glashjs 0.0.1 → 0.0.3

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 GlashDB
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -31,6 +31,11 @@ JPG and MP4 are *already* compressed; you can't losslessly shrink them 10–20×
 - **mp4 / mov / webm** → **AV1** + poster frame (needs optional `ffmpeg`).
 - Emits `glash-assets.manifest.json` so the glashdb edge (or any server) serves the best variant per client. Originals are never mutated.
 
+> **glashjs installs with zero dependencies.** Brotli/Gzip works out of the box.
+> To enable image/video transcoding, add the optional enhancers yourself:
+> `npm i sharp` (AVIF/WebP) and install `ffmpeg` on your PATH (AV1). They're
+> declared as **optional peers**, so a plain `npm i glashjs` pulls nothing else.
+
 ### 2. Offline layer — usable with no internet after first visit
 Generates a **Service Worker** (`glash-sw.js`) + PWA manifest that precache the app shell and hashed assets into small cached files. Strategies:
 - **assets** → cache-first (immutable, hash-busted on deploy)

package/bin/glash.mjs

@@ -1,8 +1,10 @@
 #!/usr/bin/env node
 // glashjs CLI
+import { readFileSync } from 'node:fs';
 import { build } from '../src/build.mjs';
 import { optimizeAssets } from '../src/assets/optimize.mjs';
 
+const VERSION = JSON.parse(readFileSync(new URL('../package.json', import.meta.url), 'utf8')).version;
 const [, , cmd, ...rest] = process.argv;
 
 function arg(name, fallback) {
@@ -27,7 +29,7 @@ async function main() {
     case 'version':
     case '--version':
     case '-v':
-      console.log('glashjs 0.0.1');
+      console.log('glashjs ' + VERSION);
       break;
     default:
       console.log(`glashjs — fast, offline-capable, hard-to-hack sites

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "glashjs",
-  "version": "0.0.1",
+  "version": "0.0.3",
   "description": "glashjs — a build pipeline + runtime conventions for fast, offline-capable, hard-to-hack sites. Built on proven primitives, with a best-in-class asset optimizer, PWA offline layer, and secure-by-default headers.",
   "type": "module",
   "bin": {
@@ -19,8 +19,14 @@
   "engines": {
     "node": ">=20"
   },
-  "optionalDependencies": {
-    "sharp": "^0.33.0"
+  "dependencies": {},
+  "peerDependencies": {
+    "sharp": "^0.34.5"
+  },
+  "peerDependenciesMeta": {
+    "sharp": {
+      "optional": true
+    }
   },
   "keywords": [
     "glash",
@@ -33,5 +39,5 @@
     "brotli",
     "security"
   ],
-  "license": "UNLICENSED"
+  "license": "MIT"
 }