@daloyjs/core 0.34.2 → 0.35.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@daloyjs/core",
-  "version": "0.34.2",
+  "version": "0.35.0",
   "description": "DaloyJS is a runtime-portable, contract-first TypeScript web framework with built-in OpenAPI (Hey API), typed client generation, large-scale maintainability, and security-first defaults. Hono-grade portability, Elysia-grade DX, FastAPI-grade docs, Fastify-grade ops — distributed via pnpm.",
   "type": "module",
   "publishConfig": {
@@ -158,12 +158,6 @@
     "typescript": "^6.0.3",
     "zod": "^4.4.3"
   },
-  "files": [
-    "dist",
-    "bin",
-    "README.md"
-  ],
-  "dependencies": {},
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "dev": "tsc -w -p tsconfig.json",
@@ -173,6 +167,7 @@
     "coverage": "node --import tsx --test --experimental-test-coverage --test-coverage-include='src/**' --test-coverage-lines=90 --test-coverage-functions=90 tests/**/*.test.ts",
     "coverage:branches": "tsc -p tsconfig.coverage.json && node --test --experimental-test-coverage --test-coverage-include='dist-coverage/src/**' --test-coverage-branches=90 dist-coverage/tests/**/*.test.js",
     "typecheck": "tsc --noEmit",
+    "format": "prettier --write .",
     "gen:openapi": "node --import tsx scripts/dump-openapi.ts",
     "gen:client": "openapi-ts",
     "gen:sbom": "node --import tsx scripts/generate-sbom.ts --package-json ./package.json --out-cyclonedx ./dist/sbom.cdx.json --out-spdx ./dist/sbom.spdx.json && node --import tsx scripts/generate-sbom.ts --package-json ./packages/create-daloy/package.json --out-cyclonedx ./packages/create-daloy/sbom.cdx.json --out-spdx ./packages/create-daloy/sbom.spdx.json",
@@ -180,21 +175,42 @@
     "verify:lockfile": "node --import tsx scripts/verify-lockfile-sources.ts",
     "verify:no-runtime-deps": "node --import tsx scripts/verify-no-runtime-deps.ts",
     "verify:no-lifecycle-scripts": "node --import tsx scripts/verify-no-lifecycle-scripts.ts",
+    "verify:no-shrinkwrap": "node --import tsx scripts/verify-no-shrinkwrap.ts",
     "verify:no-bin-shadowing": "node --import tsx scripts/verify-no-bin-shadowing.ts",
     "verify:secret-comparisons": "node --import tsx scripts/verify-secret-comparisons.ts",
     "verify:no-unsafe-buffer": "node --import tsx scripts/verify-no-unsafe-buffer.ts",
     "verify:no-remote-exec": "node --import tsx scripts/verify-no-remote-exec.ts",
     "verify:no-vulnerable-sandboxes": "node --import tsx scripts/verify-no-vulnerable-sandboxes.ts",
+    "verify:no-native-addons": "node --import tsx scripts/verify-no-native-addons.ts",
     "verify:no-leaked-credentials": "node --import tsx scripts/verify-no-leaked-credentials.ts",
+    "verify:no-leaky-agent-skills": "node --import tsx scripts/verify-no-leaky-agent-skills.ts",
+    "verify:no-toxic-agent-skills": "node --import tsx scripts/verify-no-toxic-agent-skills.ts",
     "verify:no-invisible-unicode": "node --import tsx scripts/verify-no-invisible-unicode.ts",
     "verify:no-encoded-payloads": "node --import tsx scripts/verify-no-encoded-payloads.ts",
     "verify:no-registry-exfiltration": "node --import tsx scripts/verify-no-registry-exfiltration.ts",
+    "verify:no-polyfill-cdns": "node --import tsx scripts/verify-no-polyfill-cdns.ts",
+    "verify:no-toxic-skills": "node --import tsx scripts/verify-no-toxic-skills.ts",
+    "verify:no-weak-random": "node --import tsx scripts/verify-no-weak-random.ts",
+    "verify:no-redos-patterns": "node --import tsx scripts/verify-no-redos-patterns.ts",
+    "verify:dep-licenses": "node --import tsx scripts/verify-dep-licenses.ts",
+    "verify:known-dep-names": "node --import tsx scripts/verify-known-dep-names.ts",
+    "verify:runtime-eol": "node --import tsx scripts/verify-runtime-eol.ts",
     "verify:actions-pinned": "node --import tsx scripts/verify-actions-pinned.ts",
-    "verify:wave9-audits": "node --import tsx scripts/verify-wave9-audits.ts",
-    "verify:wave10-audits": "node --import tsx scripts/verify-wave10-audits.ts",
-    "verify:wave11-audits": "node --import tsx scripts/verify-wave11-audits.ts",
-    "verify:wave12-audits": "node --import tsx scripts/verify-wave12-audits.ts",
+    "verify:parity-audits": "node --import tsx scripts/verify-parity-audits.ts",
+    "verify:governance-audits": "node --import tsx scripts/verify-governance-audits.ts",
+    "verify:runtime-parity-audits": "node --import tsx scripts/verify-runtime-parity-audits.ts",
+    "verify:routing-hardening-audits": "node --import tsx scripts/verify-routing-hardening-audits.ts",
     "verify:sbom": "node --import tsx scripts/verify-sbom.ts",
-    "audit": "pnpm audit --prod"
-  }
-}
+    "scan:staged-secrets": "node --import tsx scripts/scan-staged-secrets.ts",
+    "hooks:install": "node --import tsx scripts/install-git-hooks.ts",
+    "audit": "pnpm audit --prod",
+    "prepublishOnly": "pnpm build && pnpm gen:sbom"
+  },
+  "files": [
+    "dist",
+    "bin",
+    "README.md"
+  ],
+  "packageManager": "pnpm@11.1.3",
+  "dependencies": {}
+}