daisyui-blueprint 1.8.0 → 1.8.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -60
- package/chunks/1.json +1 -1
- package/chunks/2.json +1 -1
- package/chunks/3.json +1 -1
- package/chunks/4.json +1 -1
- package/chunks/5.json +1 -1
- package/chunks/6.json +1 -1
- package/chunks/7.json +1 -1
- package/chunks/8.json +1 -1
- package/package.json +1 -1
- package/server.js +5 -5
package/README.md
CHANGED
|
@@ -121,63 +121,4 @@ Then ask your AI agent to use daisyUI Blueprint:
|
|
|
121
121
|
- "Create a daisyUI theme from this image."
|
|
122
122
|
- "Check my UI with daisyUI Blueprint and fix the issues."
|
|
123
123
|
|
|
124
|
-
|
|
125
|
-
|
|
126
|
-
The published package contains the generated `server.js` implementation at its root and the
|
|
127
|
-
complete daisyUI reference library in numbered `chunks/*.json` files. It also contains package
|
|
128
|
-
metadata, README, and the license document. There are no generated loader files.
|
|
129
|
-
|
|
130
|
-
The build compresses each reference record and encrypts it with AES-256-GCM. The record names
|
|
131
|
-
and content list are in an encrypted index. Each build uses fresh keys, nonces, and record IDs.
|
|
132
|
-
`chunks/1.json` contains a signed manifest. The other numbered JSON files contain encrypted data.
|
|
133
|
-
|
|
134
|
-
Startup checks the Ed25519 manifest signature and the SHA-256 hash of the complete `server.js`,
|
|
135
|
-
including its integrity checker, before it sends a license request. The license endpoint strings
|
|
136
|
-
are Base64 encoded in the bundle and decoded only after this check. This hides readable URLs;
|
|
137
|
-
it does not keep the addresses secret. It then checks `LICENSE`
|
|
138
|
-
and `EMAIL` with the existing HTTPS license service. After approval, it checks each content
|
|
139
|
-
file against the signed size and hash. It opens the index and creates MCP handlers. Required
|
|
140
|
-
tool rules, definitions, and schema data are decoded at startup. Other records, including page,
|
|
141
|
-
component, and prompt text, are decoded when needed. The record store does not cache decoded text.
|
|
142
|
-
|
|
143
|
-
These measures prevent simple file edits while the verifier is intact. They do not provide
|
|
144
|
-
confidentiality against a person who controls the local runtime. The package contains the content
|
|
145
|
-
decryption key. A person who changes the verifier can bypass the checks or extract decoded text.
|
|
146
|
-
The build creates a signing key in memory and does not write it to disk or include it in the
|
|
147
|
-
package. This signature binds the files of one build; it is not an external proof of publisher identity.
|
|
148
|
-
|
|
149
|
-
## Build and development
|
|
150
|
-
|
|
151
|
-
Run `bun run --no-env-file build` to generate root `server.js` and `chunks/*.json`.
|
|
152
|
-
The build needs no license credentials. After a successful build, `node server.js` or `bun .`
|
|
153
|
-
starts the server. Startup requires `LICENSE` and `EMAIL` in the process environment.
|
|
154
|
-
|
|
155
|
-
The build reads all four source registries and preserves their exact text. It bundles the server
|
|
156
|
-
implementation directly into `server.js`. Runtime npm dependencies remain external.
|
|
157
|
-
`MAX_CHUNK_SIZE_KB` limits every final JSON file, including the manifest, with a default of
|
|
158
|
-
256 KiB and a hard limit of 1 MiB. A limit too small for the signed manifest stops the build.
|
|
159
|
-
Each record and the index have a 16 MiB limit on their decoded JSON bytes.
|
|
160
|
-
|
|
161
|
-
The build prepares the package under `tmp/package-build/`, packs it once, and checks the actual
|
|
162
|
-
archive against the expected file list and bytes. Only then does it replace root `server.js` and
|
|
163
|
-
`chunks/`. It keeps the previous generated output under the build's `previous/` directory and
|
|
164
|
-
restores it if replacement fails. It stops if `chunks/` contains unrelated files or symbolic links.
|
|
165
|
-
|
|
166
|
-
The build prints the root entry path, archive path, and archive SHA-256 hash. Publication uses
|
|
167
|
-
that exact checked archive. The source package remains private. The generated npm package
|
|
168
|
-
declares Node `24.x`. The installed server needs no build files under `tmp/`.
|
|
169
|
-
|
|
170
|
-
Run `bun run dev` to build root `server.js` and open it in MCP Inspector. Bun loads the project's
|
|
171
|
-
`.env` files. Set `LICENSE` and `EMAIL` there; `FIGMA` and the runtime settings above are optional.
|
|
172
|
-
Exported environment variables take precedence. The development launcher forwards the settings
|
|
173
|
-
to the server through Inspector without putting credentials in child process arguments.
|
|
174
|
-
|
|
175
|
-
## Development tests
|
|
176
|
-
|
|
177
|
-
Run `bun test --no-env-file` for the deterministic suite. Package tests use isolated directories
|
|
178
|
-
under `tmp/` and the real reference library. Node integration tests use a mock license API and
|
|
179
|
-
check tools, resource templates, prompts, invalid credentials, and changed content files.
|
|
180
|
-
They do not call the real license service.
|
|
181
|
-
|
|
182
|
-
Run `bun run --no-env-file typecheck` and `bun run --no-env-file lint` for static checks.
|
|
183
|
-
Remote image checks remain separate and require `CHECK_REMOTE_IMAGES=true`.
|
|
124
|
+
|
package/chunks/1.json
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"payload":"{\"format\":1,\"buildId\":\"
|
|
1
|
+
{"payload":"{\"format\":1,\"buildId\":\"9370660bbbce98955a5b09ae2686cd3e\",\"indexId\":\"83e9c2302b4df2be3999332db5b5e189\",\"server\":{\"byteLength\":221622,\"sha256\":\"048d38634059568f70f0747e9d2c819bf4895b51018316d48ca01008d4a43ac8\"},\"files\":[{\"path\":\"chunks/2.json\",\"byteLength\":154097,\"sha256\":\"7cc2fd169e01f0511f740ba12339e458edd3aca036270707585c8a67f2a8e292\"},{\"path\":\"chunks/3.json\",\"byteLength\":258941,\"sha256\":\"839b90609301e2881e9dfbf4c1e57b2a1fd67b95501b3d984802d581b22655d9\"},{\"path\":\"chunks/4.json\",\"byteLength\":260917,\"sha256\":\"6da98de51d05490f3a8977139f2916acfa57f9f2221e5551da08d4a580cfb090\"},{\"path\":\"chunks/5.json\",\"byteLength\":258853,\"sha256\":\"8f8f9223b4045ee1b42cab4d07d7773d4eaa992ce95652d87f7d94af52b1fbe4\"},{\"path\":\"chunks/6.json\",\"byteLength\":261893,\"sha256\":\"e3824b82a532e40e618cde6cd0c4921fd90f7ae11262b194e10539966127f213\"},{\"path\":\"chunks/7.json\",\"byteLength\":259557,\"sha256\":\"749248bbd0138f1f97f4318a74c850cb6e5cbaa0aff4931bd56fcc1efb20dbd1\"},{\"path\":\"chunks/8.json\",\"byteLength\":46621,\"sha256\":\"8bc2c257ff631ea9518fa205cb71e39b42d8ca47bb592d335217b3a980c96bb6\"}]}","signature":"J4gx9a9OijCWkkm3CXci2mYaGm2QHKsvsu+yIGHYE9qSUVzA3XvS8mZW7VoGjMpcnL8us/6qbzcMe1q0smmrAQ=="}
|