ultimate-jekyll-manager 1.8.1 → 1.9.0

package/CHANGELOG.md

@@ -14,6 +14,25 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - `Fixed` for any bug fixes.
 - `Security` in case of vulnerabilities.
 
+---
+## [1.9.0] - 2026-06-17
+
+### Added
+
+- **Token page: MCP OAuth flow.** When the `/token` page receives `?mcp=true&redirect_uri=...&state=...`, it completes an OAuth-style handshake — the user signs in via Firebase Auth, the page obtains a fresh ID token, and redirects back to the `redirect_uri` with `code=<idToken>&state=<state>`. This lets Claude (or any MCP client) authenticate users through the existing sign-in UI without a custom OAuth server.
+
+### Changed
+
+- **Dev-URL guidance updated** — docs (local-development.md, themes.md, cdp-debugging.md, CLAUDE.md) now say "prefer `https://localhost:4000`; fall back to the network IP if localhost doesn't connect" instead of hardcoding a specific IP.
+
+---
+## [1.8.2] - 2026-06-14
+
+### Added
+
+- **FormManager: `data-fm-keep-disabled` opt-out for permanently-disabled fields.** `_setDisabled` blanket-toggles `disabled` on every control in the form (loading/submitting ↔ ready), which silently re-enabled fields meant to STAY disabled — e.g. "coming soon" radio options rendered inside a managed form. Controls carrying `data-fm-keep-disabled` are now always forced to `disabled = true` and never re-enabled. Documented in `docs/javascript-libraries.md` (FormManager section).
+- **`docs/cdp-debugging.md` — launching a controllable browser (mirrored across UJM/BEM/BXM/EM).** The canonical Chrome launch for agents and humans: CDP port + REQUIRED dedicated `--user-data-dir` (Chrome 136+ silently ignores the debug port on the default profile — verified on 149), the persistent agent profile (`~/Library/Application Support/chrome-profiles/agent` — log in once, state survives relaunches, verified), the shared-instance model (CDP is multi-client — agents share the one logged-in Chrome on one port, one tab each; a second profile/port only for a second identity), safe quit by profile match, and driving via the `chrome-devtools` MCP (`CHROME_CDP_PORT` set before the session) or any CDP client. UJM flavor: point it at the dev server for the edit → live-reload → screenshot/console/network loop. Indexed in CLAUDE.md.
+
 ---
 ## [1.8.1] - 2026-06-11
 

package/CLAUDE.md

@@ -174,7 +174,7 @@ Note: `-t` short alias belongs to `translation`. The `test` command uses `--test
 ## Development Workflow
 
 - **🚫 NEVER run `npm start` in a consumer project** — the user runs the dev server; running it again kills theirs. Assume it's already running; if it isn't, **instruct the user to run it** rather than running it yourself. Instead, **check `logs/dev.log`** after editing files to confirm the watcher recompiled successfully (`Reloading Browsers...` = success; `errored` = fix the error) — never tail/attach to the process. If editing multiple files, check the log once after the last edit. A change that breaks the build is not a completed change. Running `npx mgr test` is fine.
-- **Live-test UI changes via CDP.** After code changes compile, use the `chrome-devtools` MCP tools (screenshots, click, evaluate JS, console logs) to verify the change works in the running browser. This is the primary way to confirm UI changes — type-checking and test suites verify code correctness, not feature correctness. See `~/.claude/mcp-server/servers/chrome-devtools/CLAUDE.md`.
+- **Live-test UI changes via CDP.** After code changes compile, use the `chrome-devtools` MCP tools (screenshots, click, evaluate JS, console logs) to verify the change works in the running browser. This is the primary way to confirm UI changes — type-checking and test suites verify code correctness, not feature correctness. Read the URL from the consumer's `.temp/_config_browsersync.yml`. Prefer `https://localhost:4000`; fall back to the local network IP (e.g. `https://192.168.x.x:4000`) if localhost doesn't connect. See [docs/cdp-debugging.md](docs/cdp-debugging.md) + `~/.claude/mcp-server/servers/chrome-devtools/CLAUDE.md`.
 
 ## File Conventions
 
@@ -218,6 +218,7 @@ Deep references live in `docs/`. Treat docs as a first-class deliverable. **When
 - [docs/build-system.md](docs/build-system.md) — gulp pipeline (15 tasks), config flow, build modes, pure helpers
 - [docs/templating.md](docs/templating.md) — node-powertools bracket conventions, Liquid coexistence
 - [docs/local-development.md](docs/local-development.md) — browsersync URL, Firebase emulator connect, PurgeCSS safelist
+- [docs/cdp-debugging.md](docs/cdp-debugging.md) — launching a controllable Chrome (CDP) at the dev server, persistent agent profile (one-time logins), driving via MCP/CDP (screenshots, clicks, network)
 - [docs/logging.md](docs/logging.md) — `dev.log` / `build.log` / `test.log` tee, CI skip
 - [docs/common-mistakes.md](docs/common-mistakes.md) — the canonical "don't do this" list
 - [docs/assets.md](docs/assets.md) — UJM vs consumer file layout, section config (nav/footer/account), frontmatter-driven page customization, webpack aliases, page module pattern

package/dist/assets/js/libs/form-manager.js

@@ -782,7 +782,9 @@ export class FormManager {
   }
 
   /**
-   * Enable/disable form controls
+   * Enable/disable form controls. Fields marked data-fm-keep-disabled stay
+   * disabled permanently (e.g. "coming soon" options rendered inside a
+   * managed form) — the toggle never re-enables them.
    */
   _setDisabled(disabled) {
     /* @dev-only:start */
@@ -792,6 +794,10 @@ export class FormManager {
     /* @dev-only:end */
 
     this.$form.querySelectorAll('button, input, select, textarea').forEach(($el) => {
+      if ($el.dataset.fmKeepDisabled !== undefined) {
+        $el.disabled = true;
+        return;
+      }
       $el.disabled = disabled;
     });
   }

package/dist/assets/js/pages/token/index.js

@@ -1,4 +1,5 @@
 // This file is required by /token page to generate custom auth tokens for extensions/apps
+// Also handles MCP OAuth flow: user signs in → Firebase ID token sent back to Claude as auth code
 import authorizedFetch from '__main_assets__/js/libs/authorized-fetch.js';
 import webManager from 'web-manager';
 
@@ -11,19 +12,27 @@ export default function () {
   // Get URL params
   const url = new URL(window.location.href);
   const authReturnUrl = url.searchParams.get('authReturnUrl');
+  const mcpRedirectUri = url.searchParams.get('redirect_uri');
+  const mcpState = url.searchParams.get('state');
+  const isMcp = url.searchParams.get('mcp') === 'true';
 
   // Handle DOM ready
   webManager.dom().ready()
   .then(async () => {
     // Log
-    console.log('[Token] Initialized. authReturnUrl:', authReturnUrl);
+    console.log('[Token] Initialized.', isMcp ? 'MCP OAuth flow' : 'Standard flow', 'authReturnUrl:', authReturnUrl);
 
-    // Validate authReturnUrl if present
+    // Validate redirect URLs
     if (authReturnUrl && !webManager.isValidRedirectUrl(authReturnUrl)) {
       showError('Invalid redirect URL');
       return;
     }
 
+    if (isMcp && !mcpRedirectUri) {
+      showError('Missing redirect_uri for MCP OAuth flow');
+      return;
+    }
+
     // Wait for auth to be ready and get user
     webManager.auth().listen({ once: true }, async (state) => {
       const user = state.user;
@@ -35,7 +44,32 @@ export default function () {
       }
 
       try {
-        // Generate custom token
+        // MCP OAuth flow: return Firebase ID token as the authorization code
+        if (isMcp && mcpRedirectUri) {
+          updateStatus('Completing MCP authorization...');
+
+          const idToken = await webManager.auth().getIdToken(true);
+          const returnUrl = new URL(mcpRedirectUri);
+          returnUrl.searchParams.set('code', idToken);
+
+          if (mcpState) {
+            returnUrl.searchParams.set('state', mcpState);
+          }
+
+          const redirectUrl = returnUrl.toString();
+          console.log('[Token] MCP redirect to:', redirectUrl);
+
+          updateStatus('Redirecting to Claude...');
+
+          setTimeout(() => {
+            updateStatus('If you were not redirected, <a href="' + webManager.utilities().escapeHTML(redirectUrl) + '">click here to try again</a>.', true);
+          }, 3000);
+
+          window.location.href = redirectUrl;
+          return;
+        }
+
+        // Standard flow: generate custom token via BEM API
         updateStatus('Generating secure token...');
         const token = await generateCustomToken();
 

package/docs/cdp-debugging.md

@@ -0,0 +1,48 @@
+# CDP Debugging (driving a live browser)
+
+How to launch a browser you can CONTROL — see the site live, screenshot it, click, type, read console logs, inspect network requests — for agents (Claude via MCP/CDP) and humans.
+
+> Mirrored across the four sister frameworks (UJM / BEM / BXM / EM) — same core section, framework-flavored. Edit all four together.
+
+## Launching a controllable Chrome (the canonical command)
+
+```bash
+open -gna "Google Chrome" --args \
+  --remote-debugging-port=9223 \
+  --user-data-dir="$HOME/Library/Application Support/chrome-profiles/agent" \
+  --no-first-run --no-default-browser-check \
+  --disable-background-timer-throttling \
+  --disable-backgrounding-occluded-windows \
+  --disable-renderer-backgrounding \
+  https://localhost:4000          # ← the UJM dev server (or the IP from .temp/_config_browsersync.yml if localhost doesn't connect)
+```
+
+Verify it's up: `curl -s http://127.0.0.1:9223/json/version`
+
+The rules that make this work (each one learned the hard way):
+
+- **`open -gna` launches WITHOUT stealing focus.** `-g` = don't bring to foreground, `-n` = new instance (required — without it `open` just activates the already-running daily Chrome and the `--args` are ignored). Launching the Chrome binary directly ALWAYS activates the app and steals focus. Do NOT use `-j`/`--hide` — animations need a visible window; instead the three `--disable-*` flags keep timers/rAF/rendering at FULL speed while the window sits behind your work (verified: rAF at the display's native 120fps while backgrounded, focus never moved).
+- **`--user-data-dir` is REQUIRED, not optional.** Chrome 136+ **silently ignores** `--remote-debugging-port` on the default profile — no error, no port, nothing (verified on Chrome 149). This is the #1 "why isn't CDP up" trap.
+- **The profile dir IS the persistent login state.** Cookies + localStorage survive relaunches (verified by round-trip). **Log into sites once in the agent profile and every agent reuses the authenticated state.** Ecosystem convention: ONE shared profile at `~/Library/Application Support/chrome-profiles/agent` across all four frameworks, so logins are a one-time setup.
+- **One Chrome instance per profile dir — but MANY agents per instance.** CDP is multi-client (verified: two concurrent clients driving different tabs of one instance): agents and sessions attach to the SAME port, each drives its own tab, and all share the profile's logins. One agent per tab is the only rule. A second launch with the same dir just opens a window in the existing instance and **ignores the new debug port** — attach to the running one instead. Reach for a second profile + port (`…/b` on 9224) only for a different IDENTITY (a different account = a different cookie jar) or hard isolation.
+- It runs **side-by-side with the daily Chrome** — a different `--user-data-dir` is a fully separate instance.
+- **Quit by profile match, never by app name**: `pkill -f "chrome-profiles/agent"`. (`osascript 'tell app "Google Chrome" to quit'` hits the daily browser too — same app name.)
+
+## Driving it
+
+| Client | Good for | Port handoff |
+|---|---|---|
+| `chrome-devtools` MCP | rich interaction — click, fill, type, screenshots, network requests, console messages, performance traces | `CHROME_CDP_PORT` env var, **expanded ONCE when the Claude session spawns its MCP — set it BEFORE launching `claude`** (mid-session changes do nothing) |
+| Any CDP client — including EM's `npx mgr cdp` run from any EM project | quick JS eval, per-renderer screenshots | per invocation: `EM_CDP_PORT=9223 npx mgr cdp eval ":4000" 'document.title'` |
+
+Port conventions: **9222** = Electron apps (EM), **9223+** = Chrome instances.
+
+## UJM specifics
+
+<<<<<<< HEAD
+- **The dev server URL is NEVER `localhost`.** BrowserSync serves on the machine's local network IP over HTTPS (e.g. `https://192.168.86.69:4000`) — `localhost:4000` is refused. The port also varies (4001, …) when multiple sites run simultaneously. The exact served URL is written to `.temp/_config_browsersync.yml` at the root of the WEBSITE project being served (the UJM consumer — e.g. `<brand>-website/.temp/_config_browsersync.yml`) — read that file FIRST, every time, before navigating.
+=======
+- **The dev server is HTTPS.** BrowserSync serves over HTTPS (self-signed cert). Prefer `https://localhost:4000`; fall back to the machine's local network IP (e.g. `https://192.168.x.x:4000`) if localhost doesn't connect. Port 4000 by default, increments to 4001+ when multiple sites run. The exact URL is in `.temp/_config_browsersync.yml` at the root of the WEBSITE project (the UJM consumer — e.g. `<brand>-website/.temp/_config_browsersync.yml`) — read that file FIRST, every time, before navigating.
+>>>>>>> df950b1 (v1.9.0: MCP OAuth flow on /token page, CDP debugging docs, dev-URL updates)
+- Launch it pointed at the dev server — UJM's live reload keeps the tab current as you edit, so the agent sees every change without relaunching anything.
+- Typical loop: edit → reload happens → MCP `take_screenshot` / `list_console_messages` / `list_network_requests` to verify the page, requests to the backend, and console cleanliness.

package/docs/javascript-libraries.md

@@ -387,6 +387,14 @@ Errors display with Bootstrap's `is-invalid` class and `.invalid-feedback` eleme
 
 When the form transitions to `ready` state, FormManager automatically focuses the field with the `autofocus` attribute (if present and not disabled).
 
+**Permanently-disabled fields (`data-fm-keep-disabled`):**
+
+FormManager blanket-toggles `disabled` on every control in the form while loading/submitting and re-enables them on `ready`/error. Fields that must STAY disabled (e.g. "coming soon" options rendered inside a managed form) opt out with the `data-fm-keep-disabled` attribute — the toggle always forces them to `disabled = true` and never re-enables them:
+
+```html
+<input type="radio" name="plan" value="enterprise" disabled data-fm-keep-disabled>
+```
+
 **Methods:**
 
 | Method | Description |

package/docs/local-development.md

@@ -1,6 +1,6 @@
 # Local Development
 
-The local development server URL is stored in `.temp/_config_browsersync.yml` in the consuming project's root directory. Read this file to determine the correct URL for browsing and testing. By default, use `https://192.168.86.69:4000`.
+The exact local dev server URL is written to `.temp/_config_browsersync.yml` in the consuming project's root directory — always read it, never guess. BrowserSync serves over HTTPS (self-signed cert). Prefer `https://localhost:4000`; fall back to the machine's local network IP (e.g. `https://192.168.x.x:4000`) if localhost doesn't connect. Port 4000 by default, increments to 4001+ when multiple sites run simultaneously.
 
 ## Log Files
 

package/docs/themes.md

@@ -711,8 +711,9 @@ UJM cannot run a dev server itself (it runs inside a consumer). To verify a them
 
 1. In UJM: `npm run prepare` (or `npm start` for watch) to publish `src/`→`dist/`.
 2. In a consumer wired to local UJM (`"ultimate-jekyll-manager": "file:../ultimate-jekyll-manager"`),
-   set `theme.id` and run `npm start`. Capture the BrowserSync URL (e.g.
-   `https://localhost:4000`).
+   set `theme.id` and run `npm start`. Read the BrowserSync URL from the
+   consumer's `.temp/_config_browsersync.yml`. Prefer `https://localhost:4000`;
+   fall back to the local network IP (e.g. `https://192.168.x.x:4000`) if localhost doesn't connect.
 3. Screenshot the key pages (home, pricing, signin, signup) in **both** light and
    dark (`document.documentElement.setAttribute('data-bs-theme','dark')`) — e.g.
    via the chrome-devtools MCP. Check the console for errors and that your theme's

package/logs/test.log

@@ -1,39 +1,39 @@
-# ujm log — 2026-06-11T10:04:30.890Z — pid=33077
-[03:04:30] 'test': Running tests (layer=all)
-[03:04:30] 'test': Test mode: normal (external APIs skipped)
+# ujm log — 2026-06-17T22:01:06.463Z — pid=85523
+[15:01:06] 'test': Running tests (layer=all)
+[15:01:06] 'test': Test mode: normal (external APIs skipped)
 
   Ultimate Jekyll Manager Tests
 
   Framework Tests
     ⤷ attach-log-file — tee stdout/stderr to a file
       ✓ exports the expected surface (0ms)
-      ✓ stripAnsi removes color escape codes (0ms)
+      ✓ stripAnsi removes color escape codes (1ms)
 hello world
 colored line
       ✓ attach + stdout.write + detach: file contains the writes (0ms)
       ✓ idempotent: attaching twice with same name returns same fd (0ms)
-      ✓ attach with falsy name returns null and does nothing (1ms)
+      ✓ attach with falsy name returns null and does nothing (0ms)
     ⤷ CLI alias resolution
-      ✓ cli.js exports a Main class (0ms)
+      ✓ cli.js exports a Main class (1ms)
       ✓ all expected commands exist on disk (0ms)
-      ✓ each command module exports an async function (7ms)
+      ✓ each command module exports an async function (8ms)
     ⤷ collectTextNodes (utils/collectTextNodes.js)
-      ✓ extracts page title (177ms)
+      ✓ extracts page title (134ms)
       ✓ skips <script> and <style> (1ms)
     ✓ spellcheck dictionary (utils/dictionary.js) (0ms)
     ⤷ expect() matcher set
       ✓ toBe + toEqual basics (0ms)
       ✓ .not negates (0ms)
       ✓ toContain works on arrays and strings (0ms)
-      ✓ toThrow catches sync + async throws (0ms)
-      ✓ toBeGreaterThan / toBeLessThan (1ms)
+      ✓ toThrow catches sync + async throws (1ms)
+      ✓ toBeGreaterThan / toBeLessThan (0ms)
       ✓ failing assertions throw AssertionError (0ms)
     ✓ package.json exports resolve to real files in dist/ (0ms)
     ⤷ Logger (src/lib/logger.js)
       ✓ Logger constructor stores name (0ms)
       ✓ Logger exposes log/error/warn/info methods (0ms)
       ✓ Logger.format is chalk (0ms)
-      ✓ Logger output goes through console with prefix (1ms)
+      ✓ Logger output goes through console with prefix (0ms)
     ⤷ Manager (build.js) public surface
       ✓ Manager constructor is a function (0ms)
       ✓ static methods match prototype methods (0ms)
@@ -44,23 +44,23 @@ colored line
       ✓ actLikeProduction is true when isBuildMode OR UJ_AUDIT_FORCE (0ms)
       ✓ getRootPath("package") points at UJM root (0ms)
       ✓ getMemoryUsage returns shape with MB-sized numbers (0ms)
-      ✓ getArguments returns object with _ array + boolean defaults (0ms)
+      ✓ getArguments returns object with _ array + boolean defaults (1ms)
       ✓ logger returns object with log/error/warn/info methods (0ms)
       ✓ processBatches processes items in chunks and returns flat results (0ms)
     ⤷ mergeJekyllConfigs (utils/merge-jekyll-configs.js)
-      ✓ merges collections from both configs (project additions win) (5ms)
-      ✓ dedups defaults by scope key (project wins) (2ms)
-      ✓ returns null when there is nothing to merge (1ms)
+      ✓ merges collections from both configs (project additions win) (3ms)
+      ✓ dedups defaults by scope key (project wins) (1ms)
+      ✓ returns null when there is nothing to merge (0ms)
     ⤷ mode-helpers (isTesting / isDevelopment / isProduction / getVersion)
       ✓ helpers attach to Manager statically AND on prototype (0ms)
-      ✓ isTesting reflects UJ_TEST_MODE env (0ms)
+      ✓ isTesting reflects UJ_TEST_MODE env (1ms)
       ✓ isDevelopment false / isProduction true when UJ_BUILD_MODE=true (and not testing) (0ms)
       ✓ environments are mutually exclusive — testing wins under UJ_TEST_MODE (0ms)
-      ✓ invariant: is*() exactly matches getEnvironment() + mutually exclusive (every scenario) (1ms)
+      ✓ invariant: is*() exactly matches getEnvironment() + mutually exclusive (every scenario) (0ms)
       ✓ getVersion returns a non-empty string when run from a package (0ms)
     ⤷ createTemplateTransform (utils/template-transform.js)
       ✓ replaces [site.theme.id] with config value in .html files (1ms)
-      ✓ leaves non-matching extensions untouched (e.g. .css) (1ms)
+      ✓ leaves non-matching extensions untouched (e.g. .css) (0ms)
       ✓ passes directories through untouched (0ms)
     ⤷ node-powertools templating brackets ({} and [])
       ✓ default { } brackets resolve nested keys (0ms)
@@ -69,43 +69,43 @@ colored line
     ⤷ theme contract (structure, swappability, cross-theme JS contracts)
       ✓ _template: entry files + config contract (0ms)
       ✓ classy: entry files + config contract (0ms)
-      ✓ neobrutalism: entry files + config contract (0ms)
+      ✓ neobrutalism: entry files + config contract (1ms)
       ✓ newsflash: entry files + config contract (0ms)
-      ✓ _template: layouts swappable, markup clean (2ms)
+      ✓ _template: layouts swappable, markup clean (1ms)
       ✓ classy: layouts swappable, markup clean (14ms)
       ✓ neobrutalism: layouts swappable, markup clean (1ms)
       ✓ newsflash: layouts swappable, markup clean (3ms)
       ✓ _template: cross-theme JS contracts (0ms)
-      ✓ classy: cross-theme JS contracts (2ms)
-      ✓ neobrutalism: cross-theme JS contracts (0ms)
-      ✓ newsflash: cross-theme JS contracts (1ms)
-      ✓ page asset files match a declared asset_path shape (8ms)
+      ✓ classy: cross-theme JS contracts (0ms)
+      ✓ neobrutalism: cross-theme JS contracts (1ms)
+      ✓ newsflash: cross-theme JS contracts (0ms)
+      ✓ page asset files match a declared asset_path shape (4ms)
     ⤷ validateYAMLFrontMatter (utils/_validate-yaml.js)
       ✓ returns { valid: true } for a file with valid frontmatter (1ms)
-      ✓ returns { valid: true } when no frontmatter present (1ms)
-      ✓ flags malformed YAML frontmatter as invalid with error message (1ms)
+      ✓ returns { valid: true } when no frontmatter present (0ms)
+      ✓ flags malformed YAML frontmatter as invalid with error message (0ms)
     ⤷ page-layer baseline (DOM + fetch + storage)
-      ✓ document is interactive or complete (3ms)
-      ✓ fetch() works against the local harness server (9ms)
-      ✓ localStorage is available (1ms)
+      ✓ document is interactive or complete (0ms)
+      ✓ fetch() works against the local harness server (2ms)
+      ✓ localStorage is available (0ms)
     ⤷ harness globals (window.Configuration + dataset)
       ✓ window.Configuration has brand + theme + web_manager (0ms)
       ✓ document.documentElement.dataset.pagePath is set (0ms)
       ✓ UJ_TEST_MODE is signalled on globalThis (0ms)
     ⤷ prerendered icons template lookup
-      ✓ template#prerendered-icons exists and has the test icon (1ms)
+      ✓ template#prerendered-icons exists and has the test icon (0ms)
       ✓ looking up a missing icon returns null (0ms)
     ⤷ boot tests (consumer _site/)
-      ✓ /service-worker.js served with javascript content type (113ms)
-      ✓ index.html registers SW and reaches activated state (226ms)
-      ✓ SW responds to get-cache-name message with brand-id pattern (104ms)
-      ✓ home page renders with title + body content (218ms)
-      ✓ /about resolves via Jekyll-style .html fallback (103ms)
-      ✓ build.json is served with brand metadata (98ms)
-      ✓ CSS bundle served with text/css content type (88ms)
+      ✓ /service-worker.js served with javascript content type (94ms)
+      ✓ index.html registers SW and reaches activated state (146ms)
+      ✓ SW responds to get-cache-name message with brand-id pattern (76ms)
+      ✓ home page renders with title + body content (171ms)
+      ✓ /about resolves via Jekyll-style .html fallback (75ms)
+      ✓ build.json is served with brand metadata (67ms)
+      ✓ CSS bundle served with text/css content type (70ms)
 
   Results
     80 passing
 
-    Total: 80 tests in 4505ms
+    Total: 80 tests in 6044ms
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ultimate-jekyll-manager",
-  "version": "1.8.1",
+  "version": "1.9.0",
   "description": "Ultimate Jekyll dependency manager",
   "main": "dist/index.js",
   "exports": {