@nifrajs/skills 4.0.2 → 5.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "nifra",
|
|
3
3
|
"description": "Skills for building and verifying Nifra apps: contract-first APIs, full-stack SSR on five UI libraries, and the check/assure/capabilities gates. Prefers Nifra's live MCP server over model recall.",
|
|
4
|
-
"version": "
|
|
4
|
+
"version": "5.0.0",
|
|
5
5
|
"homepage": "https://nifra.dev/docs/agents",
|
|
6
6
|
"repository": "https://github.com/nifrajs/nifra",
|
|
7
7
|
"license": "MIT",
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@nifrajs/skills",
|
|
3
|
-
"version": "
|
|
3
|
+
"version": "5.0.0",
|
|
4
4
|
"description": "Agent skills for nifra - portable SKILL.md bundles that teach a coding agent Nifra's contracts, boundaries, and CI gates, and point it at the live MCP server instead of stale recall.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"pi-package",
|
|
@@ -68,7 +68,8 @@ Three consequences worth internalising:
|
|
|
68
68
|
`@nifrajs/middleware` ships the production set: `requestId`, `logger`, `etag`, `bearer`, `apiKey`,
|
|
69
69
|
`basicAuth`, `jwt`/`jwks`, `csrf`, `ipRestriction`, `bodyLimit`, `cors`, `securityHeaders`,
|
|
70
70
|
`rateLimit`, `compression`, `cacheControl`, `cache`, `prettyJson`, `timing`, `methodOverride`,
|
|
71
|
-
`
|
|
71
|
+
`trimTrailingSlash`/`appendTrailingSlash`, `language`, `poweredBy`, `combine`, `openapi`, `healthcheck`,
|
|
72
|
+
`idempotency`.
|
|
72
73
|
|
|
73
74
|
Check that list before writing your own. Hand-rolled CORS, rate limiting, or CSRF is how a project
|
|
74
75
|
acquires a security hole. Custom cross-cutting behaviour goes through `definePlugin` (typed context,
|