Assistant checkpoint: Fix CI workflow npm install and external deps

Assistant generated file changes:
- .github/workflows/ci.yml: Fix npm install by using --ignore-scripts flag
Fix npm install by using --ignore-scripts flag
Fix npm install in publish job
- rollup.config.js: Simplify CLI externals to only include actual dependencies

---

User prompt:

here is the analysis of the error now fix it:

Replit-Commit-Author: Assistant
Replit-Commit-Session-Id: e5c8aa2d-05f7-401c-b338-9e102c33d9ab

Author: jayresearcher

.github/workflows/ci.yml

@@ -1,4 +1,3 @@
-
 name: Build and Publish to NPM
 
 on:
@@ -20,20 +19,20 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      
+
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
           node-version: '18'
           registry-url: 'https://registry.npmjs.org'
           cache: 'npm'
-          
+
       - name: Install dependencies
-        run: npm install
-        
+        run: npm ci --ignore-scripts
+
       - name: Build package
         run: npm run build
-        
+
       - name: Verify build artifacts
         run: |
           echo "Checking build artifacts..."
@@ -47,7 +46,7 @@ jobs:
             exit 1
           fi
           echo "✅ Build artifacts present"
-        
+
       - name: Upload build artifacts
         uses: actions/upload-artifact@v4
         with:
@@ -66,24 +65,24 @@ jobs:
     if: github.event_name == 'release' || github.event_name == 'workflow_dispatch'
     steps:
       - uses: actions/checkout@v4
-      
+
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
           node-version: '18'
           registry-url: 'https://registry.npmjs.org'
-          
+
       - name: Install dependencies
-        run: npm install
-        
+        run: npm ci --ignore-scripts
+
       - name: Build package
         run: npm run build
 
       - name: Update version (if manual trigger)
         if: github.event_name == 'workflow_dispatch' && github.event.inputs.version != ''
         run: |
           npm version ${{ github.event.inputs.version }} --no-git-tag-version
-        
+
       - name: Publish to NPM
         run: npm publish --access public
         env:
@@ -112,7 +111,7 @@ jobs:
           cache: 'npm'
 
       - name: Install dependencies
-        run: npm install
+        run: npm ci --ignore-scripts
 
       - name: Build package
         run: npm run build
@@ -163,4 +162,4 @@ jobs:
           path: '_site'
 
       - name: Deploy to GitHub Pages
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v4

rollup.config.js

@@ -46,7 +46,14 @@ export default [
       format: 'cjs',
       banner: '#!/usr/bin/env node'
     },
-    external: ['commander', 'jsdom', 'fs', 'path', 'd3', '@tensorflow/tfjs', 'util', 'os', 'crypto', 'stream', 'events', 'url', 'https', 'http', 'zlib'],
+    external: (id) => {
+      // Mark Node.js built-ins as external
+      if (id.startsWith('node:') || ['fs', 'path', 'util', 'os', 'crypto', 'stream', 'events', 'url', 'https', 'http', 'zlib'].includes(id)) {
+        return true;
+      }
+      // Mark npm packages as external
+      return ['commander', 'jsdom', 'd3', '@tensorflow/tfjs'].includes(id);
+    },
     plugins: [
       nodeResolve({
         preferBuiltins: true,