chmod as chmod2, mkdir as mkdir18, stat as stat10, writeFile as writeFile16 } from "node:fs/promises";
-import path30 from "node:path";
+import { chmod as chmod2, mkdir as mkdir19, stat as stat10, writeFile as writeFile17 } from "node:fs/promises";
+import path31 from "node:path";
 import { unzipSync as unzipSync2 } from "fflate";
 var BUTLER_DOWNLOAD_TIMEOUT_MS = 300000;
 function butlerBrothChannel(platform2 = process.platform, arch2 = process.arch) {
@@ -15775,8 +16065,8 @@ async function ensureButler(deps) {
   }
   if (await commandExists("butler", runCommand, deps.env))
     return "butler";
-  const cacheDir = path30.join(deps.configDir ?? defaultConfigDir(), "tools", "butler");
-  const cached = path30.join(cacheDir, butlerBinaryName());
+  const cacheDir = path31.join(deps.configDir ?? defaultConfigDir(), "tools", "butler");
+  const cached = path31.join(cacheDir, butlerBinaryName());
   if (await fileExists2(cached))
     return cached;
   const channel = butlerBrothChannel();
@@ -15798,14 +16088,14 @@ async function ensureButler(deps) {
     return new Uint8Array(await response.arrayBuffer());
   });
   const files = unzipSync2(archive);
-  await mkdir18(cacheDir, { recursive: true });
+  await mkdir19(cacheDir, { recursive: true });
   let foundBinary = false;
   for (const [name, data] of Object.entries(files)) {
     if (name.endsWith("/"))
       continue;
-    const target = path30.join(cacheDir, path30.basename(name));
-    await writeFile16(target, data);
-    if (path30.basename(name) === butlerBinaryName()) {
+    const target = path31.join(cacheDir, path31.basename(name));
+    await writeFile17(target, data);
+    if (path31.basename(name) === butlerBinaryName()) {
       await chmod2(target, 493).catch(() => {});
       foundBinary = true;
     }
@@ -15926,9 +16216,9 @@ var itchProvider = {
       throw new Error("No itch.io API key found. Connect itch.io (or set BUTLER_API_KEY) first.");
     }
     const butler = await ensureButler(req.deps);
-    const run2 = req.deps.runCommand ?? defaultCommandRunner;
+    const run3 = req.deps.runCommand ?? defaultCommandRunner;
     req.deps.onProgress?.(`Uploading to ${target}:${channel} with butler…`);
-    const result = await run2(butler, ["push", req.artifact.path, `${target}:${channel}`], {
+    const result = await run3(butler, ["push", req.artifact.path, `${target}:${channel}`], {
       env: { BUTLER_API_KEY: resolved.credential.token },
       onOutput: req.deps.onProgress
     });
@@ -16001,8 +16291,8 @@ var kdpProvider = {
 };
 
 // src/lib/publish/providers/local-folder.ts
-import { cp as cp7, mkdir as mkdir19, stat as stat11 } from "node:fs/promises";
-import path31 from "node:path";
+import { cp as cp7, mkdir as mkdir20, stat as stat11 } from "node:fs/promises";
+import path32 from "node:path";
 var LOCAL_PUBLISH_DEFAULT_DIR = "dist";
 var info7 = {
   id: "local",
@@ -16018,7 +16308,7 @@ var info7 = {
 };
 function localPublishDir(req) {
   const dir = typeof req.config.dir === "string" && req.config.dir.trim() ? req.config.dir.trim() : LOCAL_PUBLISH_DEFAULT_DIR;
-  return path31.resolve(req.project.projectDir, dir);
+  return path32.resolve(req.project.projectDir, dir);
 }
 var localFolderProvider = {
   info: info7,
@@ -16039,9 +16329,9 @@ var localFolderProvider = {
   },
   async upload(req) {
     const dir = localPublishDir(req);
-    await mkdir19(dir, { recursive: true });
-    const dest = req.artifact.format === "html" ? dir : path31.join(dir, path31.basename(req.artifact.path));
-    if (path31.resolve(dest) !== path31.resolve(req.artifact.path)) {
+    await mkdir20(dir, { recursive: true });
+    const dest = req.artifact.format === "html" ? dir : path32.join(dir, path32.basename(req.artifact.path));
+    if (path32.resolve(dest) !== path32.resolve(req.artifact.path)) {
       await cp7(req.artifact.path, dest, { recursive: true });
     }
     return { kind: "published", detail: `Saved to ${dest}` };
@@ -16303,9 +16593,9 @@ async function resolvePublishRequest(options, deps) {
   const effectiveDeps = effectiveAccount ? { ...deps, credentialAccount: effectiveAccount } : deps;
   const outDir = resolveOutputDir(manifestDir, config.title);
   const effectiveFormat = resolvePublishFormat(provider.info, providerConfig);
-  const defaultArtifact = effectiveFormat === "pdf" ? path32.join(outDir, artifactName(config.title, "pdf")) : outDir;
+  const defaultArtifact = effectiveFormat === "pdf" ? path33.join(outDir, artifactName(config.title, "pdf")) : outDir;
   const artifact = {
-    path: options.artifactPath ? path32.resolve(options.projectDir, options.artifactPath) : defaultArtifact,
+    path: options.artifactPath ? path33.resolve(options.projectDir, options.artifactPath) : defaultArtifact,
     format: effectiveFormat
   };
   return {
@@ -16369,7 +16659,7 @@ async function artifactIssues(artifact) {
 var BUILD_FINGERPRINT_FILENAME = "build-fingerprint.json";
 async function htmlDirIssues(dir) {
   const issues = [];
-  const isThere = async (rel) => stat12(path32.join(dir, rel)).then(() => true, () => false);
+  const isThere = async (rel) => stat12(path33.join(dir, rel)).then(() => true, () => false);
   if (!await isThere(BOOK_HTML)) {
     issues.push({
       severity: "error",
@@ -16488,17 +16778,17 @@ async function disconnectPublishCredential(key, deps, options = {}) {
   }
 }
 // src/lib/publish/selections.ts
-import { chmod as chmod3, mkdir as mkdir20, readFile as readFile34, writeFile as writeFile17 } from "node:fs/promises";
-import path33 from "node:path";
+import { chmod as chmod3, mkdir as mkdir21, readFile as readFile36, writeFile as writeFile18 } from "node:fs/promises";
+import path34 from "node:path";
 class PublishSelectionsStore {
   filePath;
   queue = Promise.resolve();
   constructor(filePath) {
-    this.filePath = filePath ?? path33.join(defaultConfigDir(), "publish-selections.json");
+    this.filePath = filePath ?? path34.join(defaultConfigDir(), "publish-selections.json");
   }
   async read() {
     try {
-      const raw = await readFile34(this.filePath, "utf8");
+      const raw = await readFile36(this.filePath, "utf8");
       const parsed = JSON.parse(raw);
       if (parsed && typeof parsed === "object") {
         return {
@@ -16511,19 +16801,19 @@ class PublishSelectionsStore {
     return { version: 1, global: {}, projects: {} };
   }
   async write(data) {
-    await mkdir20(path33.dirname(this.filePath), { recursive: true });
-    await writeFile17(this.filePath, JSON.stringify(data, null, 2), {
+    await mkdir21(path34.dirname(this.filePath), { recursive: true });
+    await writeFile18(this.filePath, JSON.stringify(data, null, 2), {
       encoding: "utf8",
       mode: 384
     });
     await chmod3(this.filePath, 384);
   }
   enqueue(fn) {
-    const run2 = this.queue.then(fn, fn);
-    this.queue = run2.catch(() => {
+    const run3 = this.queue.then(fn, fn);
+    this.queue = run3.catch(() => {
       return;
     });
-    return run2;
+    return run3;
   }
   resolve(providerId, projectDir) {
     return this.enqueue(async () => {
@@ -16614,4 +16904,4 @@ async function setPublishProviderConfig(projectDir, providerId, values) {
   await writeManifestDoc(file, doc);
   return settingsFromDoc(doc);
 }
-export { BUNDLED_EXTENSIONS, isBundledExtension, isPathSpecifier, parseExtensionSpecifier, PRESET_IDS, PRESETS, TARGETS, TARGET_IDS, publishTargetFor, MANIFEST_FILENAMES, hasProjectManifest, loadManifest, loadManifestWithPath, resolveConfig, SYNC_SNAPSHOT_MESSAGE, log, resolveActiveStyles, listProjectStyles, EXTENSION_MANIFEST_FILENAME, readExtensionMeta, extensionStyleList, extensionEntry, extensionCarries, pathEscapesFolder, assertExtensionContained, resolveExtension, DEFAULT_NPM_REGISTRY, npmRegistryUrl, ensureProjectGitignore, EXTENSIONS_DIR, RECOMMENDED_EXTENSIONS, BUILT_IN_STYLE_SET_IDS, sameExtension, listProjectExtensions, describeExtension, setExtensionEnabled, reorderExtensions, removeExtension, addExtension, listNpmVersions, checkExtensionUpdates, updateExtensions, listBuiltInStyleSets, addBuiltInStyleSet, validateProjectExtensions, readExtensionCss, restorePinnedExtensions, restoreFailureMessage, getChecks, getCheckById, resolveCheckSelectors, formatReport, ruleRemoteUrls, ruleRiskyProps, ruleSyntax, checkCss, inspectImage, runChecks, checkToolAvailability, reportMissingTools, executeValidation, executeAndReport, splitOutPath, runBuild, openPath, startPreviewServer, defaultConfigDir, FileTokenStore, extractUrlCredential, getSystemDiagnostics, slugifyProjectName, escapeYamlScalar, scaffoldProject, adoptFolder, EXTENSION_KINDS, RESERVED_PREFIX, resolveExtensionPrefix, scaffoldExtension, BUILT_IN_TEMPLATE_IDS, listBuiltInTemplates, saveProjectAsTemplate, listCustomTemplates, importTemplateFromFolder, SNIPPETS_DIR, extractVariables, substituteVariables, listSnippets, saveSnippet, deleteSnippet, listMergedSnippets, listMarkerComponents, importExtensionFromFile, importExtensionFromUrl, MAX_SEARCH_BYTES, SEARCH_KEYWORDS, searchNpmExtensions, setManifestFields, readManifestFields, setActiveStyles, AUTO_SNAPSHOT_DEFAULT_MINUTES, AUTO_SYNC_MIN_MINUTES, AUTO_SYNC_MAX_MINUTES, AUTO_SYNC_DEFAULT_MINUTES, AUTO_SYNC_PUSH_INTERVAL_MINUTES, autoSnapshotDelayMs, autoSyncDelayMs, isGitInternalPath, resolveGitHubClientId, GITHUB_HOST, GitHubAuthProvider, GDRIVE_HOST, resolveGoogleClientId, resolveGoogleClientSecret, GOOGLE_NOT_CONFIGURED_MESSAGE, requireGoogleClientCredentials, pkceChallengeFromVerifier, GoogleAuthProvider, revokeGoogleCredential, publishCredentialKey, publishConnectionStatus, listPublishAccounts, connectGoogleDrive, listGitHubRepositories, listRepoBooks, listGitHubBranches, sanitizeCloneFolderName, cloneRepository, isSshRemoteUrl, testRemoteAccess, knownForgeTokenUrl, connectGenericHost, parseRemoteOrigin, forgeKindForHost, diagnoseProjectRemote, syncProject, refreshRemoteCopies, REPAIR_SNAPSHOT_MESSAGE, repairOnlineBackup, scorchedEarth, listPublishProviders, publishProviderFor, resolvePublishFormat, resolvePublishRequest, runPublish, connectPublishProvider, disconnectPublishCredential, PublishSelectionsStore, readPublishSettings, setPublishProviderConfig };
+export { BUNDLED_EXTENSIONS, isBundledExtension, isPathSpecifier, parseExtensionSpecifier, PRESET_IDS, PRESETS, TARGETS, TARGET_IDS, publishTargetFor, MANIFEST_FILENAMES, hasProjectManifest, loadManifest, loadManifestWithPath, resolveConfig, SYNC_SNAPSHOT_MESSAGE, log, resolveActiveStyles, listProjectStyles, EXTENSION_MANIFEST_FILENAME, readExtensionMeta, extensionStyleList, extensionEntry, extensionCarries, pathEscapesFolder, assertExtensionContained, resolveExtension, DEFAULT_NPM_REGISTRY, npmRegistryUrl, ensureProjectGitignore, EXTENSIONS_DIR, RECOMMENDED_EXTENSIONS, BUILT_IN_STYLE_SET_IDS, sameExtension, listProjectExtensions, describeExtension, setExtensionEnabled, reorderExtensions, removeExtension, addExtension, listNpmVersions, checkExtensionUpdates, updateExtensions, listBuiltInStyleSets, addBuiltInStyleSet, validateProjectExtensions, readExtensionCss, restorePinnedExtensions, restoreFailureMessage, getChecks, getCheckById, resolveCheckSelectors, formatReport, ruleRemoteUrls, ruleRiskyProps, ruleSyntax, checkCss, inspectImage, runChecks, checkToolAvailability, reportMissingTools, executeValidation, executeAndReport, splitOutPath, runBuild, openPath, startPreviewServer, defaultConfigDir, FileTokenStore, extractUrlCredential, getSystemDiagnostics, readPageSetup, setPageSetup, slugifyProjectName, escapeYamlScalar, scaffoldProject, adoptFolder, EXTENSION_KINDS, RESERVED_PREFIX, resolveExtensionPrefix, scaffoldExtension, BUILT_IN_TEMPLATE_IDS, listBuiltInTemplates, saveProjectAsTemplate, listCustomTemplates, importTemplateFromFolder, SNIPPETS_DIR, extractVariables, substituteVariables, listSnippets, saveSnippet, deleteSnippet, listMergedSnippets, listMarkerComponents, importExtensionFromFile, importExtensionFromUrl, MAX_SEARCH_BYTES, SEARCH_KEYWORDS, searchNpmExtensions, setManifestFields, readManifestFields, setActiveStyles, AUTO_SNAPSHOT_DEFAULT_MINUTES, AUTO_SYNC_MIN_MINUTES, AUTO_SYNC_MAX_MINUTES, AUTO_SYNC_DEFAULT_MINUTES, AUTO_SYNC_PUSH_INTERVAL_MINUTES, autoSnapshotDelayMs, autoSyncDelayMs, isGitInternalPath, resolveGitHubClientId, GITHUB_HOST, GitHubAuthProvider, GDRIVE_HOST, resolveGoogleClientId, resolveGoogleClientSecret, GOOGLE_NOT_CONFIGURED_MESSAGE, requireGoogleClientCredentials, pkceChallengeFromVerifier, GoogleAuthProvider, revokeGoogleCredential, publishCredentialKey, publishConnectionStatus, listPublishAccounts, connectGoogleDrive, listGitHubRepositories, listRepoBooks, listGitHubBranches, syncProject, refreshRemoteCopies, isValidRepositoryName, setUpOnlineBackup, sanitizeCloneFolderName, cloneRepository, isSshRemoteUrl, testRemoteAccess, knownForgeTokenUrl, connectGenericHost, parseRemoteOrigin, forgeKindForHost, diagnoseProjectRemote, REPAIR_SNAPSHOT_MESSAGE, repairOnlineBackup, scorchedEarth, listPublishProviders, publishProviderFor, resolvePublishFormat, resolvePublishRequest, runPublish, connectPublishProvider, disconnectPublishCredential, PublishSelectionsStore, readPublishSettings, setPublishProviderConfig };