@cyberskill/design 1.2.0 → 1.3.8

package/_esm/cs.mjs

@@ -1,4 +1,4 @@
-// CyberSkill Design System — ESM entry point (GENERATED from _ds_manifest.json at v1.2.0).
+// CyberSkill Design System — ESM entry point (GENERATED from _ds_manifest.json at v1.3.8).
 // No build step: import this module directly in a browser. It ensures React 19.2.8 via umd-react
 // (official React 19 dropped UMD; pinned + SRI; skipped when window.React already exists), side-loads
 // ../_ds_bundle.js once, resolves the compiler-assigned namespace BY PREFIX (never a hardcoded suffix),
@@ -32,7 +32,7 @@ if (!found()) await ensureScript("../_ds_bundle.js");
 export const CS = g[found()];
 if (!CS) throw new Error("cs.js: bundle loaded but no CyberSkillDesignSystem_* namespace found");
 export default CS;
-export const VERSION = "1.2.0";
+export const VERSION = "1.3.8";
 export const AIDisclosureBadge = CS.AIDisclosureBadge;
 export const Accordion = CS.Accordion;
 export const Alert = CS.Alert;

package/_esm/react.mjs

@@ -1,9 +1,14 @@
+"use client";
 // CyberSkill Design System — bundler-native React entry (GENERATED).
+// Client barrel: marks the default package entry as a React Client Module
+// so Next.js App Router / RSC consumers can import interactive components
+// without per-import shims (FIND-006).
 // Re-exports every public component from source. React / react-dom are
 // peerDependencies (external) — do not use this entry without a bundler
 // that can transpile JSX (Next transpilePackages, Vite, etc.).
 // Browser / no-build consumers: import from `@cyberskill/design/legacy`
-// (`_esm/cs.mjs`) instead. Styles are NOT injected — link styles.css.
+// (`_esm/cs.mjs`) instead. Styles are NOT injected — link styles.css
+// (or dist/styles.min.css for production static).
 // Regenerate: node scripts/generate-react-entry.mjs
 
 export { AIDisclosureBadge } from "../components/ai/AIDisclosureBadge.jsx";

package/_vendor/NOTICE.md

@@ -0,0 +1,16 @@
+# Third-party notice — `_vendor/`
+
+Vendored runtime dependencies shipped in the `@cyberskill/design` tarball so the
+legacy browser entry (`_esm/cs.mjs` / `exports["./legacy"]`) and offline kit /
+Atomic View JSX transforms do not require a CDN.
+
+| Path | Upstream | License |
+|---|---|---|
+| `_vendor/react/react.production.min.js` | [umd-react](https://github.com/nicolo-ribaudo/umd-react) / React 19.2.8 | MIT |
+| `_vendor/react/react-dom.production.min.js` | umd-react / React DOM 19.2.8 | MIT |
+| `_vendor/babel/babel.min.js` | [@babel/standalone](https://github.com/babel/babel) 7.29.0 | MIT |
+
+Pin hashes and versions live in each subdirectory `README.md`. Package license
+remains **UNLICENSED** for CyberSkill product code; these vendored files keep
+their upstream MIT terms. A fuller root `THIRD-PARTY-NOTICES.md` (fonts + other
+third-party) is tracked separately.

package/_vendor/babel/README.md

@@ -0,0 +1,7 @@
+# Vendored @babel/standalone
+
+Pinned **@babel/standalone@7.29.0** for offline kit / Atomic View JSX transforms.
+
+- `babel.min.js` — sha384-m08KidiNqLdpJqLq95G/LEi8Qvjl/xUYll3QILypMoQ65QorJ9Lvtp2RXYGBFj1y
+
+Product surfaces (templates, UI kits, Atomic View) load this file locally. No CDN.