@xexr/blog-platform 0.2.0

package/CHANGELOG.md

@@ -0,0 +1,61 @@
+# Changelog
+
+## 0.2.0
+
+### Minor Changes
+
+- Add automated semantic versioning and publishing workflow
+
+All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
+
+## [0.1.2] - 2025-01-06
+
+### 🚀 Features
+
+- Theme inheritance via semantic Tailwind classes - blog now automatically inherits consumer's colors, fonts, and dark mode
+- Guest author badges and bio display on article pages
+- Improved version compatibility checking with proper semantic versioning
+- Author bio passthrough in publish payload for rich author cards
+
+### 🔒 Security
+
+- **SECURITY**: Changed default authentication to fail-closed (was fail-open) - all requests now rejected until `initBlogPlatform()` called
+- **SECURITY**: Added authentication requirement to `/api/blog/version` endpoint (was unprotected)
+- **SECURITY**: Added comprehensive security headers to all API endpoints (CORS on 401/OPTIONS responses)
+- **SECURITY**: Added page-level security headers via middleware (CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy)
+
+### 🐛 Fixes
+
+- Version endpoint now correctly reports both Bloggy and platform versions
+- Incompatible versions now return HTTP 200 with compatibility details (was 409)
+- Removed tone adjectives from UI and JSON-LD to avoid exposing writing style data
+
+### 📝 Documentation
+
+- Added comprehensive publishing workflow guide
+- Added theme customization and styling documentation
+
+## [0.1.1] - 2025-01-05
+
+### 💥 Breaking
+
+- **BREAKING**: Replaced `next-mdx-remote` with `next-mdx-remote-client` for React 19 compatibility
+
+### 🐛 Fixes
+
+- Fixed property mangling issue in build configuration that was breaking `dangerouslySetInnerHTML`
+- Improved React 19 fiber reconciliation compatibility
+- Enhanced error handling for MDX rendering
+
+## [0.1.0] - 2025-01-04
+
+### 🎉 Initial Release
+
+- Blog page components with MDX rendering
+- Publishing API with idempotency support
+- Rate limiting with Upstash Redis
+- SEO optimization features
+- TypeScript declarations
+- Drizzle storage adapter for persistence
+- Authentication middleware
+- CORS and security headers

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Poyzer Tech Limited
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.