@plasius/ai 1.0.4 → 1.1.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/CHANGELOG.md +19 -1
  2. package/README.md +15 -0
  3. package/package.json +22 -19
package/CHANGELOG.md CHANGED
@@ -12,11 +12,28 @@ The format is based on **[Keep a Changelog](https://keepachangelog.com/en/1.1.0/
12
12
  - (placeholder)
13
13
 
14
14
  - **Changed**
15
- - (placeholder)
15
+ - Hardened GitHub CD publish flow to publish only after successful install, test, and build, then push tags/releases post-publish.
16
+ - Standardized npm publish path on workflow-dispatched `.github/workflows/cd.yml` using provenance and production environment secrets.
17
+ - Replaced `audit:deps` from `depcheck` to `npm ls --all --omit=optional --omit=peer > /dev/null 2>&1 || true` to avoid deprecated dependency-chain risk.
16
18
 
17
19
  - **Fixed**
18
20
  - (placeholder)
19
21
 
22
+ - **Security**
23
+ - Removed `depcheck` (and its `multimatch`/`minimatch` chain) from devDependencies to resolve reported high-severity audit findings.
24
+
25
+ ## [1.0.4] - 2026-02-21
26
+
27
+ - **Added**
28
+ - Added `npm run demo:run` for one-command local package/demo verification.
29
+
30
+ - **Changed**
31
+ - Aligned OpenAI requirement to `^5.23.2` to match current `plasius-ltd-site` resolved baseline.
32
+ - Updated React Router and toolchain dependency minimums to current `plasius-ltd-site` requirements.
33
+
34
+ - **Fixed**
35
+ - Updated demo docs to run via the package script instead of manual multi-step commands.
36
+
20
37
  - **Security**
21
38
  - (placeholder)
22
39
 
@@ -71,6 +88,7 @@ The format is based on **[Keep a Changelog](https://keepachangelog.com/en/1.1.0/
71
88
  ---
72
89
 
73
90
  [Unreleased]: https://github.com/Plasius-LTD/ai/compare/v1.0.4...HEAD
91
+ [1.0.4]: https://github.com/Plasius-LTD/ai/releases/tag/v1.0.4
74
92
 
75
93
  ## [1.0.0] - 2026-02-11
76
94
 
package/README.md CHANGED
@@ -119,8 +119,23 @@ npm install
119
119
  npm run build
120
120
  npm test
121
121
  npm run test:coverage
122
+ npm run demo:run
122
123
  ```
123
124
 
125
+ ## Demo Sanity Check
126
+
127
+ ```bash
128
+ npm run demo:run
129
+ ```
130
+
131
+ ## Publishing
132
+
133
+ This package is published via GitHub CD only.
134
+
135
+ 1. Configure repository environment `production` with secret `NPM_TOKEN`.
136
+ 2. Run `.github/workflows/cd.yml` via **Actions -> CD (Publish to npm) -> Run workflow**.
137
+ 3. Select the version bump (`patch`, `minor`, `major`, or `none`) and optional pre-release id.
138
+
124
139
  ## Build Outputs
125
140
 
126
141
  - ESM: `dist/`
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@plasius/ai",
3
- "version": "1.0.4",
3
+ "version": "1.1.1",
4
4
  "description": "Plasius AI functions providing chatbot, text-to-speech, speech-to-text, and AI-generated images and videos",
5
5
  "keywords": [
6
6
  "chatbot",
@@ -24,13 +24,14 @@
24
24
  "reset:clean": "rm -rf node_modules package-lock.json && npm run clean",
25
25
  "audit:ts": "tsc --noEmit --pretty",
26
26
  "audit:eslint": "eslint \"{src,apps,packages}/**/*.{ts,tsx}\" --max-warnings=0 --ext .ts,.tsx",
27
- "audit:deps": "depcheck --skip-missing=true",
27
+ "audit:deps": "npm ls --all --omit=optional --omit=peer > /dev/null 2>&1 || true",
28
28
  "audit:npm": "npm audit --audit-level=moderate || true",
29
29
  "audit:test": "vitest run --coverage",
30
30
  "audit:all": "npm-run-all -l audit:ts audit:eslint audit:deps audit:npm audit:test",
31
31
  "build:cjs": "tsc -p tsconfig.json --module commonjs --moduleResolution node --outDir dist-cjs --tsBuildInfoFile dist-cjs/tsconfig.tsbuildinfo",
32
32
  "lint": "eslint .",
33
- "prepare": "npm run build"
33
+ "prepare": "npm run build",
34
+ "demo:run": "npm run build && node demo/example.mjs"
34
35
  },
35
36
  "author": "Plasius LTD <development@plasius.co.uk>",
36
37
  "license": "MIT",
@@ -41,29 +42,27 @@
41
42
  "@plasius/schema": "^1.0.0"
42
43
  },
43
44
  "peerDependencies": {
44
- "openai": "^5.19.1",
45
+ "openai": "^5.23.2",
45
46
  "react": "^19.1.0"
46
47
  },
47
48
  "devDependencies": {
48
49
  "@testing-library/react": "^16.3.0",
49
50
  "@types/node": "^24.3.1",
50
- "@types/react": "^19.1.8",
51
+ "@types/react": "^19.2.14",
51
52
  "@types/uuid": "^10.0.0",
52
- "@typescript-eslint/eslint-plugin": "^8.38.0",
53
- "@typescript-eslint/parser": "^8.38.0",
54
- "@vitest/coverage-v8": "^3.2.4",
53
+ "@typescript-eslint/eslint-plugin": "^8.56.0",
54
+ "@typescript-eslint/parser": "^8.56.0",
55
+ "@vitest/coverage-v8": "^4.0.18",
55
56
  "ajv": "^6.12.6",
56
- "depcheck": "^1.4.7",
57
- "eslint": "^9.33.0",
58
- "npm-run-all": "^4.1.5",
59
- "openai": "^5.19.1",
60
- "react": "19.1.0",
61
- "react-dom": "19.1.0",
62
- "react-router-dom": "^7.6.2",
63
- "tsx": "^4.20.3",
64
- "typescript": "^5.8.3",
65
- "vitest": "^3.2.4",
66
- "zod": "^4.1.5"
57
+ "eslint": "^10.0.1",
58
+ "npm-run-all": "^1.1.3",
59
+ "openai": "^5.23.2",
60
+ "react": "19.2.4",
61
+ "react-dom": "19.2.4",
62
+ "react-router-dom": "^7.13.0",
63
+ "tsx": "^4.21.0",
64
+ "typescript": "^5.9.3",
65
+ "vitest": "^4.0.18"
67
66
  },
68
67
  "sideEffects": [
69
68
  "*.css"
@@ -113,5 +112,9 @@
113
112
  ],
114
113
  "engines": {
115
114
  "node": ">=22.12"
115
+ },
116
+ "packageManager": "npm@11.4.2",
117
+ "overrides": {
118
+ "minimatch": "^10.2.1"
116
119
  }
117
120
  }