gorsee 0.2.3 → 0.2.5

package/dist-pkg/testing/index.js

@@ -0,0 +1,254 @@
+import { mkdir, mkdtemp, readFile, readdir, rm, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { handleAction } from "../server/action.js";
+import {
+  assertDeployArtifactConformance,
+  validateDeployArtifactConformance
+} from "../deploy/conformance.js";
+import { createContext, runMiddlewareChain } from "../server/middleware.js";
+import { createPluginRunner } from "../plugins/index.js";
+import { renderToString, ssrJsx } from "../runtime/server.js";
+import { navigate } from "../runtime/router.js";
+export function createTestRequest(path, options = {}) {
+  const { method = "GET", headers = {}, body } = options, url = `http://localhost${path}`, init = { method, headers };
+  if (body)
+    if (typeof body === "object") {
+      init.body = JSON.stringify(body);
+      init.headers["Content-Type"] = "application/json";
+    } else
+      init.body = body;
+  return new Request(url, init);
+}
+export function createTestContext(path, options = {}) {
+  const { params = {}, ...reqOpts } = options, request = createTestRequest(path, reqOpts);
+  return createContext(request, params);
+}
+export async function runTestMiddleware(middleware, ctx, handler) {
+  return runMiddlewareChain([middleware], ctx, handler ?? (async () => new Response("OK")));
+}
+export function renderComponent(component, props = {}) {
+  const vnode = ssrJsx(component, props);
+  return renderToString(vnode);
+}
+export async function testLoader(loader, path, options = {}) {
+  const ctx = createTestContext(path, options);
+  return loader(ctx);
+}
+export async function testAction(action, path, options = {}) {
+  const ctx = createTestContext(path, {
+    method: options.method ?? "POST",
+    headers: options.headers,
+    params: options.params,
+    body: options.body
+  });
+  return handleAction(action, ctx);
+}
+export async function testRouteHandler(handler, path, options = {}) {
+  const ctx = createTestContext(path, options);
+  return handler(ctx);
+}
+export function testDeployArtifactConformance(input) {
+  return validateDeployArtifactConformance(input);
+}
+export function assertTestDeployArtifactConformance(input) {
+  assertDeployArtifactConformance(input);
+}
+export async function createFixtureAppHarness(files, rootDir) {
+  const fixtureRoot = rootDir ?? await mkdtemp(join(tmpdir(), "gorsee-fixture-app-"));
+  return {
+    rootDir: fixtureRoot,
+    async write() {
+      for (const file of files) {
+        const absolutePath = join(fixtureRoot, file.path);
+        await mkdir(join(absolutePath, ".."), { recursive: !0 });
+        await writeFile(absolutePath, file.content, "utf-8");
+      }
+    },
+    read(path) {
+      return readFile(join(fixtureRoot, path), "utf-8");
+    },
+    async listFiles() {
+      return listRelativeFiles(fixtureRoot);
+    },
+    cleanup() {
+      return rm(fixtureRoot, { recursive: !0, force: !0 });
+    }
+  };
+}
+export async function createWorkspaceFixtureHarness(packages, rootFiles = [], rootDir) {
+  const fixtureRoot = rootDir ?? await mkdtemp(join(tmpdir(), "gorsee-fixture-workspace-")), workspaceFiles = [
+    ...rootFiles,
+    ...packages.flatMap((pkg) => pkg.files.map((file) => ({
+      path: join(pkg.path, file.path),
+      content: file.content
+    })))
+  ];
+  return createFixtureAppHarness(workspaceFiles, fixtureRoot);
+}
+export function createPluginConformanceHarness(config = {}) {
+  const runner = createPluginRunner(config);
+  return {
+    register(plugin) {
+      runner.register(plugin);
+    },
+    setupAll() {
+      return runner.setupAll();
+    },
+    runPhase(phase) {
+      return runner.runPhase(phase);
+    },
+    teardownAll() {
+      return runner.teardownAll();
+    },
+    getResult() {
+      const descriptors = runner.getPluginDescriptors();
+      return {
+        middlewareCount: runner.getMiddlewares().length,
+        routePaths: [...runner.getRoutes().keys()].sort(),
+        buildPluginNames: runner.getBuildPlugins().map((plugin) => plugin.name).sort(),
+        capabilities: runner.getCapabilities(),
+        pluginOrder: descriptors.map((descriptor) => descriptor.name),
+        descriptors
+      };
+    },
+    async testRoute(path, requestPath = path) {
+      const route = runner.getRoutes().get(path);
+      if (!route)
+        throw Error(`plugin conformance route not found: ${path}`);
+      return route(createTestContext(requestPath));
+    }
+  };
+}
+export async function validatePluginConformance(plugin, expectation = {}, config = {}) {
+  const harness = createPluginConformanceHarness(config);
+  harness.register(plugin);
+  await harness.setupAll();
+  try {
+    const result = harness.getResult();
+    if (expectation.middlewareCount !== void 0 && result.middlewareCount !== expectation.middlewareCount)
+      throw Error(`plugin conformance middleware mismatch: expected ${expectation.middlewareCount}, received ${result.middlewareCount}`);
+    if (expectation.routePaths) {
+      const expected = [...expectation.routePaths].sort();
+      if (JSON.stringify(result.routePaths) !== JSON.stringify(expected))
+        throw Error(`plugin conformance routes mismatch: expected ${expected.join(", ")}, received ${result.routePaths.join(", ")}`);
+    }
+    if (expectation.buildPluginNames) {
+      const expected = [...expectation.buildPluginNames].sort();
+      if (JSON.stringify(result.buildPluginNames) !== JSON.stringify(expected))
+        throw Error(`plugin conformance build plugins mismatch: expected ${expected.join(", ")}, received ${result.buildPluginNames.join(", ")}`);
+    }
+    if (expectation.capabilities) {
+      const expected = [...expectation.capabilities].sort();
+      if (JSON.stringify(result.capabilities) !== JSON.stringify(expected))
+        throw Error(`plugin conformance capabilities mismatch: expected ${expected.join(", ")}, received ${result.capabilities.join(", ")}`);
+    }
+    if (expectation.pluginOrder) {
+      const expected = [...expectation.pluginOrder];
+      if (JSON.stringify(result.pluginOrder) !== JSON.stringify(expected))
+        throw Error(`plugin conformance order mismatch: expected ${expected.join(", ")}, received ${result.pluginOrder.join(", ")}`);
+    }
+    return result;
+  } finally {
+    await harness.teardownAll();
+  }
+}
+export function createRuntimeFixture() {
+  const { document: originalDocument, window: originalWindow, history: originalHistory, location: originalLocation, fetch: originalFetch } = globalThis, htmlWrites = [], historyWrites = [];
+  let removedCss = 0;
+  const dataScript = {
+    textContent: "",
+    remove() {
+      this.textContent = "";
+    }
+  }, container = {
+    replaceChildren(...nodes) {
+      htmlWrites.push(nodes.map((node) => node.html ?? "").join(""));
+    },
+    contains() {
+      return !1;
+    },
+    querySelector() {
+      return null;
+    },
+    querySelectorAll() {
+      return [];
+    }
+  };
+  globalThis.document = {
+    title: "",
+    activeElement: null,
+    head: { appendChild() {} },
+    body: { appendChild() {} },
+    createElement(tag) {
+      if (tag === "template")
+        return {
+          content: { childNodes: [] },
+          set innerHTML(html) {
+            this.content.childNodes = [{ html }];
+          }
+        };
+      return {
+        dataset: {},
+        setAttribute() {}
+      };
+    },
+    getElementById(id) {
+      if (id === "app")
+        return container;
+      if (id === "__GORSEE_DATA__")
+        return dataScript;
+      return null;
+    },
+    querySelectorAll() {
+      return [{
+        remove() {
+          removedCss++;
+        }
+      }];
+    }
+  };
+  globalThis.window = {
+    scrollTo() {}
+  };
+  globalThis.history = {
+    pushState(_state, _title, url) {
+      historyWrites.push(url);
+    }
+  };
+  globalThis.location = {
+    pathname: "/",
+    search: "",
+    origin: "http://localhost"
+  };
+  return {
+    htmlWrites,
+    historyWrites,
+    removedCssCount: () => removedCss,
+    setFetch(handler) {
+      globalThis.fetch = handler;
+    },
+    navigate(url, pushState = !0) {
+      return navigate(url, pushState);
+    },
+    cleanup() {
+      globalThis.document = originalDocument;
+      globalThis.window = originalWindow;
+      globalThis.history = originalHistory;
+      globalThis.location = originalLocation;
+      globalThis.fetch = originalFetch;
+    }
+  };
+}
+async function listRelativeFiles(rootDir, baseDir = rootDir) {
+  const entries = await readdir(rootDir, { withFileTypes: !0 }), files = [];
+  for (const entry of entries) {
+    const absolutePath = join(rootDir, entry.name);
+    if (entry.isDirectory()) {
+      files.push(...await listRelativeFiles(absolutePath, baseDir));
+      continue;
+    }
+    files.push(absolutePath.slice(baseDir.length + 1));
+  }
+  return files.sort();
+}

package/dist-pkg/types/index.d.ts

@@ -0,0 +1,4 @@
+export { SafeSQL, type SafeSQLValue } from "./safe-sql.js";
+export { SafeHTML, sanitize } from "./safe-html.js";
+export { SafeURL, validateURL } from "./safe-url.js";
+export { type UserInput, validate } from "./user-input.js";

package/dist-pkg/types/index.js

@@ -0,0 +1,4 @@
+export { SafeSQL } from "./safe-sql.js";
+export { SafeHTML, sanitize } from "./safe-html.js";
+export { SafeURL, validateURL } from "./safe-url.js";
+export { validate } from "./user-input.js";

package/dist-pkg/types/safe-html.d.ts

@@ -0,0 +1,7 @@
+declare const __safeHTMLBrand: unique symbol;
+export type SafeHTMLValue = string & {
+    readonly [__safeHTMLBrand]: true;
+};
+export declare function sanitize(raw: string): SafeHTMLValue;
+export declare function SafeHTML(strings: TemplateStringsArray, ...values: unknown[]): SafeHTMLValue;
+export {};

package/dist-pkg/types/safe-html.js

@@ -0,0 +1,19 @@
+const ESCAPE_MAP = {
+  "&": "&",
+  "<": "&lt;",
+  ">": "&gt;",
+  '"': "&quot;",
+  "'": "&#x27;"
+}, ESCAPE_RE = /[&<>"']/g;
+export function sanitize(raw) {
+  return raw.replace(ESCAPE_RE, (ch) => ESCAPE_MAP[ch] ?? ch);
+}
+export function SafeHTML(strings, ...values) {
+  const parts = [];
+  for (let i = 0;i < strings.length; i++) {
+    parts.push(strings[i]);
+    if (i < values.length)
+      parts.push(sanitize(String(values[i])));
+  }
+  return parts.join("");
+}

package/dist-pkg/types/safe-sql.d.ts

@@ -0,0 +1,8 @@
+declare const __safeSQLBrand: unique symbol;
+export interface SafeSQLValue {
+    readonly text: string;
+    readonly params: readonly unknown[];
+    readonly [__safeSQLBrand]: true;
+}
+export declare function SafeSQL(strings: TemplateStringsArray, ...values: unknown[]): SafeSQLValue;
+export {};

package/dist-pkg/types/safe-sql.js

@@ -0,0 +1,14 @@
+export function SafeSQL(strings, ...values) {
+  const parts = [], params = [];
+  for (let i = 0;i < strings.length; i++) {
+    parts.push(strings[i]);
+    if (i < values.length) {
+      params.push(values[i]);
+      parts.push("?");
+    }
+  }
+  return {
+    text: parts.join(""),
+    params
+  };
+}

package/dist-pkg/types/safe-url.d.ts

@@ -0,0 +1,7 @@
+declare const __safeURLBrand: unique symbol;
+export type SafeURLValue = string & {
+    readonly [__safeURLBrand]: true;
+};
+export declare function validateURL(raw: string): SafeURLValue;
+export declare function SafeURL(strings: TemplateStringsArray, ...values: unknown[]): SafeURLValue;
+export {};

package/dist-pkg/types/safe-url.js

@@ -0,0 +1,20 @@
+const ALLOWED_PROTOCOLS = ["http:", "https:", "mailto:"], DANGEROUS_PROTOCOLS = ["javascript:", "data:", "vbscript:", "blob:"];
+export function validateURL(raw) {
+  const lower = raw.trim().toLowerCase();
+  for (const proto of DANGEROUS_PROTOCOLS)
+    if (lower.startsWith(proto))
+      throw Error(`[GORSEE E005] Dangerous URL protocol: "${proto}" is not allowed`);
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    return raw;
+  }
+  if (!ALLOWED_PROTOCOLS.includes(url.protocol))
+    throw Error(`[GORSEE E005] Disallowed URL protocol: "${url.protocol}". Allowed: ${ALLOWED_PROTOCOLS.join(", ")}`);
+  return raw;
+}
+export function SafeURL(strings, ...values) {
+  const raw = String.raw(strings, ...values.map(String));
+  return validateURL(raw);
+}

package/dist-pkg/types/user-input.d.ts

@@ -0,0 +1,9 @@
+declare const __userInputBrand: unique symbol;
+export type UserInput<T> = T & {
+    readonly [__userInputBrand]: true;
+};
+export interface ValidationSchema<T> {
+    parse(raw: unknown): T;
+}
+export declare function validate<T>(schema: ValidationSchema<T>, raw: unknown): UserInput<T>;
+export {};

package/dist-pkg/types/user-input.js

@@ -0,0 +1,3 @@
+export function validate(schema, raw) {
+  return schema.parse(raw);
+}

package/dist-pkg/unsafe/index.d.ts

@@ -0,0 +1,12 @@
+import type { SafeSQLValue } from "../types/safe-sql.js";
+import type { SafeHTMLValue } from "../types/safe-html.js";
+/**
+ * DANGER: Bypasses SQL safety. Only use when you know the string is safe.
+ * This function exists as an explicit escape hatch -- its name signals danger.
+ */
+export declare function unsafeSQL(raw: string): SafeSQLValue;
+/**
+ * DANGER: Bypasses HTML sanitization. Only use for trusted content.
+ * This function exists as an explicit escape hatch -- its name signals danger.
+ */
+export declare function unsafeHTML(raw: string): SafeHTMLValue;

package/dist-pkg/unsafe/index.js

@@ -0,0 +1,6 @@
+export function unsafeSQL(raw) {
+  return { text: raw, params: [] };
+}
+export function unsafeHTML(raw) {
+  return raw;
+}

package/package.json

@@ -1,82 +1,140 @@
 {
   "name": "gorsee",
-  "version": "0.2.3",
-  "description": "Full-stack TypeScript framework — islands, reactive WebSocket, optimistic mutations, built-in auth, type-safe routes",
+  "version": "0.2.5",
+  "description": "AI-first reactive full-stack TypeScript framework for deterministic human and agent collaboration",
   "type": "module",
+  "packageManager": "bun@1.3.9",
   "license": "MIT",
   "author": "Oleg Gorsky",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/AYKGorsee/gorsee-js.git"
-  },
-  "homepage": "https://github.com/AYKGorsee/gorsee-js#readme",
   "keywords": [
+    "ai-first",
+    "agentic",
     "framework",
     "typescript",
     "fullstack",
     "ssr",
     "islands",
     "reactive",
+    "signals",
     "bun",
     "jsx",
     "web-framework"
   ],
   "bin": {
-    "gorsee": "bin/gorsee.js"
+    "gorsee": "dist-pkg/bin/gorsee.js"
   },
   "exports": {
-    ".": "./src/index.ts",
-    "./compat": "./src/index.ts",
-    "./client": "./src/client.ts",
-    "./reactive": "./src/reactive/index.ts",
-    "./server": "./src/server-entry.ts",
-    "./types": "./src/types/index.ts",
-    "./db": "./src/db/index.ts",
-    "./router": "./src/router/index.ts",
-    "./log": "./src/log/index.ts",
-    "./unsafe": "./src/unsafe/index.ts",
-    "./runtime": "./src/runtime/index.ts",
-    "./security": "./src/security/index.ts",
-    "./jsx-runtime": "./src/jsx-runtime.ts",
-    "./jsx-dev-runtime": "./src/jsx-runtime.ts",
-    "./testing": "./src/testing/index.ts",
-    "./i18n": "./src/i18n/index.ts",
-    "./env": "./src/env/index.ts",
-    "./auth": "./src/auth/index.ts",
-    "./routes": "./src/runtime/typed-routes.ts",
-    "./cli/cmd-create": "./src/cli/cmd-create.ts",
-    "./plugins": "./src/plugins/index.ts",
-    "./plugins/drizzle": "./src/plugins/drizzle.ts",
-    "./plugins/prisma": "./src/plugins/prisma.ts",
-    "./plugins/tailwind": "./src/plugins/tailwind.ts",
-    "./plugins/lucia": "./src/plugins/lucia.ts",
-    "./plugins/s3": "./src/plugins/s3.ts",
-    "./plugins/resend": "./src/plugins/resend.ts",
-    "./plugins/stripe": "./src/plugins/stripe.ts",
-    "./deploy": "./src/deploy/index.ts"
+    ".": "./dist-pkg/index.js",
+    "./compat": "./dist-pkg/compat.js",
+    "./client": "./dist-pkg/client.js",
+    "./reactive": "./dist-pkg/reactive/index.js",
+    "./server": "./dist-pkg/server-entry.js",
+    "./types": "./dist-pkg/types/index.js",
+    "./db": "./dist-pkg/db/index.js",
+    "./router": "./dist-pkg/router/index.js",
+    "./log": "./dist-pkg/log/index.js",
+    "./unsafe": "./dist-pkg/unsafe/index.js",
+    "./runtime": "./dist-pkg/runtime/index.js",
+    "./security": "./dist-pkg/security/index.js",
+    "./ai": "./dist-pkg/ai/index.js",
+    "./jsx-runtime": "./dist-pkg/jsx-runtime.js",
+    "./jsx-dev-runtime": "./dist-pkg/jsx-runtime.js",
+    "./testing": "./dist-pkg/testing/index.js",
+    "./i18n": "./dist-pkg/i18n/index.js",
+    "./content": "./dist-pkg/content/index.js",
+    "./env": "./dist-pkg/env/index.js",
+    "./auth": "./dist-pkg/auth/index.js",
+    "./forms": "./dist-pkg/forms/index.js",
+    "./routes": "./dist-pkg/routes/index.js",
+    "./cli/cmd-create": "./dist-pkg/cli/cmd-create.js",
+    "./plugins": "./dist-pkg/plugins/index.js",
+    "./plugins/drizzle": "./dist-pkg/plugins/drizzle.js",
+    "./plugins/prisma": "./dist-pkg/plugins/prisma.js",
+    "./plugins/tailwind": "./dist-pkg/plugins/tailwind.js",
+    "./plugins/lucia": "./dist-pkg/plugins/lucia.js",
+    "./plugins/s3": "./dist-pkg/plugins/s3.js",
+    "./plugins/resend": "./dist-pkg/plugins/resend.js",
+    "./plugins/stripe": "./dist-pkg/plugins/stripe.js",
+    "./deploy": "./dist-pkg/deploy/index.js"
   },
   "files": [
-    "src/",
-    "bin/",
+    "dist-pkg/",
     "README.md",
     "LICENSE"
   ],
   "scripts": {
     "test": "bun test",
+    "test:security": "bun test tests/security tests/server/request-policy.test.ts tests/server/request-security-policy.test.ts tests/server/request-preflight.test.ts tests/server/route-request-security.test.ts tests/server/runtime-dispatch.test.ts tests/dev/hmr-security.test.ts tests/integration/dev-prod-parity.test.ts tests/integration/production-runtime.test.ts",
+    "test:confidence": "bun test tests/build/entrypoints-boundary.test.ts tests/integration/dev-prod-auth-cache-parity.test.ts tests/integration/dev-prod-cache-rpc-parity.test.ts tests/integration/production-large-app-runtime.test.ts tests/integration/canonical-recipes-runtime.test.ts",
+    "test:provider-smoke": "bun test tests/deploy/provider-smoke.test.ts",
+    "test:browser-smoke": "node scripts/browser-smoke.mjs",
+    "product:policy": "node scripts/product-policy-check.mjs",
+    "ai:policy": "node scripts/ai-policy-check.mjs",
+    "dx:policy": "node scripts/dx-policy-check.mjs",
+    "maturity:policy": "node scripts/maturity-policy-check.mjs",
+    "runtime:policy": "node scripts/runtime-diagnostics-policy-check.mjs",
+    "compiler:audit": "node scripts/compiler-platform-audit.mjs",
+    "compiler:parity": "node scripts/compiler-backend-parity.mjs",
+    "compiler:canary": "node scripts/compiler-backend-parity.mjs && bun test tests/cli/programmatic-runtime.test.ts tests/compiler/init.test.ts",
+    "compiler:promotion:check": "node scripts/compiler-promotion-check.mjs",
+    "compiler:dossier:check": "node scripts/compiler-dossier-check.mjs",
+    "compiler:default:rehearsal": "node scripts/compiler-backend-parity.mjs && bun test tests/cli/programmatic-runtime.test.ts tests/compiler/init.test.ts && node scripts/compiler-dossier-check.mjs && node scripts/backend-default-switch-review-check.mjs",
+    "compiler:default:rehearsal:check": "node scripts/compiler-default-switch-rehearsal-check.mjs",
+    "build:parity": "bun scripts/build-backend-parity.mjs",
+    "build:canary": "bun scripts/build-backend-parity.mjs && bun test tests/cli/programmatic-runtime.test.ts tests/build/init.test.ts tests/integration/production-backend-parity.test.ts",
+    "build:promotion:check": "node scripts/build-promotion-check.mjs",
+    "build:dossier:check": "node scripts/build-dossier-check.mjs",
+    "build:default:rehearsal": "bun scripts/build-backend-parity.mjs && bun test tests/cli/programmatic-runtime.test.ts tests/build/init.test.ts tests/integration/production-backend-parity.test.ts && node scripts/build-dossier-check.mjs && node scripts/backend-default-switch-review-check.mjs",
+    "build:default:rehearsal:check": "node scripts/build-default-switch-rehearsal-check.mjs",
+    "backend:switch:evidence:check": "node scripts/backend-switch-evidence-check.mjs",
+    "backend:default-switch:review:check": "node scripts/backend-default-switch-review-check.mjs",
+    "backend:candidate:verify": "bun run backend:candidate:evidence:verify && node scripts/release-train-check.mjs && node scripts/release-checklist-check.mjs && node scripts/ci-policy-check.mjs",
+    "benchmarks:policy": "node scripts/benchmark-policy-check.mjs",
+    "benchmarks:realworld:check": "node scripts/realworld-benchmark-check.mjs",
+    "examples:policy": "node scripts/examples-policy-check.mjs",
+    "proof:policy": "node scripts/proof-surface-check.mjs",
+    "repo:policy": "node scripts/repo-policy-check.mjs",
+    "ci:policy": "node scripts/ci-policy-check.mjs",
+    "verify:security": "bun run check && bun run product:policy && bun run ai:policy && bun run dx:policy && bun run maturity:policy && bun run runtime:policy && bun run benchmarks:policy && bun run benchmarks:realworld:check && bun run examples:policy && bun run proof:policy && bun run repo:policy && bun run ci:policy && bun run compiler:promotion:check && bun run build:promotion:check && bun run backend:switch:evidence:check && bun run backend:default-switch:review:check && bun run backend:candidate:rollout:check && bun run compiler:default:rehearsal:check && bun run build:default:rehearsal:check && bun run test:security && bun run test:confidence",
     "check": "tsc --noEmit",
+    "install:matrix": "node scripts/install-matrix-check.mjs",
     "dev": "bun run src/dev.ts",
+    "ai:package:vscode": "node scripts/package-vscode-ai-extension.mjs",
+    "ai:build:vsix": "node scripts/package-vscode-ai-extension.mjs",
+    "release:extension": "node scripts/release-vscode-extension.mjs",
+    "release:stable:check": "node scripts/release-channel-check.mjs stable",
+    "release:canary:check": "node scripts/release-channel-check.mjs canary",
+    "release:rc:check": "node scripts/release-channel-check.mjs rc",
+    "release:version:stable": "node scripts/release-version-plan.mjs stable",
+    "release:version:canary": "node scripts/release-version-plan.mjs canary",
+    "release:version:rc": "node scripts/release-version-plan.mjs rc",
+    "release:checklist:check": "node scripts/release-checklist-check.mjs",
+    "release:train:check": "node scripts/release-train-check.mjs",
     "release:check": "node scripts/release-check.mjs",
-    "prepublishOnly": "bun run check"
+    "release:smoke": "node scripts/release-smoke.mjs",
+    "package:build": "bun run scripts/build-publish-artifacts.ts",
+    "prepack": "node scripts/prepack-package.mjs",
+    "postpack": "node scripts/postpack-package.mjs",
+    "release:verify": "npm run verify:security && bun test && npm run release:train:check && npm run release:checklist:check && npm run backend:candidate:verify && npm run install:matrix && npm run release:extension && npm run release:check && npm run release:smoke",
+    "prepublishOnly": "npm run verify:security && bun test && npm run release:train:check && npm run release:checklist:check && npm run backend:candidate:verify && npm run install:matrix && npm run release:extension && npm run release:check && npm run release:smoke",
+    "backend:candidate:rollout:check": "node scripts/backend-candidate-rollout-check.mjs",
+    "compiler:evidence:verify": "bun run compiler:parity && bun test tests/cli/cmd-docs.test.ts tests/cli/cmd-check.test.ts tests/cli/programmatic-runtime.test.ts tests/compiler/init.test.ts tests/compiler/module-analysis-parity.test.ts tests/compiler/oxc.test.ts tests/compiler/route-facts-contract.test.ts && node scripts/compiler-dossier-check.mjs && node scripts/compiler-promotion-check.mjs && node scripts/compiler-evidence-check.mjs",
+    "build:evidence:verify": "bun run build:parity && bun test tests/build/artifact-parity.test.ts tests/build/rolldown-runtime-contract.test.ts tests/build/build-diagnostics.test.ts tests/cli/programmatic-runtime.test.ts tests/build/init.test.ts tests/integration/production-backend-parity.test.ts && bun run test:browser-smoke && node scripts/build-dossier-check.mjs && node scripts/build-promotion-check.mjs && node scripts/build-evidence-check.mjs",
+    "backend:candidate:evidence:verify": "bun run compiler:evidence:verify && bun run build:evidence:verify && node scripts/backend-candidate-evidence-check.mjs && node scripts/backend-default-switch-review-check.mjs && node scripts/backend-switch-evidence-check.mjs"
   },
   "engines": {
     "bun": ">=1.0.0"
   },
   "dependencies": {
-    "alien-signals": "^3.1.0",
-    "devalue": "^5.1.1"
+    "alien-signals": "3.1.2",
+    "devalue": "5.6.3",
+    "oxc-parser": "0.116.0",
+    "rolldown": "1.0.0-rc.7",
+    "typescript": "5.9.3"
   },
   "devDependencies": {
     "@types/bun": "latest",
-    "typescript": "^5.7.0"
-  }
+    "playwright": "1.58.2"
+  },
+  "types": "./dist-pkg/index.d.ts"
 }

package/bin/gorsee.js

@@ -1,14 +0,0 @@
-#!/usr/bin/env node
-import { execSync } from "child_process";
-import { join, dirname } from "path";
-import { fileURLToPath } from "url";
-
-const __dirname = dirname(fileURLToPath(import.meta.url));
-const cli = join(__dirname, "..", "src", "cli", "index.ts");
-const args = process.argv.slice(2).join(" ");
-
-try {
-  execSync(`bun ${cli} ${args}`, { stdio: "inherit" });
-} catch (e) {
-  process.exit(e.status || 1);
-}