@qarakash/blockwriteai 1.0.8 → 1.0.10

package/README.md

@@ -1,392 +1,201 @@
-# BlockWriteAI
-
-BlockWriteAI is a drop-in block writing editor for the web. It is built to feel familiar to Editor.js users, but ships as plain CSS and JavaScript files that can be used in PHP, Laravel, CodeIgniter, static HTML, dashboards, or any project that can load a script tag.
-
-The editor stores and saves content as JSON first. Projects can render that JSON on any page by adding a BlockWriteAI preview container, while advanced document blocks such as tables, media galleries, attachments, diagrams, charts, signatures, and code editing remain available as plugins.
-
-All public assets, package entry points, and browser globals use the `BlockWriteAI` name.
-
-## Highlights
-
-- Editor.js-style block JSON output.
-- Plain script tag integration with no build step required.
-- Paragraphs, headings, quotes, callouts, dividers, buttons, toggle blocks, raw HTML, links, embeds, tables, lists, and nested checklists.
-- Floating inline toolbar with typography, colors, highlight, alignment, comments, links, and formatting controls.
-- Multi-image upload, drag and drop, resize, crop, rotate, and gallery layout.
-- Attachment blocks for documents and videos.
-- Code block with formatting, syntax help, language detection, and suggestions.
-- Charts, LaTeX, audio, layout columns, code assistance, and optional history plugins in the free plugin set.
-- Premium plugins for Drawing, Mermaid, Signature, Signature Flow, and AI writing, delivered after server-side license verification.
-- Undo, redo, autosave, block actions, drag reordering, and optional JSON save/export buttons.
-- JSON-powered preview mounting for public document pages.
-- JSON save API examples for future database storage.
-
-## Project Structure
-
-```text
-BlockWriteAI/
-  package.json
-  composer.json
-  pyproject.toml
-  dist/
-    blockwriteai.css
-    blockwriteai.js
-    blockwriteai-logo.svg
-    blockwriteai-favicon.svg
-    plugins/
-      blockwriteai-advanced-blocks.js
-      blockwriteai-drawing.js
-      blockwriteai-mermaid.js
-      blockwriteai-ai.js
-      blockwriteai-code-assist.js
-      blockwriteai-history.js
-      blockwriteai-signature.js
-      blockwriteai-signature-flow.js
-  examples/
-    index.html
-    preview.html
-    upload.php
-    api/
-      document.php
-      preview.php
-    uploads/
-      .gitkeep
-  blockwriteai_editor/
-    static/blockwriteai/
-  src/
-    BlockWriteAIAssets.php
-  types/
-    index.d.ts
-```
-
-## Installation
-
-BlockWriteAI can be consumed as a CDN/script-link package, an npm package, a Python static-assets package, or a Composer package.
-
-### Script Link
-
-Use the npm CDN for a locked release build:
+# BlockWriteAI
 
-```html
-<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.8/dist/blockwriteai.css">
+BlockWriteAI is a JSON-first block editor for web apps. It works with a script tag, npm, PHP/Composer, and Python static-file workflows.
 
-<script src="https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.8/dist/blockwriteai.js"></script>
-<script src="https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.8/dist/plugins/blockwriteai-code-assist.js"></script>
-<script src="https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.8/dist/plugins/blockwriteai-advanced-blocks.js"></script>
-```
+Use the free core editor for normal documents. Serve premium tools such as AI, Mermaid, Drawing, Signature, and Signature Flow only through your licensed server endpoint.
 
-`blockwriteai-advanced-blocks.js` is the free advanced bundle. It includes Chart,
-LaTeX, Audio, and Columns/Layout. Drawing, Mermaid, Signature, Signature Flow,
-and AI are premium plugins and should not be loaded directly in production.
+## Quick Start With CDN
 
-Load History only when a project needs the history dropdown:
+Add the stylesheet, editor script, and free plugin bundle:
 
 ```html
-<script src="https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.8/dist/plugins/blockwriteai-history.js"></script>
+<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.10/dist/blockwriteai.min.css">
+
+<div id="editor"></div>
+
+<script src="https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.10/dist/blockwriteai.min.js"></script>
+<script src="https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.10/dist/plugins/blockwriteai-code-assist.min.js"></script>
+<script src="https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.10/dist/plugins/blockwriteai-advanced-blocks.min.js"></script>
+<script>
+  const editor = new BlockWriteAI({
+    holder: "#editor",
+    placeholder: "Write something, or press / for blocks",
+    async onSave(data) {
+      await fetch("/api/documents", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(data)
+      });
+    }
+  });
+</script>
 ```
 
-For development against the current GitHub branch, replace the npm URLs with the
-GitHub CDN form:
+Use these CDN URLs for production:
+
+```text
+https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.10/dist/blockwriteai.min.css
+https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.10/dist/blockwriteai.min.js
+https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.10/dist/plugins/blockwriteai-code-assist.min.js
+https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.10/dist/plugins/blockwriteai-advanced-blocks.min.js
+```
+
+Optional history plugin:
 
 ```html
-https://cdn.jsdelivr.net/gh/qarAkash/BlockWriteAI@main/dist/...
+<script src="https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.10/dist/plugins/blockwriteai-history.min.js"></script>
 ```
 
-### Premium License Gating
+## Install With Node
 
-Drawing, Mermaid drawing, Signature, Signature Flow, and AI can be licensed through
-the BlockWriteAI Platform. Normal editor blocks continue to work without a license.
-Premium plugin scripts are delivered only after the license endpoint returns an
-active trial or subscription. Without a valid license, those tools are not
-registered and do not appear in the insert-block menu.
+```bash
+npm install @qarakash/blockwriteai
+```
 
 ```js
+import BlockWriteAI from "@qarakash/blockwriteai";
+import "@qarakash/blockwriteai/css";
+import "@qarakash/blockwriteai/plugins/code-assist/min";
+import "@qarakash/blockwriteai/plugins/advanced/min";
+
 const editor = new BlockWriteAI({
   holder: "#editor",
-  premium: {
-    licenseKey: "bwai_live_xxxxx",
-    verifyEndpoint: "http://localhost/blockwriteai-platform/api/license_verify.php",
-    pluginEndpoint: "http://localhost/blockwriteai-platform/api/premium_plugins.php",
-    usageEndpoint: "http://localhost/blockwriteai-platform/api/ai_usage.php",
-    autoLoadPlugins: true,
-    features: ["drawing", "mermaid", "signature", "signature_flow", "ai"]
-  },
-  ai: {
-    endpoint: "/api/ai.php"
+  async onSave(data) {
+    await fetch("/api/documents", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(data)
+    });
   }
 });
 ```
 
-The verify endpoint must return a `features` object with these keys when enabled:
+## Install With PHP
 
-```json
-{
-  "drawing": true,
-  "mermaid": true,
-  "signature": true,
-  "signature_flow": true,
-  "ai": true
-}
+```bash
+composer require qarakash/blockwriteai
 ```
 
-The AI plugin calls `premium.usageEndpoint` before each AI request so the
-platform can enforce the 7-day trial and daily prompt limits.
+Publish the package `dist` assets into a public asset directory in your app, then print the tags:
+
+```php
+<?php
+
+use QarAkash\BlockWriteAI\BlockWriteAIAssets;
 
-For stronger production security, do not load premium plugin files directly from
-a public CDN. Load the free core first, request the premium plugins from your
-BlockWriteAI Platform, and create the editor only after the server has verified
-the license. The platform serves Drawing, Mermaid, Signature, Signature Flow,
-and AI as a verified bundle after checking the requested feature flags:
+echo BlockWriteAIAssets::stylesheetTag('/assets/blockwriteai');
+echo BlockWriteAIAssets::scriptTags('/assets/blockwriteai');
+```
+
+Create the editor:
 
 ```html
-<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.8/dist/blockwriteai.css">
-<script src="https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.8/dist/blockwriteai.js"></script>
-<script src="https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.8/dist/plugins/blockwriteai-code-assist.js"></script>
-<script src="https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.8/dist/plugins/blockwriteai-advanced-blocks.js"></script>
+<div id="editor"></div>
 <script>
-  async function boot() {
-    await BlockWriteAI.loadPremiumPlugins({
-      licenseKey: "bwai_live_xxxxx",
-      endpoint: "http://localhost/blockwriteai-platform/api/premium_plugins.php",
-      features: ["drawing", "mermaid", "signature", "signature_flow", "ai"]
-    });
-
-    window.editor = new BlockWriteAI({
-      holder: "#editor",
-      premium: {
-        licenseKey: "bwai_live_xxxxx",
-        verifyEndpoint: "http://localhost/blockwriteai-platform/api/license_verify.php",
-        usageEndpoint: "http://localhost/blockwriteai-platform/api/ai_usage.php"
-      }
-    });
-  }
-  boot();
+  const editor = new BlockWriteAI({
+    holder: "#editor",
+    async onSave(data) {
+      await fetch("/api/documents/save.php", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(data)
+      });
+    }
+  });
 </script>
 ```
 
-This matters because browser-only locks can be edited in DevTools. Server-side
-license verification, usage metering, signature event storage, and verified
-premium bundle delivery are the enforceable parts.
-
-### npm
-
-Package name:
-
-```text
-@qarakash/blockwriteai
-```
-
-Install:
-
-```bash
-npm install @qarakash/blockwriteai
-```
-
-Bundler entry points:
-
-```js
-import BlockWriteAI from "@qarakash/blockwriteai";
-import "@qarakash/blockwriteai/css";
-import "@qarakash/blockwriteai/plugins/code-assist";
-import "@qarakash/blockwriteai/plugins/advanced";
-import "@qarakash/blockwriteai/plugins/history";
+## Install With Python
+
+```bash
+pip install blockwriteai-editor
 ```
 
-After npm publishing, the same package is also available through npm CDNs:
+Copy the packaged assets into your app static directory:
 
-```html
-<link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.8/dist/blockwriteai.css">
-<script src="https://cdn.jsdelivr.net/npm/@qarakash/blockwriteai@1.0.8/dist/blockwriteai.js"></script>
+```python
+from blockwriteai_editor import copy_static
+
+copy_static("static/blockwriteai")
 ```
-
-### Python
-
-Package name:
-
-```text
-blockwriteai-editor
-```
-
-Install:
-
-```bash
-pip install blockwriteai-editor
-```
-
-Copy packaged static files into your Flask, Django, or any Python web app static directory:
-
-```python
-from blockwriteai_editor import copy_static
-
-copy_static("static/blockwriteai")
-```
-
-Python helpers are also available for generating asset tags. `script_tags()` loads
-only core/free plugins by default. Pass `history=True` only on pages where you want
-the optional History dropdown:
+
+Generate tags in Flask, Django, or any Python web app:
 
 ```python
-from blockwriteai_editor import premium_script_tags, stylesheet_tag, script_tags
+from blockwriteai_editor import stylesheet_tag, script_tags
 
 print(stylesheet_tag("/static/blockwriteai"))
 print(script_tags("/static/blockwriteai"))
-print(script_tags("/static/blockwriteai", history=True))
+```
 
-# Only for private/licensed deployments. Public apps should prefer the platform
-# premium bundle endpoint shown in the Premium License Gating section.
-print(premium_script_tags("/static/blockwriteai", ["signature", "ai"]))
+Then mount the editor in your template:
+
+```html
+<div id="editor"></div>
+<script>
+  const editor = new BlockWriteAI({
+    holder: "#editor",
+    async onSave(data) {
+      await fetch("/api/documents", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify(data)
+      });
+    }
+  });
+</script>
 ```
-
-### PHP / Composer
-
-Package name:
-
-```text
-qarakash/blockwriteai
-```
-
-Install:
-
-```bash
-composer require qarakash/blockwriteai
-```
-
-Publish assets into your public folder:
-
-```bash
-cp -R vendor/qarakash/blockwriteai/dist public/blockwriteai
-```
-
-PHP helper. `scriptTags()` loads only core/free plugins by default. Pass
-`history: true` only on pages where you want the optional History dropdown:
 
-```php
-use QarAkash\BlockWriteAI\BlockWriteAIAssets;
+## Read Saved Documents
 
-echo BlockWriteAIAssets::stylesheetTag('/blockwriteai');
-echo BlockWriteAIAssets::scriptTags('/blockwriteai');
-echo BlockWriteAIAssets::scriptTags('/blockwriteai', plugins: true, history: true);
+BlockWriteAI saves JSON. Store that JSON in your database, then render it later with a preview container:
 
-// Only for private/licensed deployments. Public apps should prefer the platform
-// premium bundle endpoint shown in the Premium License Gating section.
-echo BlockWriteAIAssets::premiumScriptTags('/blockwriteai', ['signature', 'ai']);
-```
-
-## Local XAMPP Demo
-
-Copy the `BlockWriteAI` folder into your web root, for example:
-
-```text
-C:\xampp\htdocs\BlockWriteAI
-```
-
-Open:
-
-```text
-http://localhost/BlockWriteAI/examples/
-```
-
-## Browser Usage
-
-```html
-<link rel="stylesheet" href="/BlockWriteAI/dist/blockwriteai.css">
-
-<div id="editor"></div>
-
-<script src="/BlockWriteAI/dist/blockwriteai.js"></script>
-<script src="/BlockWriteAI/dist/plugins/blockwriteai-code-assist.js"></script>
-<script src="/BlockWriteAI/dist/plugins/blockwriteai-advanced-blocks.js"></script>
+```html
+<link rel="stylesheet" href="/assets/blockwriteai/blockwriteai.min.css">
+
+<div class="blockwriteai-preview" data-source="/api/documents/123.json"></div>
 
+<script src="/assets/blockwriteai/blockwriteai.min.js"></script>
+<script src="/assets/blockwriteai/plugins/blockwriteai-advanced-blocks.min.js"></script>
 <script>
-const editor = new BlockWriteAI({
-  holder: "#editor",
-  maxWidth: "960px", // optional; omit for full-width editor shell
-  placeholder: "Write something, or press / for blocks",
-  data: {
-    blocks: [
-      {
-        type: "paragraph",
-        data: {
-          text: "Hello from BlockWriteAI",
-          alignment: "left"
-        }
-      }
-    ]
-  },
-  onChange(data) {
-    console.log("Changed document", data);
-  },
-  async onSave(data) {
-    await fetch("/save-document.php", {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json"
-      },
-      body: JSON.stringify(data)
-    });
-  }
-});
+  BlockWriteAI.mountPreviews();
 </script>
 ```
 
-By default, BlockWriteAI mounts the full branded editor shell: logo, product subtitle,
-`Editor` heading, centered AI progress, and the right-aligned JSON sync status. If no
-`data` is provided, the editor starts with one empty paragraph block automatically. Use
-`shell: false` when you only want the raw editor surface, or pass `maxWidth: "960px"` /
-`shell: { maxWidth: "960px" }` to constrain the editor width in your project.
-
-Built-in toolbar buttons are intentionally opt-in for package consumers. `saveButton`, `exportButton`, and `exportHtmlButton` default to `false`, so applications can use their own UI and call `editor.save()` when needed.
-
-## Saving JSON
-
-BlockWriteAI is designed to save JSON first. In production, store the JSON in your database and render it later in read-only mode or through exported HTML.
-
-```js
-document.querySelector("#save").addEventListener("click", async () => {
-  const data = await editor.save();
-
-  await fetch("/save-document.php", {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json"
-    },
-    body: JSON.stringify(data)
-  });
-});
-```
-
-The default toolbar includes a Save button. Use `onSave` to receive the JSON response when the user clicks it:
-
-```js
-const editor = new BlockWriteAI({
-  holder: "#editor",
-  async onSave(data) {
-    await fetch("/documents/123", {
-      method: "POST",
-      headers: {
-        "Content-Type": "application/json"
-      },
-      body: JSON.stringify(data)
-    });
-  }
-});
-```
-
-## AI Plugin
-
-AI is a premium plugin. Load it through the platform premium bundle after license
-verification. The browser plugin never receives your OpenAI API key; it calls
-your own server endpoint.
+The JSON endpoint can return a document directly:
 
-```html
-<script src="/blockwriteai/blockwriteai.js"></script>
+```json
+{
+  "time": 1779540000000,
+  "version": "1.0.10",
+  "blocks": []
+}
+```
 
+It can also return a wrapper:
+
+```json
+{
+  "ok": true,
+  "data": {
+    "time": 1779540000000,
+    "version": "1.0.10",
+    "blocks": []
+  }
+}
+```
+
+## Premium Plugins
+
+Do not expose premium plugin files as normal public scripts. Load them after your server verifies an active license:
+
+```html
 <script>
-  async function boot() {
+  async function bootEditor() {
     await BlockWriteAI.loadPremiumPlugins({
       licenseKey: "bwai_live_xxxxx",
       endpoint: "/blockwriteai-platform/api/premium_plugins.php",
-      features: ["ai"]
+      features: ["drawing", "mermaid", "signature", "signature_flow", "ai"]
     });
 
     window.editor = new BlockWriteAI({
@@ -397,282 +206,29 @@ your own server endpoint.
         usageEndpoint: "/blockwriteai-platform/api/ai_usage.php"
       },
       ai: {
-        endpoint: "/api/blockwriteai-ai.php"
+        endpoint: "/api/blockwriteai-ai"
       }
     });
   }
-  boot();
-</script>
-```
-
-The included demo endpoint is `examples/api/ai.php`. For local development, copy `examples/api/openai.local.example.php` to `examples/api/openai.local.php` and add a development key, or set `OPENAI_API_KEY` in the server environment. Do not expose the key in browser JavaScript.
-
-The drawer can also be opened without selecting text from the centered AI button in the editor toolbar, or programmatically with `editor.openAI()`.
-
-Available AI drawer actions:
-
-- Improve writing
-- Fix grammar
-- Summarize
-- Expand
-- Make professional
-- Generate BlockWriteAI blocks from a prompt
-
-## Preview Pages
-
-Create any page in your application and add a preview container. BlockWriteAI will load saved JSON and render the document HTML inside that container.
-
-```html
-<link rel="stylesheet" href="/blockwriteai/blockwriteai.css">
-
-<div class="blockwriteai-preview" data-source="/documents/123.json"></div>
-
-<script src="/blockwriteai/blockwriteai.js"></script>
-<script src="/blockwriteai/plugins/blockwriteai-advanced-blocks.js"></script>
-<script>
-  BlockWriteAI.mountPreviews();
+
+  bootEditor();
 </script>
 ```
 
-If the preview page must render premium blocks, load the licensed premium bundle
-before `BlockWriteAI.mountPreviews()`:
+The browser plugin must never receive private API keys. Keep OpenAI, billing, usage limits, and license checks on your server.
 
-```js
-async function mountDocumentPreview() {
-  await BlockWriteAI.loadPremiumPlugins({
-    licenseKey: "bwai_live_xxxxx",
-    endpoint: "/blockwriteai-platform/api/premium_plugins.php",
-    features: ["drawing", "mermaid", "signature", "signature_flow", "ai"]
-  });
-  BlockWriteAI.mountPreviews();
-}
-mountDocumentPreview();
-```
-
-The JSON endpoint can return either a BlockWriteAI document directly or an API wrapper such as:
-
-```json
-{
-  "ok": true,
-  "data": {
-    "time": 1779540000000,
-    "version": "1.0.8",
-    "blocks": []
-  }
-}
-```
-
-Example PHP receiver:
-
-```php
-<?php
-header('Content-Type: application/json');
-
-$json = file_get_contents('php://input');
-$data = json_decode($json, true);
-
-if (!$data || !isset($data['blocks']) || !is_array($data['blocks'])) {
-    http_response_code(422);
-    echo json_encode(['error' => 'Invalid BlockWriteAI document']);
-    exit;
-}
-
-file_put_contents(__DIR__ . '/saved-document.json', json_encode($data, JSON_PRETTY_PRINT));
-
-echo json_encode(['ok' => true]);
-```
-
-## Uploads
-
-The demo includes `examples/upload.php` and stores files under `examples/uploads/`. For production, replace this with your own storage layer.
-
-```js
-const editor = new BlockWriteAI({
-  holder: "#editor",
-  uploadOutput: ["upload", "base64"],
-  upload: {
-    image: async (file) => {
-      const form = new FormData();
-      form.append("file", file);
-      form.append("kind", "image");
-
-      const response = await fetch("/BlockWriteAI/examples/upload.php", {
-        method: "POST",
-        body: form
-      });
-
-      return response.json();
-    },
-    file: async (file) => {
-      const form = new FormData();
-      form.append("file", file);
-      form.append("kind", "file");
-
-      const response = await fetch("/BlockWriteAI/examples/upload.php", {
-        method: "POST",
-        body: form
-      });
-
-      return response.json();
-    }
-  }
-});
-```
+## Release Checklist
 
-`uploadOutput` controls what gets written into the saved JSON:
+1. Run `npm run build:min`.
+2. Run `npm run check`.
+3. Publish `@qarakash/blockwriteai` to npm.
+4. Publish `qarakash/blockwriteai` to Packagist.
+5. Publish `blockwriteai-editor` to PyPI.
+6. Serve only the public asset directory from your application.
 
-- `"base64"` or `["base64"]` stores uploaded media directly in the block JSON. This is the default.
-- `"upload"` or `["upload"]` stores the response from your upload handler, such as a server URL.
-- `["upload", "base64"]` stores both, useful when you want server files plus a portable JSON backup.
-
-Expected upload response:
-
-```json
-{
-  "url": "/BlockWriteAI/examples/uploads/example.pdf",
-  "name": "example.pdf",
-  "size": 12345,
-  "type": "application/pdf"
-}
-```
+## Notes For Production
 
-When both outputs are enabled, saved image and attachment items include the server response under `upload` and the inline file data under `base64`.
-
-## API Methods
-
-```js
-await editor.save();          // Get JSON document
-editor.getData();             // Get current data synchronously
-editor.render(data);          // Replace editor content
-editor.clear();               // Reset editor
-editor.exportHTML();          // Export HTML
-editor.exportMarkdown();      // Export Markdown API, hidden from the default UI
-editor.importHTML(html);      // Import HTML into blocks
-editor.setReadOnly(true);     // Toggle read-only mode
-editor.undo();                // Undo last change
-editor.redo();                // Redo last undo
-editor.destroy();             // Remove editor instance
-BlockWriteAI.mountPreviews(); // Render JSON into .blockwriteai-preview containers
-```
-
-## Data Shape
-
-```json
-{
-  "time": 1779540000000,
-  "version": "1.0.8",
-  "blocks": [
-    {
-      "id": "block-title",
-      "type": "heading",
-      "data": {
-        "level": 2,
-        "text": "BlockWriteAI document",
-        "alignment": "left"
-      }
-    },
-    {
-      "id": "block-body",
-      "type": "paragraph",
-      "data": {
-        "text": "Reusable content saved as JSON."
-      }
-    }
-  ]
-}
-```
-
-## Tool Control
-
-Limit available blocks per project:
-
-```js
-const editor = new BlockWriteAI({
-  holder: "#editor",
-  tools: [
-    "paragraph",
-    "heading",
-    "image",
-    "list",
-    "table"
-  ]
-});
-```
-
-Disable specific tools:
-
-```js
-const editor = new BlockWriteAI({
-  holder: "#editor",
-  tools: {
-    raw: false,
-    attaches: false
-  }
-});
-```
-
-## Autosave
-
-```js
-const editor = new BlockWriteAI({
-  holder: "#editor",
-  autosave: {
-    key: "blockwriteai-draft",
-    load: true
-  }
-});
-```
-
-## Security Notes
-
-BlockWriteAI sanitizes normal rich text blocks before saving and exporting. Raw HTML blocks are intentionally treated as trusted HTML, so enable the raw HTML tool only for trusted users.
-
-For production applications:
-
-- Validate JSON on the server.
-- Sanitize output again before public rendering.
-- Restrict upload types and file sizes.
-- Store uploaded files outside executable PHP paths when possible.
-- Add authentication before saving documents.
-
-## GitHub
-
-Repository target:
-
-```text
-https://github.com/qarAkash/BlockWriteAI.git
-```
-
-## Publishing Packages
-
-After a release is ready, publish each package from the repository root.
-
-Create a Git release tag for script-link/CDN users:
-
-```bash
-git tag v1.0.8
-git push origin v1.0.8
-```
-
-Publish npm:
-
-```bash
-npm publish --access public
-```
-
-Publish Python:
-
-```bash
-python -m build
-python -m twine upload dist/*
-```
-
-Publish Composer:
-
-```text
-Submit https://github.com/qarAkash/BlockWriteAI to Packagist as qarakash/blockwriteai.
-```
-
-## Status
-
-BlockWriteAI is currently an active custom editor library and demo project. It is suitable for continued feature development, integration testing, and database-backed storage work.
+- Use the `.min.css` and `.min.js` files in public pages.
+- Do not publish source folders, examples, build artifacts, package caches, or private configuration files.
+- Browser-delivered CSS and JavaScript can always be downloaded. Protect paid features with server-side license checks and metered premium bundle delivery.
+- Keep secret keys in backend environment variables only.