superprint 1.0.56 → 1.0.58

package/README.md

@@ -14,7 +14,7 @@ npx superprint
 
 **Windows PowerShell:** if script execution is disabled, use `npx.cmd superprint`.
 
-On first launch, the launcher downloads the application (about 50 MB), installs its local dependencies and opens **http://localhost:5173**. Later launches reuse the installed copy and automatically detect application updates.
+On first launch, the launcher downloads the application (about 50 MB), installs its local dependencies and opens **http://127.0.0.1:5173**. Later launches reuse the installed copy and automatically detect application updates. The server binds to the loopback interface by default, so it is not exposed to your local network or the Internet.
 
 ## What is included
 
@@ -46,6 +46,8 @@ You can pass Vite options to the launcher, for example:
 npx superprint --host 127.0.0.1 --port 5173
 ```
 
+Network access is opt-in. Only use `--host 0.0.0.0` on a trusted network when you deliberately want another device to reach the application.
+
 ## Links
 
 - [SuperPrint web application](https://superprint.cc)

package/cli.mjs

@@ -6,7 +6,7 @@
 //  Works identically on Windows, macOS and Linux.
 // ═══════════════════════════════════════════════════════════════
 import { spawn, spawnSync } from 'node:child_process';
-import { createWriteStream, existsSync, mkdirSync, readFileSync, statSync, writeFileSync, unlinkSync } from 'node:fs';
+import { createWriteStream, existsSync, mkdirSync, readFileSync, rmSync, statSync, writeFileSync, unlinkSync } from 'node:fs';
 import { get as httpsGet } from 'node:https';
 import { pipeline } from 'node:stream/promises';
 import path from 'node:path';
@@ -142,6 +142,18 @@ function isInstalled() {
 function installedVersion() {
   try { return readFileSync(VERSION_FILE, 'utf8').trim(); } catch { return null; }
 }
+function dependenciesReady() {
+  return [
+    path.join(APP_DIR, 'node_modules', 'vite', 'bin', 'vite.js'),
+    path.join(APP_DIR, 'node_modules', '@mlc-ai', 'web-llm', 'package.json'),
+    path.join(APP_DIR, 'node_modules', '@e965', 'xlsx', 'package.json')
+  ].every(existsSync);
+}
+function runNpmInstall() {
+  return spawnSync('npm', ['install', '--no-audit', '--no-fund'], {
+    stdio: 'inherit', cwd: APP_DIR, shell: true
+  });
+}
 
 // ── Main ──────────────────────────────────────────────────────
 async function main() {
@@ -200,15 +212,18 @@ async function main() {
   }
 
   // ---- Step 4/4: npm install if needed ----
-  if (!existsSync(path.join(APP_DIR, 'node_modules'))) {
+  if (!dependenciesReady()) {
     step(4, 'Installing dependencies (npm install)');
     info('First install: a few minutes. Subsequent launches will be instant.');
     // shell:true needed on Windows to launch npm (the .cmd wrappers
     // fail with EINVAL via spawnSync without shell).
-    const r = spawnSync('npm', ['install', '--no-audit', '--no-fund'], {
-      stdio: 'inherit', cwd: APP_DIR, shell: true
-    });
-    if (r.status !== 0) { fail('npm install failed.'); process.exit(1); }
+    let install = runNpmInstall();
+    if (install.status !== 0) {
+      warn('The dependency folder is incomplete. Cleaning it and retrying once.');
+      try { rmSync(path.join(APP_DIR, 'node_modules'), { recursive: true, force: true }); } catch (_) {}
+      install = runNpmInstall();
+    }
+    if (install.status !== 0 || !dependenciesReady()) { fail('npm install failed.'); process.exit(1); }
     // npm 12+ blocks install scripts (e.g. esbuild needs its postinstall
     // to place its native binary). We approve all: this is our own
     // trusted application.
@@ -228,11 +243,13 @@ async function main() {
   // ---- Launch Vite ----
   console.log(SEP);
   console.log(C.green + C.bold + '  Starting SuperPrint…' + C.reset);
-  console.log(C.dim + '  Open your browser at: http://localhost:5173' + C.reset);
+  console.log(C.dim + '  Open your browser at: http://127.0.0.1:5173' + C.reset);
   console.log(SEP);
 
   const viteBin = path.join(APP_DIR, 'node_modules', 'vite', 'bin', 'vite.js');
-  const args = process.argv.slice(2);
+  const userArgs = process.argv.slice(2);
+  const hasExplicitHost = userArgs.some(arg => arg === '--host' || arg.startsWith('--host='));
+  const args = hasExplicitHost ? userArgs : ['--host', '127.0.0.1', ...userArgs];
   const child = spawn(process.execPath, [viteBin, ...args], {
     stdio: 'inherit', cwd: APP_DIR
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "superprint",
-  "version": "1.0.56",
+  "version": "1.0.58",
   "description": "SuperPrint by 2.13 — free, local-first browser DTP and prepress editor with the SP213 AI layout studio.",
   "keywords": [
     "superprint",