lula2 0.6.0 → 0.6.1-nightly.1

package/dist/cli/server/spreadsheetRoutes.js

@@ -1,7 +1,7 @@
 // cli/server/spreadsheetRoutes.ts
 import crypto from "crypto";
 import { parse as parseCSVSync } from "csv-parse/sync";
-import ExcelJS from "exceljs";
+import * as XLSX from "xlsx-republish";
 import express from "express";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
 import { glob } from "glob";
@@ -140,20 +140,13 @@ async function parseUploadedFile(file) {
     const csvContent = file.buffer.toString("utf-8");
     rawData = parseCSV(csvContent);
   } else {
-    const workbook = new ExcelJS.Workbook();
-    const buffer = Buffer.from(file.buffer);
-    await workbook.xlsx.load(buffer);
-    const worksheet = workbook.worksheets[0];
-    if (!worksheet) {
+    const workbook = XLSX.read(file.buffer, { type: "buffer" });
+    const worksheetName = workbook.SheetNames[0];
+    if (!worksheetName) {
       throw new Error("No worksheet found in file");
     }
-    worksheet.eachRow({ includeEmpty: true }, (row, rowNumber) => {
-      const rowData = [];
-      row.eachCell({ includeEmpty: true }, (cell, colNumber) => {
-        rowData[colNumber - 1] = cell.value;
-      });
-      rawData[rowNumber - 1] = rowData;
-    });
+    const worksheet = workbook.Sheets[worksheetName];
+    rawData = XLSX.utils.sheet_to_json(worksheet, { header: 1, defval: null });
   }
   return rawData;
 }
@@ -819,43 +812,20 @@ async function exportAsExcelWithMapping(controls, metadata, columnMappings, res)
     });
     return exportControl;
   });
-  const wb = new ExcelJS.Workbook();
-  const ws = wb.addWorksheet("Controls");
-  const headers = Object.keys(worksheetData[0] || {});
-  ws.columns = headers.map((header) => ({
-    header,
-    key: header,
-    width: Math.min(
-      Math.max(
-        header.length,
-        ...worksheetData.map((row) => String(row[header] || "").length)
-      ) + 2,
-      50
-    )
-    // Auto-size with max width of 50
-  }));
-  worksheetData.forEach((row) => {
-    ws.addRow(row);
-  });
-  ws.getRow(1).font = { bold: true };
-  ws.getRow(1).fill = {
-    type: "pattern",
-    pattern: "solid",
-    fgColor: { argb: "FFE0E0E0" }
-  };
+  const wb = XLSX.utils.book_new();
+  const ws = XLSX.utils.json_to_sheet(worksheetData);
+  XLSX.utils.book_append_sheet(wb, ws, "Controls");
   if (metadata) {
-    const metaSheet = wb.addWorksheet("Metadata");
     const cleanMetadata = { ...metadata };
     delete cleanMetadata.fieldSchema;
-    metaSheet.columns = [
-      { header: "Property", key: "property", width: 30 },
-      { header: "Value", key: "value", width: 50 }
-    ];
-    Object.entries(cleanMetadata).forEach(([key, value]) => {
-      metaSheet.addRow({ property: key, value: String(value) });
-    });
+    const metadataArray = Object.entries(cleanMetadata).map(([key, value]) => ({
+      Property: key,
+      Value: String(value)
+    }));
+    const metaSheet = XLSX.utils.json_to_sheet(metadataArray);
+    XLSX.utils.book_append_sheet(wb, metaSheet, "Metadata");
   }
-  const buffer = await wb.xlsx.writeBuffer();
+  const buffer = XLSX.write(wb, { type: "buffer", bookType: "xlsx" });
   const fileName = `${metadata?.name || "controls"}_export_${Date.now()}.xlsx`;
   res.setHeader(
     "Content-Type",
@@ -990,21 +960,14 @@ router.post("/parse-excel", upload.single("file"), async (req, res) => {
       rows = parseCSV(csvContent);
       sheets = ["Sheet1"];
     } else {
-      const workbook = new ExcelJS.Workbook();
-      const buffer = Buffer.from(req.file.buffer);
-      await workbook.xlsx.load(buffer);
-      sheets = workbook.worksheets.map((ws) => ws.name);
-      const worksheet = workbook.worksheets[0];
-      if (!worksheet) {
+      const workbook = XLSX.read(req.file.buffer, { type: "buffer" });
+      sheets = workbook.SheetNames;
+      const worksheetName = workbook.SheetNames[0];
+      if (!worksheetName) {
         return res.status(400).json({ error: "No worksheet found in file" });
       }
-      worksheet.eachRow({ includeEmpty: false }, (row, _rowNumber) => {
-        const rowData = [];
-        row.eachCell({ includeEmpty: true }, (cell, colNumber) => {
-          rowData[colNumber - 1] = cell.value;
-        });
-        rows.push(rowData);
-      });
+      const worksheet = workbook.Sheets[worksheetName];
+      rows = XLSX.utils.sheet_to_json(worksheet, { header: 1, defval: null });
     }
     const headerCandidates = rows.slice(0, 5).map((row, index) => ({
       row: index + 1,
@@ -1036,20 +999,12 @@ router.post("/parse-excel-sheet", upload.single("file"), async (req, res) => {
       const csvContent = req.file.buffer.toString("utf-8");
       rows = parseCSV(csvContent);
     } else {
-      const workbook = new ExcelJS.Workbook();
-      const buffer = Buffer.from(req.file.buffer);
-      await workbook.xlsx.load(buffer);
-      const worksheet = workbook.getWorksheet(sheetName);
-      if (!worksheet) {
+      const workbook = XLSX.read(req.file.buffer, { type: "buffer" });
+      if (!workbook.SheetNames.includes(sheetName)) {
         return res.status(400).json({ error: `Sheet "${sheetName}" not found` });
       }
-      worksheet.eachRow({ includeEmpty: false }, (row, _rowNumber) => {
-        const rowData = [];
-        row.eachCell({ includeEmpty: true }, (cell, colNumber) => {
-          rowData[colNumber - 1] = cell.value;
-        });
-        rows.push(rowData);
-      });
+      const worksheet = workbook.Sheets[sheetName];
+      rows = XLSX.utils.sheet_to_json(worksheet, { header: 1, defval: null });
     }
     const headerRowIndex = parseInt(headerRow) - 1;
     const headers = rows[headerRowIndex] || [];

package/dist/cli/server/websocketServer.js

@@ -1290,7 +1290,7 @@ __export(spreadsheetRoutes_exports, {
 });
 import crypto from "crypto";
 import { parse as parseCSVSync } from "csv-parse/sync";
-import ExcelJS from "exceljs";
+import * as XLSX from "xlsx-republish";
 import express from "express";
 import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
 import { glob } from "glob";
@@ -1385,20 +1385,13 @@ async function parseUploadedFile(file) {
     const csvContent = file.buffer.toString("utf-8");
     rawData = parseCSV(csvContent);
   } else {
-    const workbook = new ExcelJS.Workbook();
-    const buffer = Buffer.from(file.buffer);
-    await workbook.xlsx.load(buffer);
-    const worksheet = workbook.worksheets[0];
-    if (!worksheet) {
+    const workbook = XLSX.read(file.buffer, { type: "buffer" });
+    const worksheetName = workbook.SheetNames[0];
+    if (!worksheetName) {
       throw new Error("No worksheet found in file");
     }
-    worksheet.eachRow({ includeEmpty: true }, (row, rowNumber) => {
-      const rowData = [];
-      row.eachCell({ includeEmpty: true }, (cell, colNumber) => {
-        rowData[colNumber - 1] = cell.value;
-      });
-      rawData[rowNumber - 1] = rowData;
-    });
+    const worksheet = workbook.Sheets[worksheetName];
+    rawData = XLSX.utils.sheet_to_json(worksheet, { header: 1, defval: null });
   }
   return rawData;
 }
@@ -1969,43 +1962,20 @@ async function exportAsExcelWithMapping(controls, metadata, columnMappings, res)
     });
     return exportControl;
   });
-  const wb = new ExcelJS.Workbook();
-  const ws = wb.addWorksheet("Controls");
-  const headers = Object.keys(worksheetData[0] || {});
-  ws.columns = headers.map((header) => ({
-    header,
-    key: header,
-    width: Math.min(
-      Math.max(
-        header.length,
-        ...worksheetData.map((row) => String(row[header] || "").length)
-      ) + 2,
-      50
-    )
-    // Auto-size with max width of 50
-  }));
-  worksheetData.forEach((row) => {
-    ws.addRow(row);
-  });
-  ws.getRow(1).font = { bold: true };
-  ws.getRow(1).fill = {
-    type: "pattern",
-    pattern: "solid",
-    fgColor: { argb: "FFE0E0E0" }
-  };
+  const wb = XLSX.utils.book_new();
+  const ws = XLSX.utils.json_to_sheet(worksheetData);
+  XLSX.utils.book_append_sheet(wb, ws, "Controls");
   if (metadata) {
-    const metaSheet = wb.addWorksheet("Metadata");
     const cleanMetadata = { ...metadata };
     delete cleanMetadata.fieldSchema;
-    metaSheet.columns = [
-      { header: "Property", key: "property", width: 30 },
-      { header: "Value", key: "value", width: 50 }
-    ];
-    Object.entries(cleanMetadata).forEach(([key, value]) => {
-      metaSheet.addRow({ property: key, value: String(value) });
-    });
-  }
-  const buffer = await wb.xlsx.writeBuffer();
+    const metadataArray = Object.entries(cleanMetadata).map(([key, value]) => ({
+      Property: key,
+      Value: String(value)
+    }));
+    const metaSheet = XLSX.utils.json_to_sheet(metadataArray);
+    XLSX.utils.book_append_sheet(wb, metaSheet, "Metadata");
+  }
+  const buffer = XLSX.write(wb, { type: "buffer", bookType: "xlsx" });
   const fileName = `${metadata?.name || "controls"}_export_${Date.now()}.xlsx`;
   res.setHeader(
     "Content-Type",
@@ -2247,21 +2217,14 @@ var init_spreadsheetRoutes = __esm({
           rows = parseCSV(csvContent);
           sheets = ["Sheet1"];
         } else {
-          const workbook = new ExcelJS.Workbook();
-          const buffer = Buffer.from(req.file.buffer);
-          await workbook.xlsx.load(buffer);
-          sheets = workbook.worksheets.map((ws) => ws.name);
-          const worksheet = workbook.worksheets[0];
-          if (!worksheet) {
+          const workbook = XLSX.read(req.file.buffer, { type: "buffer" });
+          sheets = workbook.SheetNames;
+          const worksheetName = workbook.SheetNames[0];
+          if (!worksheetName) {
             return res.status(400).json({ error: "No worksheet found in file" });
           }
-          worksheet.eachRow({ includeEmpty: false }, (row, _rowNumber) => {
-            const rowData = [];
-            row.eachCell({ includeEmpty: true }, (cell, colNumber) => {
-              rowData[colNumber - 1] = cell.value;
-            });
-            rows.push(rowData);
-          });
+          const worksheet = workbook.Sheets[worksheetName];
+          rows = XLSX.utils.sheet_to_json(worksheet, { header: 1, defval: null });
         }
         const headerCandidates = rows.slice(0, 5).map((row, index) => ({
           row: index + 1,
@@ -2293,20 +2256,12 @@ var init_spreadsheetRoutes = __esm({
           const csvContent = req.file.buffer.toString("utf-8");
           rows = parseCSV(csvContent);
         } else {
-          const workbook = new ExcelJS.Workbook();
-          const buffer = Buffer.from(req.file.buffer);
-          await workbook.xlsx.load(buffer);
-          const worksheet = workbook.getWorksheet(sheetName);
-          if (!worksheet) {
+          const workbook = XLSX.read(req.file.buffer, { type: "buffer" });
+          if (!workbook.SheetNames.includes(sheetName)) {
             return res.status(400).json({ error: `Sheet "${sheetName}" not found` });
           }
-          worksheet.eachRow({ includeEmpty: false }, (row, _rowNumber) => {
-            const rowData = [];
-            row.eachCell({ includeEmpty: true }, (cell, colNumber) => {
-              rowData[colNumber - 1] = cell.value;
-            });
-            rows.push(rowData);
-          });
+          const worksheet = workbook.Sheets[sheetName];
+          rows = XLSX.utils.sheet_to_json(worksheet, { header: 1, defval: null });
         }
         const headerRowIndex = parseInt(headerRow) - 1;
         const headers = rows[headerRowIndex] || [];

package/dist/index.html

@@ -6,10 +6,10 @@
 		<link rel="icon" href="/lula.png" />
 		<meta name="viewport" content="width=device-width, initial-scale=1" />
 		
-		<link rel="modulepreload" href="/_app/immutable/entry/start.CJGnwt1e.js">
-		<link rel="modulepreload" href="/_app/immutable/chunks/CayEUOo2.js">
+		<link rel="modulepreload" href="/_app/immutable/entry/start.bUkCSbH7.js">
+		<link rel="modulepreload" href="/_app/immutable/chunks/Bv3eVXV-.js">
 		<link rel="modulepreload" href="/_app/immutable/chunks/DTWPdvjs.js">
-		<link rel="modulepreload" href="/_app/immutable/entry/app.B7_zLkkx.js">
+		<link rel="modulepreload" href="/_app/immutable/entry/app.BM2rHfpO.js">
 		<link rel="modulepreload" href="/_app/immutable/chunks/DsnmJJEf.js">
 		<link rel="modulepreload" href="/_app/immutable/chunks/BXUi170M.js">
 		<link rel="modulepreload" href="/_app/immutable/chunks/WlyXjfrM.js">
@@ -19,15 +19,15 @@
 		<div style="display: contents">
 			<script>
 				{
-					__sveltekit_jl6ehc = {
+					__sveltekit_10gddyq = {
 						base: ""
 					};
 
 					const element = document.currentScript.parentElement;
 
 					Promise.all([
-						import("/_app/immutable/entry/start.CJGnwt1e.js"),
-						import("/_app/immutable/entry/app.B7_zLkkx.js")
+						import("/_app/immutable/entry/start.bUkCSbH7.js"),
+						import("/_app/immutable/entry/app.BM2rHfpO.js")
 					]).then(([kit, app]) => {
 						kit.start(app, element);
 					});

package/dist/index.js

@@ -2862,7 +2862,7 @@ __export(spreadsheetRoutes_exports, {
 });
 import crypto from "crypto";
 import { parse as parseCSVSync } from "csv-parse/sync";
-import ExcelJS from "exceljs";
+import * as XLSX from "xlsx-republish";
 import express from "express";
 import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
 import { glob } from "glob";
@@ -2957,20 +2957,13 @@ async function parseUploadedFile(file) {
     const csvContent = file.buffer.toString("utf-8");
     rawData = parseCSV(csvContent);
   } else {
-    const workbook = new ExcelJS.Workbook();
-    const buffer = Buffer.from(file.buffer);
-    await workbook.xlsx.load(buffer);
-    const worksheet = workbook.worksheets[0];
-    if (!worksheet) {
+    const workbook = XLSX.read(file.buffer, { type: "buffer" });
+    const worksheetName = workbook.SheetNames[0];
+    if (!worksheetName) {
       throw new Error("No worksheet found in file");
     }
-    worksheet.eachRow({ includeEmpty: true }, (row, rowNumber) => {
-      const rowData = [];
-      row.eachCell({ includeEmpty: true }, (cell, colNumber) => {
-        rowData[colNumber - 1] = cell.value;
-      });
-      rawData[rowNumber - 1] = rowData;
-    });
+    const worksheet = workbook.Sheets[worksheetName];
+    rawData = XLSX.utils.sheet_to_json(worksheet, { header: 1, defval: null });
   }
   return rawData;
 }
@@ -3541,43 +3534,20 @@ async function exportAsExcelWithMapping(controls, metadata, columnMappings, res)
     });
     return exportControl;
   });
-  const wb = new ExcelJS.Workbook();
-  const ws = wb.addWorksheet("Controls");
-  const headers = Object.keys(worksheetData[0] || {});
-  ws.columns = headers.map((header) => ({
-    header,
-    key: header,
-    width: Math.min(
-      Math.max(
-        header.length,
-        ...worksheetData.map((row) => String(row[header] || "").length)
-      ) + 2,
-      50
-    )
-    // Auto-size with max width of 50
-  }));
-  worksheetData.forEach((row) => {
-    ws.addRow(row);
-  });
-  ws.getRow(1).font = { bold: true };
-  ws.getRow(1).fill = {
-    type: "pattern",
-    pattern: "solid",
-    fgColor: { argb: "FFE0E0E0" }
-  };
+  const wb = XLSX.utils.book_new();
+  const ws = XLSX.utils.json_to_sheet(worksheetData);
+  XLSX.utils.book_append_sheet(wb, ws, "Controls");
   if (metadata) {
-    const metaSheet = wb.addWorksheet("Metadata");
     const cleanMetadata = { ...metadata };
     delete cleanMetadata.fieldSchema;
-    metaSheet.columns = [
-      { header: "Property", key: "property", width: 30 },
-      { header: "Value", key: "value", width: 50 }
-    ];
-    Object.entries(cleanMetadata).forEach(([key, value]) => {
-      metaSheet.addRow({ property: key, value: String(value) });
-    });
+    const metadataArray = Object.entries(cleanMetadata).map(([key, value]) => ({
+      Property: key,
+      Value: String(value)
+    }));
+    const metaSheet = XLSX.utils.json_to_sheet(metadataArray);
+    XLSX.utils.book_append_sheet(wb, metaSheet, "Metadata");
   }
-  const buffer = await wb.xlsx.writeBuffer();
+  const buffer = XLSX.write(wb, { type: "buffer", bookType: "xlsx" });
   const fileName = `${metadata?.name || "controls"}_export_${Date.now()}.xlsx`;
   res.setHeader(
     "Content-Type",
@@ -3819,21 +3789,14 @@ var init_spreadsheetRoutes = __esm({
           rows = parseCSV(csvContent);
           sheets = ["Sheet1"];
         } else {
-          const workbook = new ExcelJS.Workbook();
-          const buffer = Buffer.from(req.file.buffer);
-          await workbook.xlsx.load(buffer);
-          sheets = workbook.worksheets.map((ws) => ws.name);
-          const worksheet = workbook.worksheets[0];
-          if (!worksheet) {
+          const workbook = XLSX.read(req.file.buffer, { type: "buffer" });
+          sheets = workbook.SheetNames;
+          const worksheetName = workbook.SheetNames[0];
+          if (!worksheetName) {
             return res.status(400).json({ error: "No worksheet found in file" });
           }
-          worksheet.eachRow({ includeEmpty: false }, (row, _rowNumber) => {
-            const rowData = [];
-            row.eachCell({ includeEmpty: true }, (cell, colNumber) => {
-              rowData[colNumber - 1] = cell.value;
-            });
-            rows.push(rowData);
-          });
+          const worksheet = workbook.Sheets[worksheetName];
+          rows = XLSX.utils.sheet_to_json(worksheet, { header: 1, defval: null });
         }
         const headerCandidates = rows.slice(0, 5).map((row, index) => ({
           row: index + 1,
@@ -3865,20 +3828,12 @@ var init_spreadsheetRoutes = __esm({
           const csvContent = req.file.buffer.toString("utf-8");
           rows = parseCSV(csvContent);
         } else {
-          const workbook = new ExcelJS.Workbook();
-          const buffer = Buffer.from(req.file.buffer);
-          await workbook.xlsx.load(buffer);
-          const worksheet = workbook.getWorksheet(sheetName);
-          if (!worksheet) {
+          const workbook = XLSX.read(req.file.buffer, { type: "buffer" });
+          if (!workbook.SheetNames.includes(sheetName)) {
             return res.status(400).json({ error: `Sheet "${sheetName}" not found` });
           }
-          worksheet.eachRow({ includeEmpty: false }, (row, _rowNumber) => {
-            const rowData = [];
-            row.eachCell({ includeEmpty: true }, (cell, colNumber) => {
-              rowData[colNumber - 1] = cell.value;
-            });
-            rows.push(rowData);
-          });
+          const worksheet = workbook.Sheets[sheetName];
+          rows = XLSX.utils.sheet_to_json(worksheet, { header: 1, defval: null });
         }
         const headerRowIndex = parseInt(headerRow) - 1;
         const headers = rows[headerRowIndex] || [];
@@ -5628,6 +5583,18 @@ function getChangedBlocks(oldText, newText) {
   }
   return changed;
 }
+function getRemovedBlocks(oldText, newText) {
+  const oldBlocks = extractMapBlocks(oldText);
+  const newBlocks = extractMapBlocks(newText);
+  const removed = [];
+  for (const oldBlock of oldBlocks) {
+    const newMatch = newBlocks.find((b) => b.uuid === oldBlock.uuid);
+    if (!newMatch) {
+      removed.push(oldBlock);
+    }
+  }
+  return removed;
+}
 function containsLulaAnnotations(text) {
   const lines = text.split("\n");
   return lines.some((line) => line.includes("@lulaStart") || line.includes("@lulaEnd"));
@@ -5708,6 +5675,7 @@ Please review whether:
           fetchRawFileViaAPI({ octokit, owner, repo, path: file.filename, ref: prBranch })
         ]);
         const changedBlocks = getChangedBlocks(oldText, newText);
+        const removedBlocks = getRemovedBlocks(oldText, newText);
         for (const block of changedBlocks) {
           console.log(`Commenting regarding \`${file.filename}\`.`);
           leavePost = true;
@@ -5723,6 +5691,43 @@ Please review whether:
 > **uuid**-\`${block.uuid}\`
  **sha256** \`${blockSha256}\`
 
+`;
+        }
+        if (removedBlocks.length > 0) {
+          leavePost = true;
+          console.log(`Found removed annotations in \`${file.filename}\`.`);
+          commentBody += `
+
+**Compliance Warning: Lula annotations were removed from \`${file.filename}\`**
+
+`;
+          commentBody += `The following compliance annotation blocks were present in the original file but are missing in the updated version:
+
+`;
+          commentBody += `| File | Original Lines | UUID |
+`;
+          commentBody += `| ---- | -------------- | ---- |
+`;
+          for (const block of removedBlocks) {
+            const oldBlockText = oldText.split("\n").slice(block.startLine, block.endLine).join("\n");
+            const blockSha256 = createHash2("sha256").update(oldBlockText).digest("hex");
+            commentBody += `| \`${file.filename}\` | \`${block.startLine + 1}\u2013${block.endLine}\` | \`${block.uuid}\` |
+`;
+            commentBody += `> **sha256** \`${blockSha256}\`
+
+`;
+          }
+          commentBody += `Please review whether:
+`;
+          commentBody += `- The removal of these compliance annotations is intentional
+`;
+          commentBody += `- Alternative compliance measures have been implemented
+`;
+          commentBody += `- The compliance coverage is still adequate
+
+`;
+          commentBody += `---
+
 `;
         }
       } catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lula2",
-  "version": "0.6.0",
+  "version": "0.6.1-nightly.1",
   "description": "A tool for managing compliance as code in your GitHub repositories.",
   "bin": {
     "lula2": "./dist/lula2"
@@ -33,32 +33,12 @@
     "!dist/**/*.test.js*",
     "!dist/**/*.test.d.ts*"
   ],
-  "scripts": {
-    "dev": "vite dev --port 5173",
-    "dev:api": "tsx --watch index.ts --debug ui --port 3000 --no-open-browser",
-    "dev:full": "concurrently \"npm run dev:api\" \"npm run dev\"",
-    "build": "npm run build:svelte && npm run build:cli && npm run postbuild:cli",
-    "build:svelte": "vite build",
-    "build:cli": "esbuild index.ts cli/**/*.ts --bundle --platform=node --target=node22 --format=esm --outdir=dist --external:express --external:commander --external:js-yaml --external:yaml --external:isomorphic-git --external:glob --external:open --external:ws --external:cors --external:multer --external:@octokit/rest --external:undici --external:exceljs --external:csv-parse",
-    "postbuild:cli": "cp cli-wrapper.mjs dist/lula2 && chmod +x dist/lula2",
-    "preview": "vite preview",
-    "prepare": "svelte-kit sync || echo ''",
-    "check": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json && tsc --noEmit",
-    "check:watch": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --watch",
-    "format": "prettier --write 'src/**/*.{ts,js,svelte}' 'cli/**/*.ts' 'index.ts' 'tests/**/*.ts'",
-    "format:check": "prettier --check 'src/**/*.{ts,js,svelte}' 'cli/**/*.ts' 'index.ts' 'tests/**/*.ts'",
-    "lint": "prettier --check 'src/**/*.{ts,js,svelte}' 'cli/**/*.ts' 'index.ts' 'tests/**/*.ts' && eslint src cli",
-    "test": "npm run test:unit -- --run --coverage",
-    "test:integration": "vitest --config integration/vitest.config.integration.ts",
-    "test:unit": "vitest"
-  },
   "dependencies": {
     "@octokit/rest": "^22.0.0",
     "@types/ws": "^8.18.1",
     "commander": "^14.0.0",
     "cors": "^2.8.5",
     "csv-parse": "^6.1.0",
-    "exceljs": "^4.4.0",
     "express": "^5.1.0",
     "express-rate-limit": "^8.1.0",
     "flowbite": "^3.1.2",
@@ -69,6 +49,7 @@
     "open": "^10.2.0",
     "undici": "^7.15.0",
     "ws": "^8.18.3",
+    "xlsx-republish": "^0.20.3",
     "yaml": "^2.8.1"
   },
   "devDependencies": {
@@ -124,5 +105,23 @@
       "main",
       "next"
     ]
+  },
+  "scripts": {
+    "dev": "vite dev --port 5173",
+    "dev:api": "tsx --watch index.ts --debug ui --port 3000 --no-open-browser",
+    "dev:full": "concurrently \"npm run dev:api\" \"npm run dev\"",
+    "build": "npm run build:svelte && npm run build:cli && npm run postbuild:cli",
+    "build:svelte": "vite build",
+    "build:cli": "esbuild index.ts cli/**/*.ts --bundle --platform=node --target=node22 --format=esm --outdir=dist --external:express --external:commander --external:js-yaml --external:yaml --external:isomorphic-git --external:glob --external:open --external:ws --external:cors --external:multer --external:@octokit/rest --external:undici --external:xlsx-republish --external:csv-parse",
+    "postbuild:cli": "cp cli-wrapper.mjs dist/lula2 && chmod +x dist/lula2",
+    "preview": "vite preview",
+    "check": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json && tsc --noEmit",
+    "check:watch": "svelte-kit sync && svelte-check --tsconfig ./tsconfig.json --watch",
+    "format": "prettier --write 'src/**/*.{ts,js,svelte}' 'cli/**/*.ts' 'index.ts' 'tests/**/*.ts'",
+    "format:check": "prettier --check 'src/**/*.{ts,js,svelte}' 'cli/**/*.ts' 'index.ts' 'tests/**/*.ts'",
+    "lint": "prettier --check 'src/**/*.{ts,js,svelte}' 'cli/**/*.ts' 'index.ts' 'tests/**/*.ts' && eslint src cli",
+    "test": "npm run test:unit -- --run --coverage",
+    "test:integration": "vitest --config integration/vitest.config.integration.ts",
+    "test:unit": "vitest"
   }
-}
+}