fix(dev): consolidate generated cache directories

It was written up in 4.7 but never made the work order, which is exactly how it
stayed dangerous in the first place.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

.claude/launch.json

@@ -0,0 +1,29 @@
+{
+  "version": "0.0.1",
+  "configurations": [
+    {
+      "name": "basic-app",
+      "runtimeExecutable": "bun",
+      "runtimeArgs": [
+        "run",
+        "packages/cli/src/index.ts",
+        "dev",
+        "examples/basic-app",
+        "--port=3520"
+      ],
+      "port": 3520
+    },
+    {
+      "name": "component-showcase",
+      "runtimeExecutable": "bun",
+      "runtimeArgs": [
+        "run",
+        "packages/cli/src/index.ts",
+        "dev",
+        "examples/component-showcase",
+        "--port=3400"
+      ],
+      "port": 3400
+    }
+  ]
+}

.gitattributes

@@ -0,0 +1,16 @@
+# Enforce LF in the working tree regardless of a contributor's core.autocrlf.
+# Without this, Git on Windows smudges every text file to CRLF on clone, stash
+# pop, or checkout, which fails `bun run format:check` (prettier endOfLine: lf).
+* text=auto eol=lf
+
+# Binary assets Git must not touch.
+*.png binary
+*.jpg binary
+*.jpeg binary
+*.gif binary
+*.webp binary
+*.ico binary
+*.pdf binary
+*.woff binary
+*.woff2 binary
+*.db binary

.github/workflows/quality.yml

@@ -0,0 +1,50 @@
+name: Quality
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  quality:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@v4
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: 1.3.14
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 24
+          cache: npm
+          cache-dependency-path: editors/vscode/package-lock.json
+      - name: Install framework dependencies
+        run: bun install --frozen-lockfile
+      - name: Install editor dependencies
+        run: npm ci --prefix editors/vscode
+      - name: Typecheck
+        run: bun run typecheck
+      - name: Lint
+        run: bun run lint
+      - name: Formatting
+        run: bun run format:check
+      - name: Package and application tests
+        run: bun run test:all
+      - name: Package contracts
+        run: bun run check:public-api && bun run check:ui-visual && bun run audit:packages && bun run test:package-kits && bun run validate:staging
+      - name: Stage and test publishable packages
+        if: matrix.os == 'ubuntu-latest'
+        run: bun run stage:packages && bun run test:staged-consumers
+      - name: Framework validation
+        run: bun run validate:0.8
+      - name: Dependency audit
+        run: bun audit
+      - name: Editor dependency audit
+        run: npm audit --prefix editors/vscode --audit-level=high

.gitignore

@@ -1,9 +1,27 @@
 node_modules/
 dist/
 .wrnexus/
+.wrnexus-*/
 *.log
 *.db
 *.db-shm
 *.db-wal
 .DS_Store
 bun.lockb
+
+.publish/
+
+# Environment files may contain secrets. Commit only templates.
+.env
+.env.*
+!.env.example
+!.env.*.example
+
+# Local focused typecheck helpers must never enter the repository.
+focus-shims.d.ts
+tsconfig.focus.json
+
+# Scratch dirs for tests that must dynamically import scaffolded files using
+# "@wrnexus/*" bare specifiers (resolved via the root tsconfig.json `paths`,
+# which requires the scaffold to live inside the repo tree).
+**/test/.tmp-*/

.npmrc

@@ -0,0 +1,3 @@
+@wrnexus:registry=https://registry.npmjs.org/
+audit=true
+fund=false

.prettierignore

@@ -1,8 +1,10 @@
 node_modules/
 dist/
 **/dist/
+**/.wrnexus/**
+**/.wrnexus-*/**
 .publish/
-**/.wirefw/
+**/.wrnfw/
 coverage/
 bun.lock
 bun.lockb
@@ -10,8 +12,22 @@ bun.lockb
 
 # Generated code (queries.gen.ts, routes.gen.ts, etc.)
 **/*.gen.ts
+**/*.generated.d.ts
 
-# Bundled .wire compiler for the VS Code extension (generated)
+# Bundled .wrn compiler for the VS Code extension (generated)
 editors/vscode/src/compiler.cjs
+editors/vscode/src/language-server.cjs
+editors/vscode/src/extension.bundle.cjs
+docs/public-api-0.8.json
+docs/ui-visual-contract-0.8.json
 *.svg
 **/.vscodeignore
+
+# Local focused typecheck helpers (never part of a release)
+focus-shims.d.ts
+**/focus-shims.d.ts
+tsconfig.focus.json
+**/tsconfig.focus.json
+
+# SDD scratch workspace (git-ignored controller artifacts)
+.superpowers/

.publish/ai/README.md

@@ -1,5 +1,9 @@
 # @wrnexus/ai
 
+Provider-neutral AI orchestration for OpenAI, Anthropic, Google and local OpenAI-compatible models,
+with streaming, structured output, tools, embeddings, vector search/RAG, conversation persistence,
+templates, guardrails, usage events, fallback, rate limits and evaluation reports.
+
 > A tiny, zero-dependency Claude (Anthropic) client for WrNexus apps — generate and stream text with Claude from any server-side code.
 
 Part of the **WrNexus** framework — an SSR-first, Bun-native full-stack web framework.
@@ -120,6 +124,34 @@ try {
 }
 ```
 
+### Multi-provider client
+
+`createAIClient` adds named-provider selection and fallback, capability discovery,
+validated JSON output, validated tool execution, abort-aware exponential retries,
+and per-provider circuit breakers. Attempt events intentionally contain metadata
+only: prompts, credentials, and raw model responses are never passed to telemetry.
+
+```ts
+import { anthropicProvider, createAIClient } from "@wrnexus/ai";
+
+const ai = createAIClient({
+  providers: [anthropicProvider()],
+  retry: { attempts: 3, baseDelayMs: 100, maxDelayMs: 2_000 },
+  circuitBreaker: { failureThreshold: 5, resetAfterMs: 30_000 },
+});
+
+const result = await ai.generateObject<{ title: string }>("Return a JSON title", {
+  validate: (value): value is { title: string } =>
+    typeof value === "object" && value !== null && "title" in value,
+});
+```
+
+Providers can return normalized `usage` (`inputTokens`, `outputTokens`,
+`totalTokens`, and `costUsd`) and `toolCalls`. Use `executeTools` with a named,
+validated tool registry; unknown tools and invalid arguments are rejected before
+application code runs. `deterministicAIProvider` supplies ordered or computed
+offline responses for tests and examples without API keys or network calls.
+
 ## Usage
 
 ### Return generated JSON from an API route

.publish/ai/package.json

@@ -1,14 +1,30 @@
 {
   "name": "@wrnexus/ai",
-  "version": "0.2.74",
+  "version": "0.8.9",
   "type": "module",
   "description": "Zero-dependency Claude (Anthropic) client for WrNexus apps.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS.git",
+    "directory": "packages/ai"
+  },
+  "homepage": "https://wrnexusjs.dev/packages/ai",
+  "bugs": {
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS/issues"
+  },
+  "keywords": [
+    "wrnexus",
+    "bun",
+    "typescript",
+    "ai"
+  ],
+  "sideEffects": false,
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "engines": {
-    "bun": ">=1.1.0"
+    "bun": ">=1.3.0"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -18,9 +34,14 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./platform": {
+      "types": "./dist/platform.d.ts",
+      "import": "./dist/platform.js"
     }
   },
   "files": [
-    "dist"
+    "dist",
+    "README.md"
   ]
 }

.publish/authz/README.md

@@ -149,3 +149,156 @@ app.put(
 - **Bun-only** — like the rest of WrNexus, this package targets the Bun runtime; Node is not supported.
 - Works with [`@wrnexus/core`](../core) — the guards return `Middleware` and read the subject from `ctx.user` on the request `Context`. Both types are imported from `@wrnexus/core`.
 - Policy combinators (`any`, `all`) and `authorize` are async-aware, so policies may return a `Promise<boolean>` (e.g. for a database ownership check).
+
+## Declaring permissions
+
+The RBAC/PBAC/ABAC surface above is the low-level toolkit. On top of it sits a
+declarative **registry + catalog + store + engine**: permissions, roles, and
+policies are declared once in code, merged into a frozen catalog at boot, and
+resolved per-request against a pluggable `PermissionStore` that holds who has
+what.
+
+Put declarations in `app/authz/<name>.ts`; they are discovered automatically
+and merged (conflicting declarations of the same permission/role/policy across
+files fail the boot loudly, naming both source files).
+
+```ts
+import { defineAuthz, owner } from "@wrnexus/authz";
+
+export default defineAuthz({
+  permissions: {
+    "post:read": { title: "View posts", public: true },
+    "post:delete": { title: "Delete posts", risk: "high" },
+  },
+  // "post:*" is a namespace wildcard grant, valid inside a role's list — it is
+  // not itself a registered permission, so it can only ever grant permissions
+  // that ARE declared above (e.g. "post:read", "post:delete").
+  roles: { editor: ["post:*"], admin: ["role:editor"] },
+  policies: { ownsPost: owner("id", "authorId") },
+  bindings: { "post:delete": ["ownsPost"] },
+});
+```
+
+`public: true` means anonymous callers may hold the permission — but any
+policy bound to it still runs, and can still veto the anonymous caller (e.g. a
+`notBanned` policy on a public `post:preview` permission).
+
+## Checking permissions
+
+Register `authzMiddleware` once, in `app/middleware/`, with the merged
+catalog and a `PermissionStore`. Like every other `app/middleware/*.ts` file,
+the registration is an eager, module-scope call — the same shape as
+`authzMiddleware({ catalog, store })` requires — so it must run after the
+catalog has been populated. Both the dev server and `wrnexus build`'s
+generated production entry guarantee `getAuthzCatalog()` is populated before
+any app middleware module evaluates. Name the file so it sorts after whatever
+middleware sets `ctx.user` (middleware runs in alphabetical filename order —
+`authz.ts` after `auth.ts`, for instance).
+
+```ts
+// app/middleware/authz.ts
+import { authzMiddleware, getAuthzCatalog } from "@wrnexus/authz";
+import { dbPermissionStore } from "@wrnexus/authz/db";
+import { getDb } from "@wrnexus/db";
+
+export default authzMiddleware({ catalog: getAuthzCatalog(), store: dbPermissionStore(getDb()) });
+```
+
+> **`subject.id` must be a non-empty string.** The engine denies (and logs to
+> stderr) whenever `ctx.user.id` is present but not a non-empty string — this
+> includes the common case of an integer primary key. Coerce it before it
+> reaches `ctx.user`, e.g. `user.id = String(row.id)`, or every request for
+> that user denies with "Invalid subject" instead of resolving normally.
+> `owner()` (the built-in ownership policy) compares subject and resource ids
+> with `Object.is`, so both sides must be the same type too — `owner()` on a
+> numeric `resource.authorId` against a stringified `subject.id` never
+> matches even when they represent "the same" id.
+
+There is no per-route `middleware` export — `app/middleware/*.ts` is the only
+place middleware is registered. To gate part of the app, branch on the
+request the same way any other conditional middleware does (compare
+`app/middleware/captcha-login.ts` in the auth showcase, which branches on
+method + path the same way):
+
+```ts
+// app/middleware/protect-posts.ts
+import type { Context, Next } from "@wrnexus/core";
+import { guardPermission } from "@wrnexus/authz";
+
+const guardPostWrite = guardPermission("post:write");
+
+export default function protectPosts(ctx: Context, next: Next) {
+  return ctx.url.pathname.startsWith("/api/posts") && ctx.req.method !== "GET"
+    ? guardPostWrite(ctx, next)
+    : next();
+}
+```
+
+Or check inline inside a route handler with the free function `can()`:
+
+```ts
+// app/api/posts/[id].ts
+import type { Context } from "@wrnexus/core";
+import { can } from "@wrnexus/authz";
+
+export const DELETE = async (ctx: Context) => {
+  const post = { id: "1", authorId: "alice" }; // load your own resource here
+  if (!(await can(ctx, "post:delete", post))) {
+    return Response.json({ ok: false, error: "Forbidden" }, { status: 403 });
+  }
+  return Response.json({ ok: true });
+};
+```
+
+`can()` is a free function taking `ctx`, not `ctx.can` — `@wrnexus/core` must
+not depend on `@wrnexus/authz`, so the per-request resolver lives in
+`ctx.locals` instead, reached through `can()` / `decideFor()` /
+`guardPermission()` / `filterCan()`. Calling any of them before
+`authzMiddleware` has run for that request throws a `WRN-AUTHZ-SETUP` error
+naming the missing registration, rather than silently denying.
+
+See `examples/auth-showcase/app/authz/showcase.ts` and
+`examples/auth-showcase/app/middleware/authz.ts` for a complete, runnable
+version of this wiring.
+
+## Precedence
+
+1. An explicit deny wins over everything, including `*` — and honours the
+   same namespace-wildcard matching as grants (denying `post:*` blocks
+   `post:comment:delete`, not just `post:*` itself).
+2. A bound policy can veto a permission a role grants, and runs even for a
+   `public: true` permission — including for an anonymous caller.
+3. Otherwise the permission must be held via a role or an explicit grant.
+4. Default deny.
+
+Every failure — an unknown permission (outside strict/dev mode), a store
+outage, a thrown policy — denies rather than throwing through to the caller.
+
+`permissionsFor()` (on the resolver returned by `createAuthzResolver`) is a
+coarse hint for hiding UI (e.g. a menu section), **never authoritative**. A
+`Set<string>` cannot represent "granted `post:*` except `post:delete`", so a
+narrow deny beneath a broad grant is invisible to it — the set still contains
+`post:*` while `can()` / `decide()` correctly refuse `post:delete`. Gate real
+actions with `can()`, `decideFor()`, or `filterCan()`; never by matching
+against `permissionsFor()`'s result.
+
+## CLI
+
+```bash
+wrnexus authz list      # every registered permission, role, and policy
+wrnexus authz generate  # app/authz/permissions.gen.ts type unions
+wrnexus authz init      # scaffold the assignment-table migration
+```
+
+`wrnexus authz generate`'s output is a plain `Permission | Role` string-literal
+union — `can()`, `guardPermission()`, and `decideFor()` all take a bare
+`string` and nothing reads this file automatically, so import it to type your
+own helpers/constants against the registered catalog, e.g.:
+
+```ts
+import type { Permission } from "app/authz/permissions.gen.ts";
+
+function guard(permission: Permission) {
+  return guardPermission(permission);
+}
+```

.publish/authz/package.json

@@ -1,14 +1,30 @@
 {
   "name": "@wrnexus/authz",
-  "version": "0.2.74",
+  "version": "0.8.9",
   "type": "module",
   "description": "@wrnexus/authz — part of the WrNexus framework.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS.git",
+    "directory": "packages/authz"
+  },
+  "homepage": "https://wrnexusjs.dev/packages/authz",
+  "bugs": {
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS/issues"
+  },
+  "keywords": [
+    "wrnexus",
+    "bun",
+    "typescript",
+    "authz"
+  ],
+  "sideEffects": false,
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "engines": {
-    "bun": ">=1.1.0"
+    "bun": ">=1.3.0"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -18,9 +34,18 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./db": {
+      "types": "./dist/db.d.ts",
+      "import": "./dist/db.js"
     }
   },
+  "dependencies": {
+    "@wrnexus/core": "^0.8.9",
+    "@wrnexus/db": "^0.8.9"
+  },
   "files": [
-    "dist"
+    "dist",
+    "README.md"
   ]
 }

.publish/cli/README.md

@@ -1,5 +1,18 @@
 # @wrnexus/cli
 
+Production parity commands:
+
+```bash
+wrnexus build .
+wrnexus preview . --port=3000
+wrnexus dev . --production-runtime
+```
+
+`preview` refuses to start without `dist/server.js` and executes that exact
+artifact with the production profile. Production-runtime development rebuilds
+the same minified artifact after app, public, or configuration changes and
+keeps the last good server running when a rebuild fails.
+
 > The `wrnexus` command-line tool that scaffolds, runs, builds, tests, and manages WrNexus apps.
 
 Part of the **WrNexus** framework — an SSR-first, Bun-native full-stack web framework.
@@ -26,6 +39,30 @@ bunx wrnexus dev
 
 ## Commands
 
+### Local production services
+
+`wrnexus dev . --services` starts the application and the bounded local database,
+cache, mail, SMS, webhook, storage, queue, cron, authentication and metrics simulator.
+It generates a localhost/`*.localhost` development certificate under
+`.wrnexus/certificates/` and serves both the application and service console over HTTPS.
+Trust that certificate locally to remove the browser warning. Use `--services-http` only
+when an external development proxy already terminates TLS.
+
+### Exact production runtime with live updates
+
+`wrnexus dev . --production-runtime` rebuilds and executes `dist/server.js` with
+production resolution, serialization, caching, headers and assets. The supervisor keeps
+the last good process when a build fails. On a successful rebuild the opt-in production
+HMR socket reconnects, requests the new document and morphs it into the browser; ordinary
+`wrnexus preview` and deployed production servers never include that client.
+
+### API platform
+
+`wrnexus api generate [app-dir]` (or `api docs`) derives operations from file routes and
+emits `generated/api/openapi.json`, safe static documentation, Postman collection, curl examples,
+and TypeScript, JavaScript, Java, Go and Python SDKs. Generate one client with
+`wrnexus sdk generate <language> [app-dir]`.
+
 Every command accepts an optional `[app-dir]` (defaults to `.`). Commands that read config or `.env` also accept `--profile=<name>` (see [Profiles](#profiles)).
 
 | Command                               | Purpose                                                                |
@@ -42,14 +79,21 @@ Every command accepts an optional `[app-dir]` (defaults to `.`). Commands that r
 | `wrnexus generate docker`             | Scaffold `Dockerfile`, `.dockerignore`, and `docker-compose.yml`.      |
 | `wrnexus generate mobile`             | Scaffold a Capacitor shell for iOS and Android.                        |
 | `wrnexus mobile add <package...>`     | Install Capacitor plugins and sync native projects.                    |
-| `wrnexus eject <name...>`             | Copy Wire UI component `.wrn` sources into `app/components/`.          |
+| `wrnexus eject <name...>`             | Copy WrNexus UI component `.wrn` sources into `app/components/`.       |
 | `wrnexus db <cmd>`                    | Database migrations and tooling (see [db](#wrnexus-db)).               |
 | `wrnexus test [app-dir] [--watch]`    | Run the app's tests via `bun test` (defaults to the `test` profile).   |
 | `wrnexus profiles [app-dir]`          | List config profiles and their `.env` files, marking the active one.   |
+| `wrnexus compatibility check`         | Check whether behavior defaults are explicitly pinned and current.     |
+| `wrnexus compatibility explain`       | Explain configured, effective, and current compatibility behavior.     |
+| `wrnexus compatibility upgrade`       | Back up config and explicitly opt into reviewed current behavior.      |
 | `wrnexus help`                        | Print usage.                                                           |
 
 `wrnexus g` is an alias for `wrnexus generate`.
 
+Compatibility upgrades never happen implicitly. New applications pin
+`compatibilityDate` and `frameworkBehaviour`; existing applications use
+`wrnexus compatibility explain` before the backed-up, idempotent upgrade command.
+
 ### `wrnexus dev`
 
 Supervises a child dev-server process (from `@wrnexus/dev-server`). The child owns file watching and HMR: CSS and client-island edits update the live page over a WebSocket with no restart; when a server module changes, the child exits with a restart code and the supervisor respawns it (the browser reconnects and morphs in the new HTML). On startup it regenerates typed DB queries and typed routes (best effort). Use `--port=` to change the port (default `3000`).
@@ -76,7 +120,9 @@ bun dist/server.js   # PORT env var optional
 
 ### `wrnexus create`
 
-Scaffolds a new app from an inline (dependency-free) template — `package.json`, `.gitignore`, config, and starter `app/` files. Use `npm run dev` during development, `npm run build && npm start` for production, or `npm run production` to build and start in one command. The generated production server currently requires Bun even when npm is used to manage packages and scripts.
+Scaffolds a complete v0.8 app from an inline template. The generated project includes strict TypeScript, ESLint and Prettier, editor recommendations, environment templates, database migrations, locales, schemas, tests, API/middleware/realtime examples, Tailwind and Iconify, PWA/mobile defaults, and the framework package kits. Its `wrnexus.config.ts` documents the current imports, types, stores, performance, observability, tenancy, build, navigation, theme, i18n, database, storage, realtime, security, and profile configuration.
+
+Use `bun run dev` during development, `bun run check` for the complete typecheck/lint/test/format gate, `bun run build && bun run start` for production, or `bun run production` to build and start in one command.
 
 ### `wrnexus update`
 
@@ -133,7 +179,7 @@ WrNexus response pages.
 
 ### `wrnexus eject`
 
-Copies a Wire UI component's `.wrn` source out of `@wrnexus/ui` into `app/components/`, so the app owns and can edit it (the app copy shadows the library one by name). Run with no names to list available components. It skips components that already exist in the app.
+Copies a WrNexus UI component's `.wrn` source out of `@wrnexus/ui` into `app/components/`, so the app owns and can edit it (the app copy shadows the library one by name). Run with no names to list available components. It skips components that already exist in the app.
 
 ```bash
 wrnexus eject button card modal
@@ -162,7 +208,7 @@ wrnexus db status --db=analytics
 
 ### `wrnexus workspace` and `wrnexus gateway`
 
-`workspace <name>` scaffolds a monorepo: several WrNexus apps under `apps/*` and shared libraries under `packages/*`, plus a `wrnexus.workspace.ts` that maps each app to the domains it serves. `gateway` runs every app behind one port and routes by `Host` header, with optional per-app auth and gateway-wide security (trusted hosts, rate limit, security headers, access log).
+`workspace <name>` scaffolds a monorepo: complete v0.8 apps under `apps/*`, shared libraries under `packages/*`, root TypeScript/lint/format/editor/environment tooling, and a `wrnexus.workspace.ts` that maps each app to the domains it serves. `gateway` runs every app behind one port and routes by `Host` header, with optional per-app auth and gateway-wide security (trusted hosts, rate limit, security headers, access log). Newly added workspace apps use the same current scaffold.
 
 ```bash
 wrnexus workspace acme
@@ -241,6 +287,12 @@ wrnexus update --latest
 wrnexus doctor
 ```
 
+Use `wrnexus doctor --fix [app-dir]` to apply conservative repairs before the
+health check: create missing `app/pages` and a default config, align skewed
+`@wrnexus/*` dependency ranges, record the current migration marker, and format
+only syntax-valid `.wrn` files. Invalid JSON or WRN sources are reported/skipped
+instead of overwritten; repeat runs are idempotent.
+
 ## Profiles
 
 Pass `--profile=<name>` to `dev`, `build`, `db` (or set `WRNEXUS_PROFILE`) to select a config profile. The CLI publishes `WRNEXUS_PROFILE` so config loaders and the dev child pick it up, and loads that profile's `.env` cascade (`.env`, `.env.local`, `.env.<profile>`, `.env.<profile>.local`) into `process.env`.
@@ -270,5 +322,5 @@ export default config;
 ## Requirements / Notes
 
 - **Bun-only.** The CLI runs on Bun, spawns the Bun binary for the dev child and `bun test`, and the production build uses `Bun.build`. Node is not supported.
-- Orchestrates the rest of the framework: `@wrnexus/dev-server` (dev/prod server + gateway), `@wrnexus/router` (route + typed-routes codegen), `@wrnexus/compiler` (`.wrn` → `.ts`), `@wrnexus/db` (migrations, typed queries), `@wrnexus/styles` (config, profiles, `.env`, themes, styles), `@wrnexus/ui` (ejectable Wire UI components), `@wrnexus/validation`, `@wrnexus/csr`, and `@wrnexus/i18n`.
+- Orchestrates the rest of the framework: `@wrnexus/dev-server` (dev/prod server + gateway), `@wrnexus/router` (route + typed-routes codegen), `@wrnexus/compiler` (`.wrn` → `.ts`), `@wrnexus/db` (migrations, typed queries), `@wrnexus/styles` (config, profiles, `.env`, themes, styles), `@wrnexus/ui` (ejectable WrNexus UI components), `@wrnexus/validation`, `@wrnexus/csr`, and `@wrnexus/i18n`.
 - Reads `wrnexus.config.ts` for `db` / `databases`, `theme`, `styles`, `seo`, `security`, `i18n`, and `profiles`, and `wrnexus.workspace.ts` for the gateway.

.publish/cli/package.json

@@ -1,14 +1,30 @@
 {
   "name": "@wrnexus/cli",
-  "version": "0.2.74",
+  "version": "0.8.17",
   "type": "module",
   "description": "@wrnexus/cli — part of the WrNexus framework.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS.git",
+    "directory": "packages/cli"
+  },
+  "homepage": "https://wrnexusjs.dev/packages/cli",
+  "bugs": {
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS/issues"
+  },
+  "keywords": [
+    "wrnexus",
+    "bun",
+    "typescript",
+    "cli"
+  ],
+  "sideEffects": false,
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "engines": {
-    "bun": ">=1.1.0"
+    "bun": ">=1.3.0"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -28,18 +44,27 @@
     "wrnexus": "./dist/index.js"
   },
   "dependencies": {
-    "@wrnexus/core": "^0.2.74",
-    "@wrnexus/router": "^0.2.74",
-    "@wrnexus/csr": "^0.2.74",
-    "@wrnexus/compiler": "^0.2.74",
-    "@wrnexus/styles": "^0.2.74",
-    "@wrnexus/dev-server": "^0.2.74",
-    "@wrnexus/ui": "^0.2.74",
-    "@wrnexus/validation": "^0.2.74",
-    "@wrnexus/i18n": "^0.2.74",
-    "@wrnexus/db": "^0.2.74"
+    "@wrnexus/core": "^0.8.9",
+    "@wrnexus/router": "^0.8.9",
+    "@wrnexus/csr": "^0.8.16",
+    "@wrnexus/compiler": "^0.8.9",
+    "@wrnexus/styles": "^0.8.10",
+    "@wrnexus/dev-server": "^0.8.16",
+    "@wrnexus/ui": "^0.8.12",
+    "@wrnexus/validation": "^0.8.9",
+    "@wrnexus/i18n": "^0.8.9",
+    "@wrnexus/mcp": "^0.8.8",
+    "@wrnexus/playground": "^0.8.8",
+    "@wrnexus/db": "^0.8.9",
+    "@wrnexus/authz": "^0.8.9",
+    "@wrnexus/plugin": "^0.8.8",
+    "@wrnexus/syntax": "^0.8.8",
+    "@wrnexus/typecheck": "^0.8.8",
+    "@wrnexus/security": "^0.8.8",
+    "selfsigned": "^5.5.0"
   },
   "files": [
-    "dist"
+    "dist",
+    "README.md"
   ]
 }

.publish/compiler/README.md

@@ -1,9 +1,44 @@
 # @wrnexus/compiler
 
+## Partial-static rendering
+
+Pages can select `render = "partial-static"` and divide their view with `<Static>` and
+`<Dynamic>` boundaries. The compiler emits a build-only shell renderer that never evaluates
+dynamic-boundary children. `wrnexus build` expands static component mounts into
+`dist/partial-shells.json`, records byte/region evidence in `build-report.json`, and embeds
+the shell in the production route manifest. At request time the production runtime retains
+request-aware layouts, locale/theme metadata and security nonces while streaming dynamic
+regions into stable placeholders.
+
 > Compiler for the `.wrn` language — tokenizes, parses, and lowers `.wrn` page and component files to TypeScript.
 
 Part of the **WrNexus** framework — an SSR-first, Bun-native full-stack web framework.
 
+Production adapters use `analyzeRuntimeImports` before bundling. Edge, worker,
+service-worker, and browser targets reject Node filesystem, TCP, and process
+modules with `WRN-RUNTIME-CAPABILITY`. Package manifests can declare supported
+`wrnexus.runtimes` and required `wrnexus.requires` capabilities; discovery fails
+when the selected deployment cannot satisfy them.
+
+## Server actions
+
+```wrn
+action createUser using CreateUserSchema {
+  const user = await users.create(input)
+  invalidate("users")
+  return user
+}
+
+view {
+  <form @submit="createUser">...</form>
+}
+```
+
+The compiler produces a schema-aware server registry, a fully inferred action
+client, and progressively enhanced form metadata. The shared runtime performs
+validation, authentication/permission checks, CSRF verification, serialization,
+invalidation reporting, and browser lifecycle events.
+
 ## Overview
 
 `@wrnexus/compiler` turns `.wrn` source into TypeScript that targets the framework's runtime primitives. A `.wrn` file declares either a `page` (a route) or a `component` (a reusable, prop-driven fragment) with blocks for `state`, `view` (plain HTML), `seo`, `style`, `functions`, `api`, `ssr`/`client` data bindings, and `realtime` websocket handlers. The pipeline is `source → Lexer → parse() → PageAst → generate() → TypeScript`. It is a build/server-side library — the WrNexus dev loader calls it to compile `.wrn` files on the fly, surfacing `ParseError` as a readable error page.
@@ -34,7 +69,7 @@ bun add @wrnexus/compiler
 
 All exports come from the package root (`@wrnexus/compiler`).
 
-### `compileWireFile(source: string): string`
+### `compileWrnFile(source: string): string`
 
 Compile `.wrn` source to a TypeScript module string. Throws `ParseError` on invalid input. The output is prefixed with a `// compiled from .wrn` comment.
 
@@ -80,10 +115,10 @@ class Lexer {
 
 ### Errors
 
-| Class        | Thrown by                                         | Meaning                                                         |
-| ------------ | ------------------------------------------------- | --------------------------------------------------------------- |
-| `ParseError` | `parse`, `compile`, `compileWireFile`, `generate` | Invalid `.wrn` grammar or (rewrapped) lex failure.              |
-| `LexError`   | `Lexer`                                           | Unexpected character / unterminated string / unbalanced braces. |
+| Class        | Thrown by                                        | Meaning                                                         |
+| ------------ | ------------------------------------------------ | --------------------------------------------------------------- |
+| `ParseError` | `parse`, `compile`, `compileWrnFile`, `generate` | Invalid `.wrn` grammar or (rewrapped) lex failure.              |
+| `LexError`   | `Lexer`                                          | Unexpected character / unterminated string / unbalanced braces. |
 
 ### AST types
 
@@ -108,9 +143,9 @@ Exported type-only symbols describing the parsed tree:
 Compile a page:
 
 ```ts
-import { compileWireFile } from "@wrnexus/compiler";
+import { compileWrnFile } from "@wrnexus/compiler";
 
-const ts = compileWireFile(`
+const ts = compileWrnFile(`
 page Home {
   state count = 0
   seo { title = "Home" description = "Welcome" }
@@ -163,8 +198,10 @@ A file opens with `page <Name>` or `component <Name>` followed by a `{ ... }` bo
 - `layout = "<name>"` — selects `app/layouts/<name>.wrn` (pages only).
 - `types { <TypeScript declarations> }` — reusable interfaces and aliases for the current file.
 - `props { name: Type = <default> ... }` — typed component props. Omit `= <default>` to make a prop required. Legacy inferred props remain supported.
-- `state <ident>: Type = <expr>` — typed reactive state seeded from a raw JS expression. The annotation is optional for backward compatibility.
-- `view { <html> }` — plain HTML with `{expr}` interpolation in text and attributes, hyphenated attributes, boolean attributes, `@event="..."` client bindings, and `<!-- comments -->`. Attribute expressions that reference `state` keep an SSR value and update reactively in the browser.
+- `@event name = function` inside `props` — declares a public component event. Emit it from component behavior with `name(detail)` or `$emit("name", detail)`, and consume it with `<Component @name="handler(event)" />`.
+- `state <ident>: Type = <expr>` — typed reactive state seeded from a raw JS expression, including native array and object literals. The annotation is optional for backward compatibility.
+- `view { <html> }` — plain HTML with `{expr}` interpolation in text and attributes, JSX-style component props such as `items={items}`, `items={[...]}`, and `options={{...}}`, hyphenated attributes, boolean attributes, `@event="..."` client bindings, and `<!-- comments -->`. Structured component props are serialized safely for SSR; expressions that reference `state` retain their initial value and update reactively in the browser.
+- Client functions automatically commit state changed by `setTimeout` callbacks. For other deferred callbacks (observers, third-party APIs, or detached promise callbacks), call the injected `commit()` function after changing local state; returning/awaiting a promise also commits through the normal function boundary.
 - `seo { key = "value" ... }` — metadata merged into the generated `meta`.
 - `style { <raw css> }` — inlined page/component stylesheet (repeatable).
 - `functions { <TypeScript> }` — helpers with typed parameters and return values. Types remain in server output and are safely erased from browser behavior code.
@@ -177,4 +214,4 @@ A file opens with `page <Name>` or `component <Name>` followed by a `{ ... }` bo
 ## Requirements / Notes
 
 - Pure TypeScript with no runtime dependencies; runs under **Bun** as part of the WrNexus toolchain (Node is not supported).
-- Generated modules target WrNexus runtime primitives (`data-scope`, `data-text`, `data-on-*`, `data-for`, `data-component`, `__wrnexus*`/`__wire*` helpers) — consume the output within a WrNexus app, e.g. via `@wrnexus/core`'s dev loader.
+- Generated modules target WrNexus runtime primitives (`data-scope`, `data-text`, `data-on-*`, `data-for`, `data-component`, `__wrnexus*`/`__wrn*` helpers) — consume the output within a WrNexus app, e.g. via `@wrnexus/core`'s dev loader.

.publish/compiler/package.json

@@ -1,14 +1,30 @@
 {
   "name": "@wrnexus/compiler",
-  "version": "0.2.74",
+  "version": "0.8.9",
   "type": "module",
   "description": "@wrnexus/compiler — part of the WrNexus framework.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS.git",
+    "directory": "packages/compiler"
+  },
+  "homepage": "https://wrnexusjs.dev/packages/compiler",
+  "bugs": {
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS/issues"
+  },
+  "keywords": [
+    "wrnexus",
+    "bun",
+    "typescript",
+    "compiler"
+  ],
+  "sideEffects": false,
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "engines": {
-    "bun": ">=1.1.0"
+    "bun": ">=1.3.0"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -20,7 +36,14 @@
       "import": "./dist/index.js"
     }
   },
+  "dependencies": {
+    "@wrnexus/csr": "^0.8.16",
+    "@wrnexus/syntax": "^0.8.8",
+    "@wrnexus/store": "^0.8.8",
+    "@wrnexus/validation": "^0.8.9"
+  },
   "files": [
-    "dist"
+    "dist",
+    "README.md"
   ]
 }

.publish/core/README.md

@@ -37,7 +37,7 @@ The `Context` (`ctx`) is the single value passed to middleware and handlers.
 | `Context`                      | type | Per-request object: `req`, `url`, `lang`, `t`, `params`, `locals`, `user?`, `ip?`, `cookies`, `session`, `localStorage`. |
 | `Next`                         | type | `() => Promise<Response> \| Response` — invokes the next middleware/handler.                                             |
 | `Middleware`                   | type | `(ctx, next) => Promise<Response> \| Response`. Return `next()` to continue, or a `Response` to short-circuit.           |
-| `createContext(req, url)`      | fn   | Build a fresh `Context` for an incoming request (wires up cookies, session, localStorage snapshot).                      |
+| `createContext(req, url)`      | fn   | Build a fresh `Context` for an incoming request (connects up cookies, session, localStorage snapshot).                   |
 | `withContextHeaders(ctx, res)` | fn   | Apply accumulated headers (e.g. `Set-Cookie`) from the context onto a response.                                          |
 | `PageComponent`                | type | `(ctx) => string \| Promise<string>` — a page module's default export.                                                   |
 | `PageMeta` / `SeoConfig`       | type | `<head>` metadata: `title`, `description`, `canonical`, `robots`, `image`, `twitterCard`, `themeColor`, …                |
@@ -70,15 +70,15 @@ cookie-backed `SessionStore`.
 
 ### CSRF — `@wrnexus/core`
 
-Double-submit cookie pattern: a readable `wire-csrf` cookie is echoed in an
+Double-submit cookie pattern: a readable `wrn-csrf` cookie is echoed in an
 `x-csrf-token` header on unsafe requests.
 
-| Export                        | Signature                        | Notes                                                                                                            |
-| ----------------------------- | -------------------------------- | ---------------------------------------------------------------------------------------------------------------- |
-| `csrfToken(ctx)`              | `(Context) => string`            | Ensures the CSRF cookie exists and returns its token.                                                            |
-| `verifyCsrf(ctx)`             | `(Context) => boolean`           | Safe methods (GET/HEAD/OPTIONS) pass; otherwise header/`ctx.locals._csrf` must match the cookie (constant-time). |
-| `csrfProtection()`            | `() => Middleware`               | 403s unsafe requests with a missing/mismatched token.                                                            |
-| `CSRF_COOKIE` / `CSRF_HEADER` | `"wire-csrf"` / `"x-csrf-token"` | Cookie & header names.                                                                                           |
+| Export                        | Signature                       | Notes                                                                                                            |
+| ----------------------------- | ------------------------------- | ---------------------------------------------------------------------------------------------------------------- |
+| `csrfToken(ctx)`              | `(Context) => string`           | Ensures the CSRF cookie exists and returns its token.                                                            |
+| `verifyCsrf(ctx)`             | `(Context) => boolean`          | Safe methods (GET/HEAD/OPTIONS) pass; otherwise header/`ctx.locals._csrf` must match the cookie (constant-time). |
+| `csrfProtection()`            | `() => Middleware`              | 403s unsafe requests with a missing/mismatched token.                                                            |
+| `CSRF_COOKIE` / `CSRF_HEADER` | `"wrn-csrf"` / `"x-csrf-token"` | Cookie & header names.                                                                                           |
 
 ### Rate limiting — `@wrnexus/core`
 
@@ -110,6 +110,37 @@ instances. The default store is process-local memory.
 (default `console.log`), `requestIdKey` (default `"requestId"`), `now`.
 `RequestRecord` = `{ time, id, method, path, status, durationMs }`.
 
+### Resilience — `@wrnexus/core`
+
+`resilientCall` standardizes cancellation-aware timeouts, controlled retries,
+fixed or exponential backoff, fallback responses, circuit breaking, and bounded
+concurrency. Reuse a declarative circuit/bulkhead options object, or an explicit
+`CircuitBreaker`/`Bulkhead` instance, wherever calls must share health and
+capacity state.
+
+```ts
+import { resilientCall } from "@wrnexus/core";
+
+const paymentCircuit = { failures: 5, resetAfter: "30s" } as const;
+
+const status = await resilientCall({
+  timeout: "5s",
+  retries: 3,
+  retryDelay: "100ms",
+  backoff: "exponential",
+  circuitBreaker: paymentCircuit,
+  bulkhead: { concurrency: 20, queue: 100 },
+  run: (signal) => paymentProvider.checkStatus({ signal }),
+  fallback: () => ({ state: "unavailable" }),
+});
+```
+
+`CircuitBreaker.snapshot()` reports `closed`, `open`, or `half-open`, failure
+and success counts, and the remaining retry delay for health endpoints and
+development tooling. Fail-fast conditions use stable `WRN-RESILIENCE-*` codes.
+Core's existing `HealthRegistry`, `withIdempotency`, and pluggable stores/locks
+cover health reporting, idempotent requests, and distributed coordination.
+
 ### Caching — `@wrnexus/core`
 
 | Export                           | Kind  | Notes                                                                                                                                      |

.publish/core/package.json

@@ -1,14 +1,30 @@
 {
   "name": "@wrnexus/core",
-  "version": "0.2.74",
+  "version": "0.8.9",
   "type": "module",
   "description": "@wrnexus/core — part of the WrNexus framework.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS.git",
+    "directory": "packages/core"
+  },
+  "homepage": "https://wrnexusjs.dev/packages/core",
+  "bugs": {
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS/issues"
+  },
+  "keywords": [
+    "wrnexus",
+    "bun",
+    "typescript",
+    "core"
+  ],
+  "sideEffects": false,
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "engines": {
-    "bun": ">=1.1.0"
+    "bun": ">=1.3.0"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -29,6 +45,7 @@
     }
   },
   "files": [
-    "dist"
+    "dist",
+    "README.md"
   ]
 }

.publish/csr/README.md

@@ -1,5 +1,34 @@
 # @wrnexus/csr
 
+## Navigation state preservation
+
+Pages can opt into restoration across client navigation:
+
+```wrn
+page Users {
+  navigation {
+    preserve = ["filters", "pagination", "scroll", "tabs", "expanded"]
+  }
+}
+```
+
+Form-like categories restore named inputs, selects, and textareas. Password,
+file, hidden, CSRF/token/secret/credential fields, and elements marked
+`data-no-preserve` are never saved. For tab, expanded, or component UI state,
+mark stable elements with `data-wrn-preserve="key"`; their value and ARIA
+selected/expanded state are restored. State is scoped to pathname plus query.
+
+## Typed server actions
+
+`createActionClient<Input, Output>(route, name)` supports programmatic calls.
+Schema-backed WRN actions also export `__wrnexusActionClients`, whose input and
+output are inferred automatically. Enhanced forms expose
+`data-wrn-action-state="pending|success|error"` and dispatch bubbling
+`wrnexus:action:optimistic`, `:pending`, `:success`, and `:error` events.
+Success details contain returned data and invalidated cache tags; error details
+contain field errors. Without JavaScript, the same form posts to its page and
+receives a 303 redirect or accessible validation response.
+
 > The browser-side client runtime for WrNexus — generic, self-contained JS that hydrates server-rendered pages with reactivity, client-side navigation, and realtime rooms.
 
 Part of the **WrNexus** framework — an SSR-first, Bun-native full-stack web framework.
@@ -49,15 +78,21 @@ getRealtimeRuntime(): string   // → REALTIME_RUNTIME
 
 Applied to any subtree containing `data-scope`. Expressions are parsed by a tiny eval-free evaluator, so a strict CSP with no `unsafe-eval` works.
 
-| Directive                                          | Purpose                                                                 |
-| -------------------------------------------------- | ----------------------------------------------------------------------- |
-| `data-scope="count: 0, name: 'x'"`                 | Declare reactive state on a subtree                                     |
-| `data-on-<event>="count++"`                        | Run a statement in scope on a DOM event                                 |
-| `data-text="expr"`                                 | Bind an element's `textContent` to an expression                        |
-| `data-show="expr"`                                 | Toggle visibility (`display`) on truthiness                             |
-| `data-for="item in list"` (opt. `item, i in list`) | Per-item list rendering template                                        |
-| `{{expr}}` or `{expr}`                             | Interpolation inside text nodes and attribute values                    |
-| `data-wrnexus-csr="id"`                            | Target for a generated CSR fetch binding (fetches `/__wrnexus/csr?...`) |
+| Directive                          | Purpose                                              |
+| ---------------------------------- | ---------------------------------------------------- |
+| `data-scope="count: 0, name: 'x'"` | Declare reactive state on a subtree                  |
+| `data-on-<event>="count++"`        | Run a statement in scope on a DOM event              |
+| `data-text="expr"`                 | Bind an element's `textContent` to an expression     |
+| `data-show="expr"`                 | Toggle visibility while preserving interactive state |
+
+Compiled conditional rendering and dynamic component cases omit inactive elements from the live
+DOM. `data-show` is a visibility directive for stateful controls and keeps its element mounted.
+Neither mechanism is authorization: never place secrets in client-rendered branches. Authorize on
+the server and return only data the current request may access.
+| `data-for="item in list"` (opt. index and `key item.id`) | Per-item rendering; stable keys preserve DOM identity during reorder |
+| `data-key="item.id"` | Alternative key declaration for `data-for` templates |
+| `{{expr}}` or `{expr}` | Interpolation inside text nodes and attribute values |
+| `data-wrnexus-csr="id"` | Target for a generated CSR fetch binding (fetches `/__wrnexus/csr?...`) |
 
 Supported expression features: literals, identifiers, member access (`a.b`, `a[b]`), function/method calls, arrays, objects, arithmetic, comparison, equality, logical (`&& ||`), unary (`! - +`), and ternary. Statements support `++`/`--`, assignment operators (`= += -= *= /= %=`), and bare expression/method calls. Rendering is dependency-tracked: a signal change only re-runs the renderers that actually read it.
 
@@ -76,11 +111,11 @@ Intercepts same-origin `<a>` clicks, fetches the target page, and swaps the `#ap
 
 Connects to `/realtime/<name>` over WebSocket (`ws`/`wss` chosen from `location.protocol`). Two usage modes.
 
-Programmatic API via `window.wire`:
+Programmatic API via `window.wrn`:
 
 ```ts
-wire.room(name): Room          // open (or reuse) a room connection
-wire.bindRooms(root?)          // (re)bind declarative [data-room] containers
+wrn.room(name): Room          // open (or reuse) a room connection
+wrn.bindRooms(root?)          // (re)bind declarative [data-room] containers
 
 interface Room {
   name: string;
@@ -176,7 +211,7 @@ A realtime chat, fully declarative:
 Or drive a room from code:
 
 ```ts
-const room = wire.room("lobby");
+const room = wrn.room("lobby");
 room.on("chat", (msg) => console.log(msg.user, msg.text));
 room.send({ type: "chat", user: "ada", text: "hi" });
 ```

.publish/csr/package.json

@@ -1,14 +1,30 @@
 {
   "name": "@wrnexus/csr",
-  "version": "0.2.74",
+  "version": "0.8.16",
   "type": "module",
   "description": "@wrnexus/csr — part of the WrNexus framework.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS.git",
+    "directory": "packages/csr"
+  },
+  "homepage": "https://wrnexusjs.dev/packages/csr",
+  "bugs": {
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS/issues"
+  },
+  "keywords": [
+    "wrnexus",
+    "bun",
+    "typescript",
+    "csr"
+  ],
+  "sideEffects": false,
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "engines": {
-    "bun": ">=1.1.0"
+    "bun": ">=1.3.0"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -21,9 +37,10 @@
     }
   },
   "dependencies": {
-    "@wrnexus/core": "^0.2.74"
+    "@wrnexus/core": "^0.8.9"
   },
   "files": [
-    "dist"
+    "dist",
+    "README.md"
   ]
 }

.publish/db/README.md

@@ -1,5 +1,14 @@
 # @wrnexus/db
 
+## Rollout-safe migrations
+
+Run `wrnexus db check` in CI before deployment. The analyzer reports stable
+diagnostics for drops, renames, type changes, new/enforced required columns,
+and potentially blocking index creation, with an expand/backfill/switch/contract
+recommendation. `wrnexus db migrate` blocks critical issues in pending
+migrations. `--allow-breaking` is an explicit operator override; already-applied
+migrations do not block later releases.
+
 > The database layer for WrNexus: TS models as the single source of truth for DDL, validation, and result typing, plus a driver-based `Db` client, migrations, and a sqlc-style query generator.
 
 Part of the **WrNexus** framework — an SSR-first, Bun-native full-stack web framework.
@@ -85,7 +94,8 @@ A `Driver` (implemented by adapters) exposes `dialect`, `query(sql, params?)`,
 - `exec(sql, params?)` — `Promise<ExecResult>` (`{ changes, lastInsertId? }`).
 - `tx(fn)` — run `fn(db)` in a transaction; rolls back on throw. Nested `tx` reuses the current transaction.
 - `createTable(model)` — runs the model's `CREATE TABLE IF NOT EXISTS` DDL.
-- `close()`.
+- `close()` — idempotently rejects new top-level work, drains active queries and
+  transactions, then closes the underlying pool.
 
 Every query is parameterized (positional params). `createTableSql(model, dialect, ifNotExists?)`
 renders `CREATE TABLE` directly; `Dialect` is `"sqlite" | "postgres" | "mysql"`.
@@ -98,7 +108,9 @@ A process-wide registry the runtime configures at startup from `wrnexus.config.t
 - `setDb(db)` / `setDb(name, db)` — set the default or a named connection.
 - `registerDb(name, db)` — alias of `setDb(name, db)`.
 - `getDb(name = "default")` — the default or a named `Db` (throws if unconfigured).
-- `hasDb(name?)`, `databaseNames()`, `closeDatabases()`.
+- `hasDb(name?)`, `databaseNames()`, `closeDatabases()`. Registry shutdown clears
+  registrations first, attempts every open database, and reports close failures
+  together with `AggregateError` instead of leaking later pools.
 
 ```ts
 const users = await getDb().all("SELECT * FROM users");
@@ -116,13 +128,13 @@ const events = await getDb("analytics").all("SELECT * FROM hits");
 
 Migrations are `.sql` files (in e.g. `app/db/migrations`), each split into
 `-- +up` and `-- +down` sections. A file with no markers is treated entirely as
-`up`. Applied names are recorded in a `_wire_migrations` table so each runs once.
+`up`. Applied names are recorded in a `_wrn_migrations` table so each runs once.
 
 - `parseMigration(name, content)` → `Migration` (`{ name, up, down }`).
 - `loadMigrations(dir)` — parse all `.sql` files, sorted by filename.
 - `appliedMigrations(db)` — applied names, oldest first.
-- `migrate(db, dir)` — apply all pending (each in a transaction); returns applied names.
-- `rollback(db, dir)` — roll back the most recent; returns its name or `null`.
+- `migrate(db, dir, options?)` — apply all pending (each in a transaction); returns applied names.
+- `rollback(db, dir, options?)` — roll back the most recent; returns its name or `null`.
 - `status(db, dir)` — `{ name, applied }[]` for every migration file.
 - `scaffoldMigration(dir, name, dialect, models?)` — write a new numbered migration; with `models` it generates `CREATE`/`DROP` for every table (referenced tables first via topological sort). Returns the file path.
 
@@ -199,6 +211,21 @@ const pageTwo = await paginate(
 );
 ```
 
+For deployments, `{ dryRun: true }` reports pending names without applying
+their SQL, `signal` cancels safely between migrations, and the default
+database-backed lock prevents concurrent deploy runners. A live lock produces
+`WRN-DB-MIGRATION-LOCKED`; crash-stale locks expire after `lockTimeoutMs` (five
+minutes by default). Disable it with `lock: false` only when an external deploy
+coordinator already guarantees exclusivity.
+
+```ts
+const pending = await migrate(db, "app/db/migrations", { dryRun: true });
+await migrate(db, "app/db/migrations", {
+  signal: shutdownController.signal,
+  lockTimeoutMs: 10 * 60_000,
+});
+```
+
 MongoDB (document API):
 
 ```ts
@@ -222,7 +249,51 @@ SQL driver — use `@wrnexus/db/mongo` directly.
 - **Bun-only.** Uses `bun:sqlite` (SQLite adapter + session store) and `Bun.SQL`
   (Postgres/MySQL). Migrations/scaffolding use `node:fs`/`node:path`.
 - Works with `@wrnexus/core` — `sqliteSessionStore` implements its
-  `SessionBackend`; `getDb`/`setDb` are wired by the WrNexus runtime from
+  `SessionBackend`; `getDb`/`setDb` are connected by the WrNexus runtime from
   `wrnexus.config.ts`.
 - The `mongodb` npm package is an optional, lazily-imported peer — install it
   only if you use `@wrnexus/db/mongo`. The core package stays dependency-free.
+
+## Repository and transaction helpers
+
+Repositories accept an immutable equality `scope`, normally `{ column: "tenant_id", value:
+ctx.tenant.id }`. The scope is injected into every read, count, update and delete, while create
+overwrites any caller-supplied tenant value. This makes accidental cross-tenant CRUD through the
+repository API fail closed.
+
+```ts
+import { createRepository, retryTransaction, databaseHealth, batch } from "@wrnexus/db";
+
+const users = createRepository<User>(db, {
+  table: "users",
+  allowedColumns: ["email", "name", "active"],
+});
+
+const user = await users.require(42);
+await users.update(42, { active: true });
+```
+
+Repository identifiers are validated, writes may be restricted to an allowlist, and values always use query parameters. Infrastructure packages remain helper-only and do not add UI dependencies to server code.
+
+## 0.8 repository and transaction helpers
+
+```ts
+import { createRepository, databaseHealth, firstOrThrow, retryTransaction } from "@wrnexus/db";
+
+const usersRepo = createRepository<User>(db, {
+  table: "users",
+  allowedColumns: ["email", "name", "active"],
+  maxListLimit: 250,
+});
+
+const users = await usersRepo.all({
+  orderBy: "name",
+  direction: "asc",
+  limit: 50,
+  offset: 0,
+});
+```
+
+Repository SQL identifiers are validated and values remain parameterized. Placeholder generation is dialect-aware: PostgreSQL uses `$1`, `$2`, and SQLite/MySQL use `?`. List limits are bounded.
+
+`retryTransaction()` retries recognized serialization, deadlock, and database-lock errors by default. Supply `shouldRetry` for application-specific retryable errors; ordinary validation or business errors are not retried automatically.

.publish/db/package.json

@@ -1,14 +1,30 @@
 {
   "name": "@wrnexus/db",
-  "version": "0.2.74",
+  "version": "0.8.9",
   "type": "module",
-  "description": "@wrnexus/db — part of the WrNexus framework.",
+  "description": "Typed database drivers, migrations, instrumentation, repositories, pagination, and transaction helpers.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS.git",
+    "directory": "packages/db"
+  },
+  "homepage": "https://wrnexusjs.dev/packages/db",
+  "bugs": {
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS/issues"
+  },
+  "keywords": [
+    "wrnexus",
+    "bun",
+    "typescript",
+    "db"
+  ],
+  "sideEffects": false,
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "engines": {
-    "bun": ">=1.1.0"
+    "bun": ">=1.3.0"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -45,6 +61,7 @@
     }
   },
   "files": [
-    "dist"
+    "dist",
+    "README.md"
   ]
 }

.publish/dev-server/README.md

@@ -6,7 +6,7 @@ Part of the **WrNexus** framework — an SSR-first, Bun-native full-stack web fr
 
 ## Overview
 
-This package is the server runtime that powers a WrNexus app in both development and production. A single **request runtime** (`createHandlers`) owns HTTP/WebSocket dispatch and SSR document assembly; it knows nothing about _how_ modules and assets are produced, so the dev and prod entry points wire in different backends: dev uses dynamic module loading plus on-the-fly bundling and injects a live-reload client; prod uses a static, pre-built manifest with cache-immutable assets. The package also ships a multi-app **gateway** (route several apps by `Host` header behind one port) and a portable `node:http` adapter for WinterCG hosts. It is entirely server-side and Bun-native (`Bun.serve`, `Bun.file`, `Bun.gzipSync`).
+This package is the server runtime that powers a WrNexus app in both development and production. A single **request runtime** (`createHandlers`) owns HTTP/WebSocket dispatch and SSR document assembly; it knows nothing about _how_ modules and assets are produced, so the dev and prod entry points wrn in different backends: dev uses dynamic module loading plus on-the-fly bundling and injects a live-reload client; prod uses a static, pre-built manifest with cache-immutable assets. The package also ships a multi-app **gateway** (route several apps by `Host` header behind one port) and a portable `node:http` adapter for WinterCG hosts. It is entirely server-side and Bun-native (`Bun.serve`, `Bun.file`, `Bun.gzipSync`).
 
 ## Installation
 
@@ -21,16 +21,16 @@ bun add @wrnexus/dev-server
 
 ### Main entry (`@wrnexus/dev-server`)
 
-| Export                                                    | Kind                      | Purpose                                                                                                                               |
-| --------------------------------------------------------- | ------------------------- | ------------------------------------------------------------------------------------------------------------------------------------- |
-| `startServer(opts: ServeOptions)`                         | `Promise<RunningServer>`  | Start the dev server on `Bun.serve`: builds the router, connects/migrates databases, wires assets + HMR, and starts the file watcher. |
-| `createHandlers(deps: RuntimeDeps)`                       | `Handlers`                | The shared request runtime (fetch + websocket handlers). Re-exported from `runtime.ts`.                                               |
-| `createProductionServer(manifest, opts)`                  | `Bun.Server`              | Start the production server from a precompiled manifest.                                                                              |
-| `createProductionHandlers(manifest, opts)`                | `Handlers`                | Build the portable prod fetch/websocket handlers with no server bound (the deployment-adapter seam).                                  |
-| `startGateway(opts: GatewayOptions)`                      | `Promise<RunningGateway>` | Boot multiple apps as child processes and route by `Host`.                                                                            |
-| `toRequest`, `writeResponse`, `nodeListener`, `serveNode` | functions                 | `node:http` ↔ WinterCG `Request`/`Response` adapter.                                                                                  |
-| `RESTART_EXIT_CODE`                                       | `number` (`97`)           | Exit code the dev child uses to ask the supervisor for a fresh process.                                                               |
-| `STYLES_HREF`, `HMR_CLIENT_JS`                            | constants                 | The global stylesheet URL and the inline HMR client script.                                                                           |
+| Export                                                    | Kind                      | Purpose                                                                                                                                  |
+| --------------------------------------------------------- | ------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------- |
+| `startServer(opts: ServeOptions)`                         | `Promise<RunningServer>`  | Start the dev server on `Bun.serve`: builds the router, connects/migrates databases, connects assets + HMR, and starts the file watcher. |
+| `createHandlers(deps: RuntimeDeps)`                       | `Handlers`                | The shared request runtime (fetch + websocket handlers). Re-exported from `runtime.ts`.                                                  |
+| `createProductionServer(manifest, opts)`                  | `Bun.Server`              | Start the production server from a precompiled manifest.                                                                                 |
+| `createProductionHandlers(manifest, opts)`                | `Handlers`                | Build the portable prod fetch/websocket handlers with no server bound (the deployment-adapter seam).                                     |
+| `startGateway(opts: GatewayOptions)`                      | `Promise<RunningGateway>` | Boot multiple apps as child processes and route by `Host`.                                                                               |
+| `toRequest`, `writeResponse`, `nodeListener`, `serveNode` | functions                 | `node:http` ↔ WinterCG `Request`/`Response` adapter.                                                                                     |
+| `RESTART_EXIT_CODE`                                       | `number` (`97`)           | Exit code the dev child uses to ask the supervisor for a fresh process.                                                                  |
+| `STYLES_HREF`, `HMR_CLIENT_JS`                            | constants                 | The global stylesheet URL and the inline HMR client script.                                                                              |
 
 Exported types: `ServeOptions`, `RunningServer`, `RuntimeDeps`, `AssetServer`, `WsData`, `GatewayApp`, `GatewayOptions`, `GatewayAuth`, `GatewaySecurity`, `RunningGateway`, `FetchHandler`.
 
@@ -66,6 +66,12 @@ interface RunningServer {
 
 In development, `startServer` also connects `app/db/migrations` (and `app/db/<name>/migrations`) and auto-applies migrations, then starts an in-process file watcher. CSS edits hot-swap live. Page, component, layout, API, middleware, realtime, schema, locale, and public-asset edits invalidate only their cached modules, rescan routes where necessary, and morph fresh HTML through the existing HMR WebSocket. The server process and active gateway stay running.
 
+`getWrnCompileMetrics()` exposes cumulative content-addressed compiler cache
+`hits`, `misses`, successful `compilations`, `errors`, `totalDurationMs`, and
+`lastDurationMs` for the DevToolbar or custom diagnostics. Tests and embedded
+servers can call `resetWrnCompileMetrics()` to establish a fresh measurement
+window.
+
 ### `createHandlers(deps)`
 
 The core runtime shared by dev and prod. It handles CORS preflight, `/healthz` and `/__wrnexus/health`, request-body size limits (413), HMR socket upgrades (`/__wrnexus/hmr`), realtime WebSocket upgrades (`defineRoom` default export or a raw `websocket` export), the middleware pipeline, API routes (`/api/*`), framework assets (`/__wrnexus/*`), public assets, and full SSR page rendering (component mounts, layouts, slots, i18n markers, per-page script selection, ETag/304, gzip).
@@ -79,7 +85,7 @@ interface RuntimeDeps {
   getMiddleware(): Promise<Middleware[]>;
   assets: AssetServer; // serves /__wrnexus/* (islands, reactive, hmr)
   hasStyles?: boolean; // inject the global stylesheet link
-  hasUi?: boolean; // inject the Wire UI stylesheet (/__wrnexus/ui.css)
+  hasUi?: boolean; // inject the WrNexus UI stylesheet (/__wrnexus/ui.css)
   theme?: ResolvedTheme; // enables /__wrnexus/theme.css + <html data-theme>
   i18n?: ResolvedI18n; // enables ctx.t, <html lang>, {t:key} markers
   inlineStyles?: string; // inline small prod stylesheets into <head>
@@ -296,7 +302,9 @@ Pages get only the scripts they use: `nav.js` always, `reactive.js` when a page
 
 - **Bun-only.** Uses `Bun.serve` (HTTP + WebSocket), `Bun.file`, and `Bun.gzipSync`. The full app also relies on `bun:sqlite` / `Bun.SQL` via `@wrnexus/db`.
 - Orchestrates the whole framework: `@wrnexus/core` (context, security, realtime registry), `@wrnexus/router`, `@wrnexus/ssr` (`renderDocument`), `@wrnexus/csr` (client runtimes), `@wrnexus/compiler` (`.wrn` → TS), `@wrnexus/styles`, `@wrnexus/ui`, `@wrnexus/validation`, `@wrnexus/i18n`, `@wrnexus/db`, and `@wrnexus/pubsub` (Redis-backed cross-process realtime).
-- `.wrn` files are compiled to TypeScript into a hidden sibling `.wrnexus/` cache dir and dynamically imported; the module cache means each edited server module needs a fresh process (dev) — hence the restart-on-change model.
+- `.wrn` files compile into a content-addressed hidden `.wrnexus/` cache. Targeted
+  invalidation gives changed modules a fresh import identity without restarting
+  the development server.
 - Responses are gzipped when the client accepts it and the body is a buffered, compressible payload ≥ 1 KB; streaming/SSE responses opt out via `Cache-Control: no-transform`.
 </content>
 

.publish/dev-server/package.json

@@ -1,14 +1,30 @@
 {
   "name": "@wrnexus/dev-server",
-  "version": "0.2.74",
+  "version": "0.8.16",
   "type": "module",
   "description": "@wrnexus/dev-server — part of the WrNexus framework.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS.git",
+    "directory": "packages/dev-server"
+  },
+  "homepage": "https://wrnexusjs.dev/packages/dev-server",
+  "bugs": {
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS/issues"
+  },
+  "keywords": [
+    "wrnexus",
+    "bun",
+    "typescript",
+    "dev-server"
+  ],
+  "sideEffects": false,
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "engines": {
-    "bun": ">=1.1.0"
+    "bun": ">=1.3.0"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -25,20 +41,30 @@
     }
   },
   "dependencies": {
-    "@wrnexus/core": "^0.2.74",
-    "@wrnexus/router": "^0.2.74",
-    "@wrnexus/ssr": "^0.2.74",
-    "@wrnexus/csr": "^0.2.74",
-    "@wrnexus/compiler": "^0.2.74",
-    "@wrnexus/styles": "^0.2.74",
-    "@wrnexus/ui": "^0.2.74",
-    "@wrnexus/validation": "^0.2.74",
-    "@wrnexus/i18n": "^0.2.74",
-    "@wrnexus/db": "^0.2.74",
-    "@wrnexus/pubsub": "^0.2.74",
-    "@wrnexus/uploader": "^0.2.74"
+    "@wrnexus/authz": "^0.8.9",
+    "@wrnexus/rpc": "^0.8.9",
+    "@wrnexus/core": "^0.8.9",
+    "@wrnexus/dev-toolbar": "^0.8.9",
+    "@wrnexus/router": "^0.8.9",
+    "@wrnexus/ssr": "^0.8.9",
+    "@wrnexus/csr": "^0.8.16",
+    "@wrnexus/compiler": "^0.8.9",
+    "@wrnexus/styles": "^0.8.10",
+    "@wrnexus/ui": "^0.8.12",
+    "@wrnexus/validation": "^0.8.9",
+    "@wrnexus/i18n": "^0.8.9",
+    "@wrnexus/db": "^0.8.9",
+    "@wrnexus/pubsub": "^0.8.9",
+    "@wrnexus/uploader": "^0.8.9",
+    "@wrnexus/plugin": "^0.8.8",
+    "@wrnexus/store": "^0.8.8",
+    "@wrnexus/security": "^0.8.8",
+    "@wrnexus/observability": "^0.8.8",
+    "@wrnexus/cache": "^0.8.8",
+    "@wrnexus/pwa": "^0.8.8"
   },
   "files": [
-    "dist"
+    "dist",
+    "README.md"
   ]
 }

.publish/dev-toolbar/README.md

@@ -0,0 +1,30 @@
+# @wrnexus/dev-toolbar
+
+Development-only page quality toolbar for WRNexusJS.
+
+## Features
+
+- Runtime, resource and unhandled promise error capture
+- Accessibility, SEO, image, media, color, HTML, form, link, responsive and security checks
+- Performance and network observations
+- First-class application tabs for runtime, stores, cache, accessibility, SEO, performance,
+  security, images, links, and JavaScript
+- Plugin-contributed applications with badges, descriptions, issue feeds, and structured data
+- Element highlighting and issue filtering
+- Server-side issue collector
+- Development-only asset strings for direct serving by `@wrnexus/dev-server`
+- Safe open-in-editor helper
+
+## Dev-server integration
+
+Serve `DEV_TOOLBAR_RUNTIME` at `/__wrnexus/dev-toolbar.js` and `DEV_TOOLBAR_CSS` at `/__wrnexus/dev-toolbar.css`, then inject this before `</body>` in development:
+
+```html
+<script type="module" src="/__wrnexus/dev-toolbar.js" data-wrnexus-dev-toolbar></script>
+```
+
+The browser runtime exposes `window.__wrnexusDevToolbar`.
+
+Plugin panels returned through `devToolbarPanels()` are automatically added to the application
+strip. Their issue category is filterable, and structured `data` is rendered as escaped diagnostic
+content so a plugin never needs to inject toolbar HTML.

.publish/dev-toolbar/package.json

@@ -0,0 +1,59 @@
+{
+  "name": "@wrnexus/dev-toolbar",
+  "version": "0.8.9",
+  "type": "module",
+  "description": "@wrnexus/dev-toolbar — part of the WrNexus framework.",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS.git",
+    "directory": "packages/dev-toolbar"
+  },
+  "homepage": "https://wrnexusjs.dev/packages/dev-toolbar",
+  "bugs": {
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS/issues"
+  },
+  "keywords": [
+    "wrnexus",
+    "bun",
+    "typescript",
+    "dev-toolbar"
+  ],
+  "sideEffects": false,
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "engines": {
+    "bun": ">=1.3.0"
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org/",
+    "access": "restricted"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./client": {
+      "types": "./dist/client/index.d.ts",
+      "import": "./dist/client/index.js"
+    },
+    "./server": {
+      "types": "./dist/server/index.d.ts",
+      "import": "./dist/server/index.js"
+    },
+    "./types": {
+      "types": "./dist/types.d.ts",
+      "import": "./dist/types.js"
+    },
+    "./rules": {
+      "types": "./dist/rules/index.d.ts",
+      "import": "./dist/rules/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ]
+}

.publish/encryption/README.md

@@ -1,80 +0,0 @@
-# @wrnexus/encryption
-
-> Dependency-free crypto helpers for WrNexus: authenticated symmetric encryption (AES-256-GCM), hashing, and HMAC signing.
-
-Part of the **WrNexus** framework — an SSR-first, Bun-native full-stack web framework.
-
-## Overview
-
-This package provides small, focused cryptographic primitives for server-side use: encrypting secrets/tokens/database fields at rest with AES-256-GCM, deriving keys from passwords via PBKDF2, computing SHA-256 digests, and signing/verifying payloads with HMAC-SHA256. It is built entirely on the standard **Web Crypto API** (`crypto.subtle`) plus `btoa`/`atob` and `TextEncoder`/`TextDecoder` — no third-party dependencies. Reach for it whenever you need to protect sensitive values or verify webhook signatures. All functions are `async` (Web Crypto is promise-based).
-
-## Installation
-
-```bash
-bun add @wrnexus/encryption
-```
-
-> Private package — the machine must be authenticated to the `wrnexus` npm org
-> (a read token in `~/.npmrc`). Requires **Bun** (Node is not supported).
-
-## API
-
-All keys are exchanged as **base64 strings** and all digests/signatures as **hex strings**.
-
-| Export        | Signature                                                               | Description                                                                                                           |
-| ------------- | ----------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------- |
-| `generateKey` | `() => Promise<string>`                                                 | Generate a random 256-bit AES key, base64-encoded. Store it as a secret.                                              |
-| `deriveKey`   | `(password: string, salt: string) => Promise<string>`                   | Derive a base64 AES-256 key from a password + salt using PBKDF2 (100,000 iterations, SHA-256).                        |
-| `encrypt`     | `(plaintext: string, key: string) => Promise<string>`                   | AES-256-GCM encrypt a string. Returns base64 of `iv(12 bytes) ‖ ciphertext+tag`. A fresh random IV is used each call. |
-| `decrypt`     | `(payload: string, key: string) => Promise<string>`                     | Decrypt a value produced by `encrypt`. Throws if the key is wrong or the data was tampered with.                      |
-| `sha256`      | `(data: string) => Promise<string>`                                     | SHA-256 hex digest of a string (e.g. content hashing, dedup keys).                                                    |
-| `hmacSign`    | `(data: string, secret: string) => Promise<string>`                     | HMAC-SHA256 hex signature of `data` with `secret` (e.g. signing webhooks).                                            |
-| `hmacVerify`  | `(data: string, secret: string, signature: string) => Promise<boolean>` | Constant-time verify of an HMAC-SHA256 hex signature.                                                                 |
-
-Notes:
-
-- `generateKey` produces a 32-byte (256-bit) key via `crypto.getRandomValues`.
-- `encrypt`/`decrypt` require a base64-encoded 256-bit key; anything else throws `"Encryption key must be a base64 256-bit key"`.
-- `decrypt` throws `"Invalid ciphertext"` if the payload is shorter than the 12-byte IV, and the underlying Web Crypto call throws on any authentication (tag) mismatch.
-- `hmacVerify` compares in constant time (length check plus XOR accumulation) to avoid timing leaks.
-
-## Usage
-
-Symmetric encryption of a secret at rest:
-
-```ts
-import { generateKey, encrypt, decrypt } from "@wrnexus/encryption";
-
-const key = await generateKey(); // store this safely (env/secret manager)
-
-const box = await encrypt("card #1234", key); // opaque base64 string, safe to persist
-const plain = await decrypt(box, key); // "card #1234"
-```
-
-Deriving a key from a user password instead of a random key:
-
-```ts
-import { deriveKey, encrypt } from "@wrnexus/encryption";
-
-const key = await deriveKey("correct horse battery staple", "per-user-salt");
-const box = await encrypt("secret note", key);
-```
-
-Hashing and webhook signature verification:
-
-```ts
-import { sha256, hmacSign, hmacVerify } from "@wrnexus/encryption";
-
-const digest = await sha256("some content"); // 64-char hex string
-
-const signature = await hmacSign(rawBody, webhookSecret);
-const ok = await hmacVerify(rawBody, webhookSecret, incomingSignatureHeader);
-if (!ok) throw new Error("Invalid webhook signature");
-```
-
-## Requirements / Notes
-
-- **Bun-only.** Relies on the Web Crypto API (`crypto.subtle`, `crypto.getRandomValues`) and the global `btoa`/`atob`, `TextEncoder`/`TextDecoder` — all available in Bun's runtime.
-- **No dependencies.** The package has an empty dependency set; nothing is bundled beyond standard runtime APIs.
-- Algorithms: AES-256-GCM (encryption), PBKDF2 with 100k SHA-256 iterations (key derivation), SHA-256 (digest), HMAC-SHA256 (signing).
-- Keep generated/derived keys and HMAC secrets out of source control; treat them as first-class secrets.

.publish/encryption/package.json

@@ -1,26 +0,0 @@
-{
-  "name": "@wrnexus/encryption",
-  "version": "0.2.74",
-  "type": "module",
-  "description": "@wrnexus/encryption — part of the WrNexus framework.",
-  "license": "MIT",
-  "main": "./dist/index.js",
-  "module": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "engines": {
-    "bun": ">=1.1.0"
-  },
-  "publishConfig": {
-    "registry": "https://registry.npmjs.org/",
-    "access": "restricted"
-  },
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    }
-  },
-  "files": [
-    "dist"
-  ]
-}

.publish/helpers/README.md

@@ -1,81 +0,0 @@
-# @wrnexus/helpers
-
-Safe convenience helpers for common WrNexus application flows. The package uses
-standard `Context`, `URL`, and `Response` values and has no runtime dependency beyond
-`@wrnexus/core`.
-
-## Installation
-
-```bash
-bun add @wrnexus/helpers
-```
-
-The package is private, so the machine must be authenticated to the `wrnexus` npm
-organization.
-
-## Usage
-
-### Redirect an unauthenticated forward-auth request
-
-The gateway calls an SSO verifier on a different URL from the original application.
-These helpers reconstruct the original URL from the gateway headers and safely place it
-in the login redirect:
-
-```ts
-import type { Context } from "@wrnexus/core";
-import { redirectToLogin } from "@wrnexus/helpers";
-
-export const GET = async (ctx: Context) => {
-  if (await hasValidSession(ctx)) {
-    return new Response(null, { status: 204 });
-  }
-
-  return redirectToLogin(ctx, "/login", {
-    allowedHosts: ["admin.localhost:3000", "reports.localhost:3000"],
-  });
-};
-```
-
-This creates a response such as:
-
-```text
-Location: http://sso.localhost:3000/login?returnTo=http%3A%2F%2Fadmin.localhost%3A3000%2F
-```
-
-Always list the application hosts that are valid redirect destinations. Forwarded host
-headers are rejected when `allowedHosts` is absent or does not match, preventing an open
-redirect.
-
-The SSO hostname is the login destination, not an `allowedHosts` entry. For example,
-when protecting `admin.localhost:3000`, keep `admin.localhost:3000` in the allowlist even
-though the verifier runs at `sso.localhost:3000`. WRNexus preserves both hosts across a
-nested gateway request.
-
-### Support dynamic tenant domains
-
-```ts
-import type { Context } from "@wrnexus/core";
-import { getOriginalRequestOrigin, redirectToLogin } from "@wrnexus/helpers";
-
-export const GET = async (ctx: Context) => {
-  const allowedHosts = (host: string) => host === "example.test" || host.endsWith(".example.test");
-
-  console.info("Authentication requested by", getOriginalRequestOrigin(ctx, { allowedHosts }));
-  return redirectToLogin(ctx, "https://auth.example.test/login", {
-    allowedHosts,
-    returnToParam: "continue",
-    status: 303,
-  });
-};
-```
-
-## API
-
-- `getOriginalRequestUrl(ctx, options): URL` — reconstruct the gateway URL.
-- `getOriginalRequestOrigin(ctx, options): string` — return only its origin.
-- `getOriginalRequestPath(ctx): string` — return its path and query string.
-- `getOriginalRequestMethod(ctx): string` — return its HTTP method.
-- `redirectToLogin(ctx, loginUrl, options): Response` — create a login redirect with an
-  encoded `returnTo` parameter.
-
-For direct requests without gateway headers, URL helpers use `ctx.url`.

.publish/helpers/package.json

@@ -1,29 +0,0 @@
-{
-  "name": "@wrnexus/helpers",
-  "version": "0.2.74",
-  "type": "module",
-  "description": "Safe convenience helpers for WrNexus request contexts and common application flows.",
-  "license": "MIT",
-  "main": "./dist/index.js",
-  "module": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "engines": {
-    "bun": ">=1.1.0"
-  },
-  "publishConfig": {
-    "registry": "https://registry.npmjs.org/",
-    "access": "restricted"
-  },
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    }
-  },
-  "dependencies": {
-    "@wrnexus/core": "^0.2.74"
-  },
-  "files": [
-    "dist"
-  ]
-}

.publish/i18n/README.md

@@ -1,167 +1,93 @@
 # @wrnexus/i18n
 
-> Per-request translations plus locale-aware number, date, and currency formatting for WrNexus apps.
+Recursive locale loading, fallback resolution, SSR/browser translations, locale formatting, and language UI blocks for WRNexusJS.
 
-Part of the **WrNexus** framework — an SSR-first, Bun-native full-stack web framework.
+## Locale files
 
-## Overview
+Both layouts can be used together:
 
-`@wrnexus/i18n` loads locale files from `app/locales/<lang>.json`, resolves the
-active language for each request (cookie → `Accept-Language` → default), and
-builds a `t(key, params)` translator used both in server code and in `.wrn`
-views. It also ships Intl-based formatting helpers and a tiny client runtime that
-wires up a language switcher. Translation lookup, language resolution, and HTML
-marker rewriting run server-side; only the small `I18N_RUNTIME` snippet runs in
-the browser.
-
-## Installation
-
-```bash
-bun add @wrnexus/i18n
+```text
+app/locales/en.json
+app/locales/en/common.json
+app/locales/en/auth.json
+app/locales/mr/common.json
 ```
 
-> Private package — the machine must be authenticated to the `wrnexus` npm org
-> (a read token in `~/.npmrc`). Requires **Bun** (Node is not supported).
-
-## API
-
-### Loading & resolving
-
-| Export        | Signature                                                                                          | Description                                                                                                                             |
-| ------------- | -------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------- |
-| `loadLocales` | `(dir: string) => Record<string, Messages>`                                                        | Reads every `<lang>.json` in `dir` into a `{ lang: messages }` map. Missing dir → `{}`; a bad file is warned and skipped.               |
-| `resolveI18n` | `(messages: Record<string, Messages>, config?: I18nConfig) => ResolvedI18n`                        | Merges loaded messages + config into a resolved bundle (default lang, supported langs, messages).                                       |
-| `resolveLang` | `(i18n: ResolvedI18n, cookieValue: string \| undefined, acceptLanguage: string \| null) => string` | Picks the active language: matching cookie → best `Accept-Language` tag (falls back to base tag, e.g. `en-US` → `en`) → `i18n.default`. |
-| `makeT`       | `(i18n: ResolvedI18n, lang: string) => TFunction`                                                  | Builds a translator resolving current language → default → the key itself, with `{param}` interpolation.                                |
-
-### Types & constants
-
-| Export         | Kind        | Notes                                                                          |
-| -------------- | ----------- | ------------------------------------------------------------------------------ |
-| `Messages`     | `type`      | `Record<string, unknown>` — a locale's messages (supports nested/dotted keys). |
-| `I18nConfig`   | `interface` | `{ default?: string; locales?: string[] }`.                                    |
-| `ResolvedI18n` | `interface` | `{ default: string; langs: string[]; messages: Record<string, Messages> }`.    |
-| `LANG_COOKIE`  | `const`     | `"wire-lang"` — the cookie the language is read from / written to.             |
-| `I18N_JS_HREF` | `const`     | `"/__wrnexus/i18n.js"` — URL the client runtime is served at.                  |
-
-### HTML & client runtime
-
-| Export           | Signature                                      | Description                                                                                                                                                                                                                 |
-| ---------------- | ---------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `translateHtml`  | `(html: string, t: TFunction) => string`       | Rewrites markers in rendered HTML: `t:<attr>="key"` → `<attr>="<translation>"` (attribute-escaped) and `<tag data-t="key">…</tag>` → element text becomes the translation (HTML-escaped). No-op unless a marker is present. |
-| `renderI18nData` | `(i18n: ResolvedI18n, lang: string) => string` | JS snippet setting `window.__wireI18n = { lang, langs, default }` for the client switcher.                                                                                                                                  |
-| `I18N_RUNTIME`   | `const string`                                 | Browser IIFE that binds `[data-wire-lang-set="es"]` clicks and `select[data-wire-lang]` changes to set the `wire-lang` cookie and reload. Exposes `window.__wireLang.set(lang)`.                                            |
-
-### Formatting helpers (re-exported from `./format.ts`)
-
-| Export               | Signature                                                                                         | Example                                        |
-| -------------------- | ------------------------------------------------------------------------------------------------- | ---------------------------------------------- |
-| `formatNumber`       | `(value: number, lang: string, options?: Intl.NumberFormatOptions) => string`                     | `1234.5 → "1,234.5"`                           |
-| `formatCurrency`     | `(value: number, currency: string, lang: string) => string`                                       | `9.99, "USD" → "$9.99"`                        |
-| `formatDate`         | `(value: Date \| number \| string, lang: string, options?: Intl.DateTimeFormatOptions) => string` | defaults to `{ dateStyle: "medium" }`          |
-| `formatRelativeTime` | `(value: number, unit: Intl.RelativeTimeFormatUnit, lang: string) => string`                      | `-3, "day" → "3 days ago"` (`numeric: "auto"`) |
-| `plural`             | `(count: number, forms: Partial<Record<Intl.LDMLPluralRule, string>>, lang: string) => string`    | picks CLDR form; `#` is replaced by `count`    |
-
-## Usage
-
-### Server: load, resolve, translate
+Namespaced files become keys such as `common.save` and `auth.signIn`.
 
 ```ts
-import {
-  loadLocales,
-  resolveI18n,
-  resolveLang,
-  makeT,
-  translateHtml,
-  LANG_COOKIE,
-} from "@wrnexus/i18n";
+import { loadLocales, makeT, resolveI18n, resolveLang } from "@wrnexus/i18n";
 
-// app/locales/en.json, app/locales/es.json
-const messages = loadLocales("app/locales");
-const i18n = resolveI18n(messages, { default: "en", locales: ["en", "es"] });
+const i18n = resolveI18n(loadLocales("app/locales", { strict: true }), {
+  default: "en",
+  locales: ["en", "mr", "hi"],
+  fallbacks: { "mr-IN": ["mr", "en"] },
+  cookie: { name: "wrn-lang", sameSite: "Lax", secure: true },
+});
 
-// Per request:
-const lang = resolveLang(i18n, req.cookies?.[LANG_COOKIE], req.headers.get("accept-language"));
+const lang = resolveLang(i18n, cookieValue, request.headers.get("accept-language"));
 const t = makeT(i18n, lang);
-
-t("nav.home"); // dotted key → "Home"
-t("greeting", { name: "Ada" }); // "Hello, {name}" → "Hello, Ada"
-
-// After rendering a .wrn view, resolve translation markers in the HTML:
-const finalHtml = translateHtml(renderedHtml, t);
+t("common.hello", { name: "Ajay" });
 ```
 
-`app/locales/en.json`:
+## Resolution behavior
 
-```json
-{
-  "nav": { "home": "Home" },
-  "greeting": "Hello, {name}"
-}
-```
+- normalized BCP-47-style locale names
+- cookie preference
+- weighted `Accept-Language`
+- wildcard language ranges
+- regional base fallback
+- explicit fallback chains
+- configured default language
+- automatic RTL for Arabic, Hebrew, Persian, Urdu, and related languages
 
-### Views: translation markers
+Locale JSON is size-limited and rejects prototype-pollution keys. Recursive namespace collisions are resolved safely.
+
+## Views and runtime
 
 ```html
-<h1 data-t="nav.home">Home</h1>
+<h1 data-t="dashboard.title">Dashboard</h1>
 <input t:placeholder="search.placeholder" />
 ```
 
-`translateHtml` replaces the element text for `data-t` and the attribute value for
-any `t:<attr>` (e.g. `t:placeholder`, `t:aria-label`).
+Text and translated attributes are resolved during SSR. Active/fallback messages are serialized safely for the language runtime, which rebinds `data-t` markers after client navigation.
 
-### Client: language switcher
+Enable `i18nPlugin()` to use:
 
-```ts
-import { renderI18nData, I18N_RUNTIME, I18N_JS_HREF } from "@wrnexus/i18n";
+- `<LanguageSwitcher />`
+- `<LocaleStatus />`
 
-// In the document <head>:
-const head = `
-  <script>${renderI18nData(i18n, lang)}</script>
-  <script src="${I18N_JS_HREF}"></script>
-`;
+`LanguageSwitcher` renders a native `select[data-wrn-lang]`. The packaged runtime validates the
+selection against the configured locales, writes the configured language cookie, updates the
+document `lang`/`dir` attributes, emits `wrnexus:language-change`, and reloads so the next SSR
+request uses the same cookie. No application-owned browser script is required.
 
-// Serve I18N_RUNTIME at I18N_JS_HREF; then in markup:
-// <button data-wire-lang-set="es">Español</button>
-// <select data-wire-lang>…</select>
-```
+## Formatting
 
-### Formatting
+- `formatNumber`
+- `formatCurrency`
+- `formatDate`
+- `formatRelativeTime`
+- `plural`
+- `createLocaleFormatter`
+- `translationCoverage`
+  Localization tooling can extract statically discoverable `t("key")`,
+  `i18n.t("key")`, and `data-i18n="key"` usage, compare every locale with a
+  reference, and create layout-stressing pseudo-locales:
 
 ```ts
 import {
-  formatNumber,
-  formatCurrency,
-  formatDate,
-  formatRelativeTime,
-  plural,
+  auditLocaleKeys,
+  createPseudoLocale,
+  extractTranslationKeysFromFiles,
 } from "@wrnexus/i18n";
 
-formatNumber(1234.5, lang); // "1,234.5"
-formatCurrency(9.99, "USD", lang); // "$9.99"
-formatDate(Date.now(), lang); // "Jul 4, 2026"
-formatRelativeTime(-3, "day", lang); // "3 days ago"
-plural(2, { one: "# item", other: "# items" }, lang); // "2 items"
+const used = extractTranslationKeysFromFiles(sourceFiles);
+const coverage = auditLocaleKeys(messages, "en");
+const enXA = createPseudoLocale(messages.en);
+const arXB = createPseudoLocale(messages.en, { rtl: true });
 ```
 
-## Configuration
-
-`resolveI18n` accepts an `I18nConfig`:
-
-- `default` — fallback language; used when nothing else matches. Ignored if it has
-  no loaded messages, in which case the first supported language is used.
-- `locales` — explicit supported-language list; defaults to the loaded locale names.
-
-Language resolution order at request time (`resolveLang`): a supported `wire-lang`
-cookie value → the first matching `Accept-Language` tag (or its base subtag) → the
-resolved default.
-
-## Requirements / Notes
-
-- **Bun-only.** Locale loading uses `node:fs` (`existsSync`, `readdirSync`,
-  `readFileSync`) and `node:path`; formatting relies on the platform `Intl` APIs.
-- Works with [`@wrnexus/core`](../core) — `TFunction` (the `t(key, params)` type)
-  comes from core, and the resolved translator is exposed as `ctx.t` / `ctx.lang`
-  in request handling.
-- Nested message objects are supported: keys are looked up whole first, then split
-  on `.` to walk the object tree.
+Pseudo-localization preserves interpolation placeholders and markup tags. RTL
+pseudo output uses Unicode direction controls, while runtime direction detection
+continues to derive `rtl` from Arabic and other RTL language subtags.

.publish/i18n/package.json

@@ -1,14 +1,30 @@
 {
   "name": "@wrnexus/i18n",
-  "version": "0.2.74",
+  "version": "0.8.9",
   "type": "module",
-  "description": "@wrnexus/i18n — part of the WrNexus framework.",
+  "description": "Locale loading, fallback resolution, SSR/browser translations, formatters, and WRNexusJS language components.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS.git",
+    "directory": "packages/i18n"
+  },
+  "homepage": "https://wrnexusjs.dev/packages/i18n",
+  "bugs": {
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS/issues"
+  },
+  "keywords": [
+    "wrnexus",
+    "bun",
+    "typescript",
+    "i18n"
+  ],
+  "sideEffects": false,
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "engines": {
-    "bun": ">=1.1.0"
+    "bun": ">=1.3.0"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -18,12 +34,28 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
-    }
+    },
+    "./plugin": {
+      "types": "./dist/plugin.d.ts",
+      "import": "./dist/plugin.js"
+    },
+    "./components/*": "./components/*"
   },
   "dependencies": {
-    "@wrnexus/core": "^0.2.74"
+    "@wrnexus/core": "^0.8.9",
+    "@wrnexus/plugin": "^0.8.8",
+    "@wrnexus/ui": "^0.8.12"
+  },
+  "wrnexus": {
+    "plugin": {
+      "plugin": "./dist/plugin.js",
+      "export": "default",
+      "factory": true
+    }
   },
   "files": [
-    "dist"
+    "dist",
+    "README.md",
+    "components"
   ]
 }

.publish/jwt/README.md

@@ -1,132 +0,0 @@
-# @wrnexus/jwt
-
-> Dependency-free JSON Web Tokens (HS256) via Web Crypto, plus a bearer-token auth middleware for WrNexus.
-
-Part of the **WrNexus** framework — an SSR-first, Bun-native full-stack web framework.
-
-## Overview
-
-`@wrnexus/jwt` signs and verifies stateless JSON Web Tokens using the **HS256**
-(HMAC-SHA-256) algorithm. It has no runtime dependencies — signing and
-verification are implemented directly on the standard **Web Crypto** API
-(`crypto.subtle`), which Bun provides natively. It runs server-side and pairs
-with the session-based auth in `@wrnexus/core`, giving you a stateless option
-for API and mobile clients. Reach for it when you need bearer-token auth rather
-than cookie sessions.
-
-## Installation
-
-```bash
-bun add @wrnexus/jwt
-```
-
-> Private package — the machine must be authenticated to the `wrnexus` npm org
-> (a read token in `~/.npmrc`). Requires **Bun** (Node is not supported).
-
-## API
-
-Single entry point (`@wrnexus/jwt`). All functions are async and return Promises.
-
-| Export                                  | Kind      | Description                                                     |
-| --------------------------------------- | --------- | --------------------------------------------------------------- |
-| `signJwt(payload, secret, options?)`    | function  | Sign claims into an HS256 token string.                         |
-| `verifyJwt<T>(token, secret, options?)` | function  | Verify a token and return its claims, or throw.                 |
-| `jwtAuth(options)`                      | function  | Middleware that verifies a bearer JWT and sets `ctx.user`.      |
-| `JwtError`                              | class     | Error thrown on any signature/payload/expiry failure.           |
-| `JwtClaims`                             | interface | Claims shape (`sub`, `iat`, `exp`, `nbf`, plus arbitrary keys). |
-| `SignOptions`                           | interface | Options for `signJwt`.                                          |
-| `JwtAuthOptions`                        | interface | Options for `jwtAuth`.                                          |
-
-### `signJwt(payload, secret, options?)`
-
-```ts
-function signJwt(payload: JwtClaims, secret: string, options?: SignOptions): Promise<string>;
-```
-
-Signs `payload` with `secret` using HS256 and returns the encoded token
-(`header.body.signature`). An `iat` (issued-at) claim is always added.
-
-`SignOptions`:
-
-- `expiresIn?: number` — seconds until expiry; sets the `exp` claim.
-- `now?: number` — override the issued-at time (seconds), useful for testing.
-
-### `verifyJwt<T>(token, secret, options?)`
-
-```ts
-function verifyJwt<T extends JwtClaims = JwtClaims>(
-  token: string,
-  secret: string,
-  options?: { now?: number },
-): Promise<T>;
-```
-
-Verifies the HS256 signature and returns the decoded claims typed as `T`.
-Throws `JwtError` when the token is malformed, the signature is invalid, the
-payload is not valid JSON, the token is expired (`exp`), or not yet valid
-(`nbf`). Pass `now` (seconds) to override the reference time for the `exp`/`nbf`
-checks.
-
-### `jwtAuth(options)`
-
-```ts
-function jwtAuth(options: JwtAuthOptions): Middleware;
-```
-
-Returns a WrNexus `Middleware` that reads a token, verifies it, and assigns the
-claims to `ctx.user`.
-
-`JwtAuthOptions`:
-
-- `secret: string` — the HMAC secret used to verify tokens.
-- `getToken?: (ctx: Context) => string | undefined` — how to extract the token.
-  Defaults to reading `Authorization: Bearer <token>`.
-- `required?: boolean` — when `true` (default), a missing or invalid token
-  responds with `401 { ok: false, error: "Unauthorized" }`. When `false`,
-  requests pass through and `ctx.user` is only set if a valid token is present.
-
-## Usage
-
-```ts
-import { signJwt, verifyJwt, jwtAuth, JwtError } from "@wrnexus/jwt";
-
-const secret = process.env.JWT_SECRET!;
-
-// Sign a token that expires in one hour
-const token = await signJwt({ sub: user.id, role: "admin" }, secret, {
-  expiresIn: 3600,
-});
-
-// Verify it later
-try {
-  const claims = await verifyJwt<{ sub: string; role: string }>(token, secret);
-  console.log(claims.sub, claims.role);
-} catch (err) {
-  if (err instanceof JwtError) {
-    // invalid signature, expired, malformed, etc.
-  }
-}
-```
-
-Protecting routes with the middleware:
-
-```ts
-import { jwtAuth } from "@wrnexus/jwt";
-
-// Require a valid bearer token; ctx.user holds the verified claims
-app.use(jwtAuth({ secret: process.env.JWT_SECRET! }));
-
-// Optional auth — populate ctx.user when present, but don't 401
-app.use(jwtAuth({ secret: process.env.JWT_SECRET!, required: false }));
-```
-
-## Requirements / Notes
-
-- **Bun-only.** Uses the standard Web Crypto API (`crypto.subtle.importKey`,
-  `sign`, `verify`) plus `btoa`/`atob` and `TextEncoder`/`TextDecoder` — all
-  provided by Bun. No third-party crypto dependency.
-- **Algorithm:** HS256 (HMAC with SHA-256) only. Asymmetric algorithms (RS/ES)
-  are not supported.
-- Integrates with [`@wrnexus/core`](../core) for `Context`, `Middleware`, and
-  `ctx.user`; it complements the framework's cookie/session auth with a
-  stateless bearer-token flow for API and mobile clients.

.publish/jwt/package.json

@@ -1,26 +0,0 @@
-{
-  "name": "@wrnexus/jwt",
-  "version": "0.2.74",
-  "type": "module",
-  "description": "@wrnexus/jwt — part of the WrNexus framework.",
-  "license": "MIT",
-  "main": "./dist/index.js",
-  "module": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "engines": {
-    "bun": ">=1.1.0"
-  },
-  "publishConfig": {
-    "registry": "https://registry.npmjs.org/",
-    "access": "restricted"
-  },
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    }
-  },
-  "files": [
-    "dist"
-  ]
-}

.publish/mobile/README.md

@@ -1,83 +0,0 @@
-# @wrnexus/mobile
-
-> SSR-safe access to Capacitor plugins from WRNexusJS browser code.
-
-## Overview
-
-`@wrnexus/mobile` keeps optional native imports out of server rendering while giving
-browser-owned modules one consistent registry for Capacitor plugins. During SSR,
-`mobile.isNative()` is `false` and `mobile.platform()` is `"web"`.
-
-## Installation
-
-Install a plugin through the WRNexusJS CLI so the web and native projects stay aligned:
-
-```bash
-wrnexus mobile add @capacitor/camera @capacitor/haptics
-```
-
-## Usage
-
-### Register and invoke a Capacitor plugin
-
-Import Capacitor packages only from browser-owned code, never from API routes or SSR
-helpers.
-
-```ts
-import { Camera, CameraResultType } from "@capacitor/camera";
-import { mobile } from "@wrnexus/mobile";
-
-mobile.registerPlugin("Camera", Camera);
-
-export async function takePhoto() {
-  if (!mobile.isNative()) return null;
-  return mobile.invoke("Camera", "getPhoto", {
-    quality: 85,
-    resultType: CameraResultType.Uri,
-  });
-}
-```
-
-### Provide a browser fallback
-
-`whenNative` runs the first callback only in a Capacitor WebView and can return a
-web/SSR-safe fallback everywhere else.
-
-```ts
-import { Haptics, ImpactStyle } from "@capacitor/haptics";
-import { mobile } from "@wrnexus/mobile";
-
-mobile.registerPlugin("Haptics", Haptics);
-
-export const confirmAction = () =>
-  mobile.whenNative(
-    () => mobile.invoke("Haptics", "impact", { style: ImpactStyle.Medium }),
-    () => navigator.vibrate?.(30),
-  );
-```
-
-### Read an optional plugin without throwing
-
-```ts
-import type { NetworkPlugin } from "@capacitor/network";
-import { mobile } from "@wrnexus/mobile";
-
-const network = mobile.plugin<NetworkPlugin>("Network");
-const status = network ? await network.getStatus() : { connected: true, connectionType: "unknown" };
-```
-
-## API
-
-- `registerPlugin(name, instance)` registers a browser-imported plugin.
-- `plugin(name)` returns a plugin or `undefined`; `requirePlugin(name)` throws when absent.
-- `invoke(plugin, method, options?)` calls a registered method and returns its result.
-- `whenNative(native, fallback?)` selects native behavior without breaking SSR.
-- `isNative()` and `platform()` report the current Capacitor environment.
-
-Unavailable required plugins throw `MobileUnavailableError` with an actionable message.
-
-## Requirements / Notes
-
-- Capacitor plugin imports must remain in browser-owned modules.
-- `@wrnexus/mobile` re-exports `native` from `@wrnexus/native` for applications that
-  prefer the higher-level cross-platform capability API.

.publish/mobile/package.json

@@ -1,29 +0,0 @@
-{
-  "name": "@wrnexus/mobile",
-  "version": "0.2.74",
-  "type": "module",
-  "description": "@wrnexus/mobile — part of the WrNexus framework.",
-  "license": "MIT",
-  "main": "./dist/index.js",
-  "module": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "engines": {
-    "bun": ">=1.1.0"
-  },
-  "publishConfig": {
-    "registry": "https://registry.npmjs.org/",
-    "access": "restricted"
-  },
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    }
-  },
-  "dependencies": {
-    "@wrnexus/native": "^0.2.74"
-  },
-  "files": [
-    "dist"
-  ]
-}

.publish/native/README.md

@@ -1,85 +0,0 @@
-# @wrnexus/native
-
-> Cross-platform capabilities for browsers, Capacitor WebViews, and compiled native apps.
-
-## Overview
-
-`@wrnexus/native` exposes capabilities by name so application code can ask what the
-current platform supports before presenting an action. Browser capabilities use Web
-APIs; mobile capabilities use installed Capacitor plugins. `platform()` returns
-`"server"` during SSR, `"browser"` on the web, and the Capacitor platform in a native
-WebView.
-
-## Installation
-
-```bash
-bun add @wrnexus/native
-```
-
-## Usage
-
-### Share a page when the platform supports it
-
-```ts
-import { native } from "@wrnexus/native";
-
-export async function shareCurrentPage() {
-  if (!native.supports("share")) return false;
-  await native.run("share", {
-    title: document.title,
-    url: location.href,
-  });
-  return true;
-}
-```
-
-### Register an application-specific capability
-
-`register` returns an unregister function, which is useful for tests and temporary
-feature modules.
-
-```ts
-import { native } from "@wrnexus/native";
-
-const unregister = native.register("orders.scan", {
-  browser: {
-    supported: () => typeof window !== "undefined",
-    run: async ({ orderId }: { orderId: string }) => {
-      const code = window.prompt(`Scan code for order ${orderId}`);
-      return { code };
-    },
-  },
-});
-
-const result = await native.run<{ code: string | null }>("orders.scan", { orderId: "ord_42" });
-unregister();
-```
-
-### Target browser or mobile behavior explicitly
-
-```ts
-import { native } from "@wrnexus/native";
-
-const canUseMobileCamera = native.supports("camera", "mobile");
-const position = await native.run(
-  "geolocation",
-  { enableHighAccuracy: true },
-  { target: "browser" },
-);
-```
-
-## API
-
-- `supports(name, target?)` checks availability without running the capability.
-- `run(name, options?, runOptions?)` executes it or rejects with `NativeUnavailableError`.
-- `register(name, capability)` adds or overrides a capability and returns cleanup.
-- `registered()` lists capability names; `clearRegistry()` resets the registry.
-- `isMobile()` and `platform()` report the current target safely during SSR.
-
-Built-ins include `camera`, `clipboard.write`, `share`, `geolocation`, `network`,
-`haptics`, storage, filesystem, notifications, and device information.
-
-## Requirements / Notes
-
-Use `supports()` before showing optional controls. Mobile capabilities require their
-matching Capacitor plugins to be installed and registered by the application.

.publish/native/package.json

@@ -1,34 +0,0 @@
-{
-  "name": "@wrnexus/native",
-  "version": "0.2.74",
-  "type": "module",
-  "description": "@wrnexus/native — part of the WrNexus framework.",
-  "license": "MIT",
-  "main": "./dist/index.js",
-  "module": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "engines": {
-    "bun": ">=1.1.0"
-  },
-  "publishConfig": {
-    "registry": "https://registry.npmjs.org/",
-    "access": "restricted"
-  },
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    },
-    "./browser": {
-      "types": "./dist/browser.d.ts",
-      "import": "./dist/browser.js"
-    },
-    "./mobile": {
-      "types": "./dist/mobile.d.ts",
-      "import": "./dist/mobile.js"
-    }
-  },
-  "files": [
-    "dist"
-  ]
-}

.publish/oauth/README.md

@@ -1,196 +0,0 @@
-# @wrnexus/oauth
-
-> Dependency-free OAuth 2.0 sign-in for any provider, with PKCE and presets for Google, GitHub, and Discord.
-
-Part of the **WrNexus** framework — an SSR-first, Bun-native full-stack web framework.
-
-## Overview
-
-`@wrnexus/oauth` implements the OAuth 2.0 Authorization Code flow (with PKCE) for
-server-side sign-in. It ships ready-made provider presets and a `defineProvider`
-helper for custom providers, then gives you two flow functions — `startAuth`
-(build the redirect) and `completeAuth` (exchange the code and fetch the user's
-profile). It has no runtime dependencies: it uses the platform `fetch` and
-WebCrypto only. Pairs naturally with `@wrnexus/core`'s `logIn` to establish a
-session once you have a normalized profile.
-
-## Installation
-
-```bash
-bun add @wrnexus/oauth
-```
-
-> Private package — the machine must be authenticated to the `wrnexus` npm org
-> (a read token in `~/.npmrc`). Requires **Bun** (Node is not supported).
-
-## API
-
-### Providers
-
-Each preset takes `ProviderCredentials` and returns an `OAuthProvider`.
-
-```ts
-interface ProviderCredentials {
-  clientId: string;
-  clientSecret: string;
-  scopes?: string[]; // override the preset's default scopes
-}
-```
-
-| Export                   | Default scopes               | Notes                                                              |
-| ------------------------ | ---------------------------- | ------------------------------------------------------------------ |
-| `google(creds)`          | `openid`, `email`, `profile` | Sets `access_type: offline` for refresh tokens.                    |
-| `github(creds)`          | `read:user`, `user:email`    | Maps `name` (falls back to `login`) and `avatar_url`.              |
-| `discord(creds)`         | `identify`, `email`          | Builds the avatar CDN URL from the user id + hash.                 |
-| `defineProvider(config)` | —                            | Pass a full `OAuthProvider` to define a custom OAuth 2.0 provider. |
-
-An `OAuthProvider` describes the endpoints, scopes, credentials, optional extra
-authorize params, and a `mapProfile` normalizer:
-
-```ts
-interface OAuthProvider {
-  name: string;
-  authorizeUrl: string;
-  tokenUrl: string;
-  userInfoUrl: string;
-  scopes: string[];
-  clientId: string;
-  clientSecret: string;
-  authorizeParams?: Record<string, string>; // e.g. access_type, prompt
-  mapProfile: (raw: Record<string, unknown>) => OAuthProfile;
-}
-```
-
-### Flow
-
-#### `startAuth(provider, options): Promise<StartAuthResult>`
-
-Builds the authorize redirect URL with a generated PKCE challenge and CSRF
-`state`. Store the returned `state` and `verifier` (session/cookie), then 302 the
-user to `url`.
-
-```ts
-interface StartAuthOptions {
-  redirectUri: string;
-  state?: string; // reuse a state instead of generating one
-  params?: Record<string, string>; // extra authorize params, merged last
-}
-
-interface StartAuthResult {
-  url: string; // authorize URL to redirect to
-  state: string; // CSRF state — verify on callback
-  verifier: string; // PKCE code verifier — pass to completeAuth
-}
-```
-
-#### `completeAuth(provider, options): Promise<{ tokens, profile }>`
-
-On the callback: exchanges the authorization `code` for tokens, then fetches and
-normalizes the user profile. Convenience wrapper over `exchangeCode` +
-`fetchProfile`.
-
-```ts
-interface CompleteAuthOptions {
-  code: string;
-  redirectUri: string;
-  verifier?: string; // the PKCE verifier from startAuth
-  fetch?: typeof fetch; // inject a fetch implementation (tests)
-}
-```
-
-#### Lower-level helpers
-
-| Export                                   | Signature                 | Purpose                                                         |
-| ---------------------------------------- | ------------------------- | --------------------------------------------------------------- |
-| `exchangeCode(provider, options)`        | `→ Promise<OAuthTokens>`  | Exchange an authorization code for tokens.                      |
-| `fetchProfile(provider, tokens, fetch?)` | `→ Promise<OAuthProfile>` | Fetch + normalize the user's profile.                           |
-| `randomToken(bytes?)`                    | `→ string`                | Random URL-safe token (default 32 bytes) for `state`/verifiers. |
-
-### Types
-
-```ts
-interface OAuthTokens {
-  access_token: string;
-  token_type?: string;
-  refresh_token?: string;
-  expires_in?: number;
-  id_token?: string;
-  scope?: string;
-}
-
-interface OAuthProfile {
-  id: string;
-  email?: string;
-  name?: string;
-  avatar?: string;
-  raw: Record<string, unknown>;
-}
-```
-
-## Usage
-
-```ts
-import { google, startAuth, completeAuth } from "@wrnexus/oauth";
-import { logIn } from "@wrnexus/core";
-
-const provider = google({
-  clientId: process.env.GOOGLE_CLIENT_ID!,
-  clientSecret: process.env.GOOGLE_CLIENT_SECRET!,
-});
-
-const redirectUri = "https://example.com/auth/callback";
-
-// 1. Kick off sign-in: redirect the user to the provider.
-async function beginLogin(ctx) {
-  const { url, state, verifier } = await startAuth(provider, { redirectUri });
-  // Persist state + verifier in the session, then redirect.
-  ctx.session.set("oauth_state", state);
-  ctx.session.set("oauth_verifier", verifier);
-  return Response.redirect(url, 302);
-}
-
-// 2. Handle the callback.
-async function handleCallback(ctx, code: string, state: string) {
-  if (state !== ctx.session.get("oauth_state")) throw new Error("bad state");
-
-  const { profile } = await completeAuth(provider, {
-    code,
-    redirectUri,
-    verifier: ctx.session.get("oauth_verifier"),
-  });
-
-  logIn(ctx, { id: profile.id, email: profile.email });
-}
-```
-
-Custom provider with `defineProvider`:
-
-```ts
-import { defineProvider, startAuth } from "@wrnexus/oauth";
-
-const gitlab = defineProvider({
-  name: "gitlab",
-  authorizeUrl: "https://gitlab.com/oauth/authorize",
-  tokenUrl: "https://gitlab.com/oauth/token",
-  userInfoUrl: "https://gitlab.com/api/v4/user",
-  scopes: ["read_user"],
-  clientId: process.env.GITLAB_CLIENT_ID!,
-  clientSecret: process.env.GITLAB_CLIENT_SECRET!,
-  mapProfile: (raw) => ({
-    id: String(raw.id),
-    email: raw.email as string | undefined,
-    name: raw.name as string | undefined,
-    avatar: raw.avatar_url as string | undefined,
-    raw,
-  }),
-});
-```
-
-## Requirements / Notes
-
-- **Bun-only.** Relies on the global `fetch` and WebCrypto (`crypto.getRandomValues`,
-  `crypto.subtle.digest`) — no other runtime dependencies.
-- The flow is stateless by design: you are responsible for storing `state` and
-  `verifier` between `startAuth` and `completeAuth` (session or signed cookie).
-- Pairs with [`@wrnexus/core`](../core) — feed the normalized `OAuthProfile` into
-  `logIn` to establish a session.

.publish/oauth/package.json

@@ -1,26 +0,0 @@
-{
-  "name": "@wrnexus/oauth",
-  "version": "0.2.74",
-  "type": "module",
-  "description": "@wrnexus/oauth — part of the WrNexus framework.",
-  "license": "MIT",
-  "main": "./dist/index.js",
-  "module": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "engines": {
-    "bun": ">=1.1.0"
-  },
-  "publishConfig": {
-    "registry": "https://registry.npmjs.org/",
-    "access": "restricted"
-  },
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    }
-  },
-  "files": [
-    "dist"
-  ]
-}

.publish/pubsub/README.md

@@ -31,13 +31,15 @@ Creates a bus over a driver. Defaults to `memoryDriver()` (in-process).
 interface PubSub {
   publish<T = unknown>(topic: string, message: T): Promise<void>;
   subscribe<T = unknown>(pattern: string, handler: Handler<T>): () => void;
+  close(): Promise<void>;
 }
 
 type Handler<T = unknown> = (message: T, topic: string) => void | Promise<void>;
 ```
 
-- `publish(topic, message)` — resolves once the driver has dispatched the message.
+- `publish(topic, message)` — resolves once the driver and in-memory async handlers finish.
 - `subscribe(pattern, handler)` — returns an unsubscribe function.
+- `close()` — idempotently rejects new work, clears local subscriptions, and closes the driver.
 
 ### Pattern matching
 
@@ -67,7 +69,7 @@ then `redis://localhost:6379`. The URL may carry a password and a database index
 (e.g. `redis://:secret@host:6379/2`).
 
 ```ts
-function redisDriver(url?: string): PubSubDriver & { close(): void };
+function redisDriver(url?: string, options?: RedisDriverOptions): PubSubDriver & { close(): void };
 ```
 
 - Exact topics use Redis `SUBSCRIBE`; wildcard patterns (`ns:*`, `*`) use
@@ -75,6 +77,9 @@ function redisDriver(url?: string): PubSubDriver & { close(): void };
 - Messages are JSON-stringified on publish and `JSON.parse`d on receipt; a payload
   that isn't valid JSON is delivered as the raw string.
 - `close()` tears down both the subscriber and publisher connections.
+- Lost sockets reconnect with bounded exponential backoff and active subscriptions
+  are replayed. `maxPending` bounds unavailable-connection writes (default 1000);
+  `reconnectDelayMs` and `reconnectMaxDelayMs` tune recovery (100ms/5000ms).
 
 ### RESP codec (internal)
 
@@ -115,8 +120,8 @@ bus.subscribe("order:*", (msg, topic) => {
 
 await bus.publish("order:created", { id: 7 });
 
-// on shutdown
-driver.close();
+// on shutdown (also closes the driver)
+await bus.close();
 ```
 
 ## Requirements / Notes

.publish/pubsub/package.json

@@ -1,14 +1,30 @@
 {
   "name": "@wrnexus/pubsub",
-  "version": "0.2.74",
+  "version": "0.8.9",
   "type": "module",
   "description": "@wrnexus/pubsub — part of the WrNexus framework.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS.git",
+    "directory": "packages/pubsub"
+  },
+  "homepage": "https://wrnexusjs.dev/packages/pubsub",
+  "bugs": {
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS/issues"
+  },
+  "keywords": [
+    "wrnexus",
+    "bun",
+    "typescript",
+    "pubsub"
+  ],
+  "sideEffects": false,
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "engines": {
-    "bun": ">=1.1.0"
+    "bun": ">=1.3.0"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -19,12 +35,21 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
     },
+    "./brokers": {
+      "types": "./dist/brokers.d.ts",
+      "import": "./dist/brokers.js"
+    },
     "./redis": {
       "types": "./dist/redis.d.ts",
       "import": "./dist/redis.js"
     }
   },
+  "dependencies": {
+    "@wrnexus/core": "^0.8.9",
+    "@wrnexus/rpc": "^0.8.9"
+  },
   "files": [
-    "dist"
+    "dist",
+    "README.md"
   ]
 }

.publish/queue/README.md

@@ -1,164 +0,0 @@
-# @wrnexus/queue
-
-> A background job queue with delays, retries + exponential backoff, recurring jobs, and concurrent workers.
-
-Part of the **WrNexus** framework — an SSR-first, Bun-native full-stack web framework.
-
-## Overview
-
-`@wrnexus/queue` is a server-side in-process job queue. You register named
-workers, enqueue jobs (optionally delayed or recurring), and let the queue poll
-and run them on a timer — with per-job retry limits and doubling backoff between
-attempts. The default store lives in memory; the design allows a pluggable driver
-to back it with Redis/SQL for durability across restarts. Reach for it when you
-need to defer work (emails, webhooks, cleanup) off the request path without a
-heavyweight external broker. Tests can drive it deterministically via `drain()`.
-
-## Installation
-
-```bash
-bun add @wrnexus/queue
-```
-
-> Private package — the machine must be authenticated to the `wrnexus` npm org
-> (a read token in `~/.npmrc`). Requires **Bun** (Node is not supported).
-
-## API
-
-The package exports a single factory plus its supporting types.
-
-### `createQueue(options?): Queue`
-
-Creates a new queue instance.
-
-```ts
-function createQueue(options?: QueueOptions): Queue;
-```
-
-#### `QueueOptions`
-
-| Option        | Type                                 | Default    | Description                                              |
-| ------------- | ------------------------------------ | ---------- | -------------------------------------------------------- |
-| `maxAttempts` | `number`                             | `3`        | Default max attempts per job before it is dead-lettered. |
-| `backoffMs`   | `number`                             | `1000`     | Base retry backoff in ms; doubles per attempt.           |
-| `pollMs`      | `number`                             | `250`      | Poll interval used once `start()` is called (ms).        |
-| `onFailed`    | `(job: Job, error: unknown) => void` | —          | Called when a job exhausts its attempts.                 |
-| `now`         | `() => number`                       | `Date.now` | Clock injection for deterministic tests.                 |
-
-### `Queue`
-
-The object returned by `createQueue`.
-
-| Method    | Signature                                                      | Description                                                    |
-| --------- | -------------------------------------------------------------- | -------------------------------------------------------------- |
-| `add`     | `add<T>(name, data: T, options?: AddOptions): Promise<Job<T>>` | Enqueue a job under a worker name. Returns the created job.    |
-| `process` | `process<T>(name, handler: JobHandler<T>): void`               | Register the worker that runs jobs of the given name.          |
-| `drain`   | `drain(now?: number): Promise<number>`                         | Run every job whose `runAt ≤ now`, once. Returns how many ran. |
-| `start`   | `start(): void`                                                | Begin polling every `pollMs`. No-op if already started.        |
-| `stop`    | `stop(): void`                                                 | Stop the poll timer.                                           |
-| `size`    | `size(): number`                                               | Number of jobs currently queued.                               |
-
-#### `AddOptions`
-
-| Option        | Type     | Description                                                                |
-| ------------- | -------- | -------------------------------------------------------------------------- |
-| `delayMs`     | `number` | Delay before the job becomes runnable (ms).                                |
-| `maxAttempts` | `number` | Max attempts before dead-lettering. Defaults to the queue's `maxAttempts`. |
-| `repeat`      | `number` | Re-enqueue this job this many ms after each successful run (recurring).    |
-
-#### `JobHandler<T>`
-
-```ts
-type JobHandler<T = unknown> = (job: Job<T>) => void | Promise<void>;
-```
-
-#### `Job<T>`
-
-```ts
-interface Job<T = unknown> {
-  id: string; // e.g. "job_1"
-  name: string;
-  data: T;
-  attempts: number;
-  maxAttempts: number;
-  runAt: number; // epoch ms; job runs when now ≥ runAt
-  repeat?: number; // if set, re-enqueue this many ms after each success
-}
-```
-
-## Usage
-
-Register workers, enqueue jobs, then start the poller:
-
-```ts
-import { createQueue } from "@wrnexus/queue";
-
-const queue = createQueue({ maxAttempts: 3, backoffMs: 1000 });
-
-// Register a worker for the "email" job name.
-queue.process<{ to: string }>("email", async (job) => {
-  await send(job.data.to);
-});
-
-// Enqueue a delayed job with up to 3 attempts.
-await queue.add("email", { to: "a@b.com" }, { delayMs: 5000, maxAttempts: 3 });
-
-queue.start(); // begin polling; queue.stop() to halt
-```
-
-### Recurring jobs
-
-Pass `repeat` to re-enqueue a job a fixed interval after each successful run:
-
-```ts
-queue.process("heartbeat", async () => ping());
-await queue.add("heartbeat", {}, { repeat: 60_000 }); // runs ~every minute
-```
-
-### Handling permanent failures
-
-When a job's `attempts` reaches `maxAttempts`, it is dropped and `onFailed`
-fires instead of retrying:
-
-```ts
-const queue = createQueue({
-  onFailed: (job, error) => {
-    console.error(`job ${job.id} (${job.name}) gave up`, error);
-  },
-});
-```
-
-### Deterministic testing
-
-Instead of `start()`, inject a clock and drive the queue with `drain()`:
-
-```ts
-let clock = 0;
-const queue = createQueue({ now: () => clock });
-
-queue.process("task", async () => {
-  /* ... */
-});
-await queue.add("task", {}, { delayMs: 5000 });
-
-clock = 5000;
-const ran = await queue.drain(); // => 1
-```
-
-## Retry & backoff behavior
-
-- On a thrown handler error, the job is retried while `attempts < maxAttempts`.
-- The next `runAt` is set to `now + backoffMs * 2^(attempts - 1)` (exponential
-  backoff): with `backoffMs: 1000` the delays are 1s, 2s, 4s, …
-- A job whose worker name has no registered handler stays queued until one is
-  registered (it is not counted as runnable by `drain`).
-- `drain` is re-entrant-safe: overlapping calls are skipped while one is running.
-
-## Requirements / Notes
-
-- **Bun-only** runtime (Node is not supported), consistent with the rest of the
-  WrNexus framework. The queue itself relies only on standard timers
-  (`setInterval`/`clearInterval`) and has no runtime dependencies.
-- The default store is in-process, so queued jobs do not survive a restart; a
-  pluggable driver is intended for backing it with Redis/SQL for durability.
-- Works alongside `@wrnexus/core` for offloading work from the request path.

.publish/queue/package.json

@@ -1,26 +0,0 @@
-{
-  "name": "@wrnexus/queue",
-  "version": "0.2.74",
-  "type": "module",
-  "description": "@wrnexus/queue — part of the WrNexus framework.",
-  "license": "MIT",
-  "main": "./dist/index.js",
-  "module": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "engines": {
-    "bun": ">=1.1.0"
-  },
-  "publishConfig": {
-    "registry": "https://registry.npmjs.org/",
-    "access": "restricted"
-  },
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    }
-  },
-  "files": [
-    "dist"
-  ]
-}

.publish/reactive/README.md

@@ -1,99 +0,0 @@
-# @wrnexus/reactive
-
-> Tiny, type-safe reactive primitives (signals) with zero dependencies.
-
-Part of the **WrNexus** framework — an SSR-first, Bun-native full-stack web framework.
-
-## Overview
-
-`@wrnexus/reactive` is the seed of WrNexus's reactivity layer: a minimal `signal`
-primitive that holds a value, notifies subscribers when it changes, and hands back
-an unsubscribe function. It is deliberately small and framework-agnostic — it powers
-nothing on its own, but is shaped so client islands (and later the `.wrn` compiler's
-`state` blocks) can build reactive bindings on top of it. Reach for it when you need
-observable state without pulling in a full reactivity library.
-
-## Installation
-
-```bash
-bun add @wrnexus/reactive
-```
-
-> Private package — the machine must be authenticated to the `wrnexus` npm org
-> (a read token in `~/.npmrc`). Requires **Bun** (Node is not supported).
-
-## API
-
-The package has a single entry point (`.`) exporting one function and three types.
-
-### `signal<T>(initial: T): Signal<T>`
-
-Creates a reactive signal seeded with `initial`. Returns a `Signal<T>`:
-
-| Member      | Signature                          | Description                                                                                              |
-| ----------- | ---------------------------------- | -------------------------------------------------------------------------------------------------------- |
-| `get`       | `(): T`                            | Read the current value.                                                                                  |
-| `set`       | `(next: T): void`                  | Write a new value. Subscribers run **only when the value actually changes** (compared with `Object.is`). |
-| `update`    | `(fn: (current: T) => T): void`    | Apply a function to the current value; equivalent to `set(fn(get()))`.                                   |
-| `subscribe` | `(fn: Subscriber<T>): Unsubscribe` | Register a subscriber; returns a function that removes it.                                               |
-
-### Types
-
-```ts
-type Subscriber<T> = (value: T) => void;
-type Unsubscribe = () => void;
-
-interface Signal<T> {
-  get(): T;
-  set(next: T): void;
-  update(fn: (current: T) => T): void;
-  subscribe(fn: Subscriber<T>): Unsubscribe;
-}
-```
-
-Notes on semantics:
-
-- **No-op updates are skipped.** `set` compares the incoming value to the current
-  one with `Object.is`; identical values do not notify subscribers.
-- **Safe unsubscribe during notification.** Subscribers are iterated over a copy of
-  the subscriber set, so a subscriber may call its own (or another's) unsubscribe
-  while a notification is in flight.
-
-## Usage
-
-```ts
-import { signal } from "@wrnexus/reactive";
-
-const count = signal(0);
-
-count.get(); // 0
-
-// Subscribe; the returned function unsubscribes.
-const off = count.subscribe((value) => {
-  console.log("count is now", value);
-});
-
-count.set(1); // logs: count is now 1
-count.set(1); // no-op — value unchanged, no notification
-count.update((n) => n + 1); // logs: count is now 2
-
-off(); // stop listening
-count.set(3); // nothing logged
-```
-
-Typed signals infer `T` from the initial value, or can be annotated explicitly:
-
-```ts
-import { signal, type Signal } from "@wrnexus/reactive";
-
-const user: Signal<{ name: string } | null> = signal(null);
-user.set({ name: "Ada" });
-```
-
-## Requirements / Notes
-
-- **Bun-only.** Distributed as TypeScript source (`main`/`exports` point at
-  `src/index.ts`); consume it under Bun, which runs `.ts` directly.
-- **Zero dependencies.** The only runtime API used is the standard `Object.is`.
-- Foundational primitive for WrNexus client islands and the forthcoming `.wrn`
-  compiler `state` blocks.

.publish/reactive/package.json

@@ -1,26 +0,0 @@
-{
-  "name": "@wrnexus/reactive",
-  "version": "0.2.74",
-  "type": "module",
-  "description": "@wrnexus/reactive — part of the WrNexus framework.",
-  "license": "MIT",
-  "main": "./dist/index.js",
-  "module": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "engines": {
-    "bun": ">=1.1.0"
-  },
-  "publishConfig": {
-    "registry": "https://registry.npmjs.org/",
-    "access": "restricted"
-  },
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    }
-  },
-  "files": [
-    "dist"
-  ]
-}

.publish/router/package.json

@@ -1,14 +1,30 @@
 {
   "name": "@wrnexus/router",
-  "version": "0.2.74",
+  "version": "0.8.9",
   "type": "module",
   "description": "@wrnexus/router — part of the WrNexus framework.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS.git",
+    "directory": "packages/router"
+  },
+  "homepage": "https://wrnexusjs.dev/packages/router",
+  "bugs": {
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS/issues"
+  },
+  "keywords": [
+    "wrnexus",
+    "bun",
+    "typescript",
+    "router"
+  ],
+  "sideEffects": false,
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "engines": {
-    "bun": ">=1.1.0"
+    "bun": ">=1.3.0"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -21,10 +37,11 @@
     }
   },
   "dependencies": {
-    "@wrnexus/compiler": "^0.2.74",
-    "@wrnexus/core": "^0.2.74"
+    "@wrnexus/compiler": "^0.8.9",
+    "@wrnexus/core": "^0.8.9"
   },
   "files": [
-    "dist"
+    "dist",
+    "README.md"
   ]
 }

.publish/ssr/README.md

@@ -89,7 +89,7 @@ const html = renderDocument({
   },
   url: new URL("https://acme.example/about"),
   body: "<h1>About Us</h1>",
-  scripts: ["/_wire/runtime.js", "/_wire/islands/about.js"],
+  scripts: ["/_wrn/runtime.js", "/_wrn/islands/about.js"],
   htmlAttrs: ' data-theme="dark"',
 });
 

.publish/ssr/package.json

@@ -1,14 +1,30 @@
 {
   "name": "@wrnexus/ssr",
-  "version": "0.2.74",
+  "version": "0.8.9",
   "type": "module",
   "description": "@wrnexus/ssr — part of the WrNexus framework.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS.git",
+    "directory": "packages/ssr"
+  },
+  "homepage": "https://wrnexusjs.dev/packages/ssr",
+  "bugs": {
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS/issues"
+  },
+  "keywords": [
+    "wrnexus",
+    "bun",
+    "typescript",
+    "ssr"
+  ],
+  "sideEffects": false,
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "engines": {
-    "bun": ">=1.1.0"
+    "bun": ">=1.3.0"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -18,12 +34,23 @@
     ".": {
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
+    },
+    "./rpc": {
+      "types": "./dist/rpc.d.ts",
+      "import": "./dist/rpc.js"
+    },
+    "./store-context": {
+      "types": "./dist/store-context.d.ts",
+      "import": "./dist/store-context.js"
     }
   },
   "dependencies": {
-    "@wrnexus/core": "^0.2.74"
+    "@wrnexus/core": "^0.8.9",
+    "@wrnexus/store": "^0.8.8",
+    "@wrnexus/security": "^0.8.8"
   },
   "files": [
-    "dist"
+    "dist",
+    "README.md"
   ]
 }

.publish/styles/README.md

@@ -1,6 +1,27 @@
 # @wrnexus/styles
 
-> Global CSS bundling, the `--wire-*` design-token theme system, and the `wrnexus.config.ts` app-config loader for WrNexus apps.
+## Reusable layers and presets
+
+Compose local or package foundations in order; later layers override earlier
+ones and the application has final base-config precedence:
+
+```ts
+export default defineConfig({
+  extends: ["@workroot/wrnexus-enterprise", "./layers/company"],
+  profiles: { production: { port: 8080 } },
+});
+```
+
+A directory layer exports `wrnexus.layer.ts` (JavaScript/MJS are supported).
+A package can provide that conventional file or declare
+`wrnexus.layer` in its `package.json`. Layers may extend other layers and carry
+the complete app configuration, including plugins that contribute layouts,
+components, routes, middleware, and migrations. `plugins` and `head` compose;
+other arrays intentionally replace earlier values. Cycles and missing/invalid
+entries fail with stable `WRN-CONFIG-LAYER-*` diagnostics. `wrnexus config
+--explain` lists every resolved layer source.
+
+> Global CSS bundling, the `--wrn-*` design-token theme system, and the `wrnexus.config.ts` app-config loader for WrNexus apps.
 
 Part of the **WrNexus** framework — an SSR-first, Bun-native full-stack web framework.
 
@@ -9,7 +30,7 @@ Part of the **WrNexus** framework — an SSR-first, Bun-native full-stack web fr
 This package owns three server-side concerns that shape every page a WrNexus app renders:
 
 1. **Global stylesheet pipeline** — finds `app/styles/global.css` (or aggregates `app/styles/*.css`), bundles it with Bun's CSS bundler (which resolves `@import`, including from `node_modules`), and produces one stylesheet that is `<link>`ed into every page's `<head>`. Because it is a plain global sheet, it styles server-rendered markup and hydrated client islands identically. A custom `process` hook lets you swap in Tailwind / PostCSS / Sass.
-2. **Theme system** — design tokens exposed as CSS custom properties (`--wire-<key>`), with built-in `light`/`dark` sets, deep-merged user overrides, an SSR `<html data-theme>` render (no flash), and a tiny client runtime to toggle/persist the choice.
+2. **Theme system** — design tokens exposed as CSS custom properties (`--wrn-<key>`), with built-in `light`/`dark` sets, deep-merged user overrides, an SSR `<html data-theme>` render (no flash), and a tiny client runtime to toggle/persist the choice.
 3. **App config** — loads `wrnexus.config.ts` (the `AppConfig` type), applies named profile overrides, and loads the `.env` cascade.
 
 It runs server-side / at build time. Reach for it when configuring an app, defining themes, or customising how global CSS is produced.
@@ -90,7 +111,7 @@ interface StyleProcessContext {
 | Export               | Type / Signature                                                     | Purpose                                                                                                                                    |
 | -------------------- | -------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------ |
 | `DEFAULT_THEMES`     | `Record<string, ThemeTokens>`                                        | Built-in `light` and `dark` token maps.                                                                                                    |
-| `THEME_COOKIE`       | `"wire-theme"`                                                       | Cookie the resolved theme is read from / persisted to.                                                                                     |
+| `THEME_COOKIE`       | `"wrn-theme"`                                                        | Cookie the resolved theme is read from / persisted to.                                                                                     |
 | `THEME_CSS_HREF`     | `"/__wrnexus/theme.css"`                                             | URL the generated theme stylesheet is served at.                                                                                           |
 | `THEME_JS_HREF`      | `"/__wrnexus/theme.js"`                                              | URL the client theme runtime is served at.                                                                                                 |
 | `resolveThemeConfig` | `(config?: ThemeConfig) => ResolvedTheme`                            | Deep-merge the user's `theme` config over the defaults; pick the default theme (config's `default` if valid, else `dark`, else the first). |
@@ -98,7 +119,7 @@ interface StyleProcessContext {
 | `renderThemeCss`     | `(theme: ResolvedTheme) => string`                                   | Generate the theme stylesheet: a `:root{…}` default plus one `[data-theme="<name>"]{…}` block per theme.                                   |
 | `renderThemeRuntime` | `(theme: ResolvedTheme) => string`                                   | Generate the client runtime (see below).                                                                                                   |
 
-Tokens are emitted as `--wire-<key>` custom properties, **except** the reserved key `color-scheme`, which is emitted as the native `color-scheme` CSS property so form controls and scrollbars match the theme.
+Tokens are emitted as `--wrn-<key>` custom properties, **except** the reserved key `color-scheme`, which is emitted as the native `color-scheme` CSS property so form controls and scrollbars match the theme.
 
 `ThemeConfig` / `ThemeTokens` / `ResolvedTheme`:
 
@@ -143,7 +164,7 @@ theme: {
 }
 ```
 
-The client runtime (`renderThemeRuntime`) exposes `window.wireTheme` with `{ get, set, toggle, bind, themes }`, wires up any `[data-wire-theme-toggle]` and `[data-wire-theme-set]` elements on load, and persists the choice to the `wire-theme` cookie (`max-age` 1 year, `samesite=lax`). `toggle()` cycles through the configured theme names in order.
+The client runtime (`renderThemeRuntime`) exposes `window.wrnTheme` with `{ get, set, toggle, bind, themes }`, connects up any `[data-wrn-theme-toggle]` and `[data-wrn-theme-set]` elements on load, and persists the choice to the `wrn-theme` cookie (`max-age` 1 year, `samesite=lax`). `toggle()` cycles through the configured theme names in order.
 
 ## Usage
 
@@ -231,17 +252,17 @@ In templates, consume tokens via the custom properties:
 
 ```css
 .card {
-  background: var(--wire-color-surface);
-  color: var(--wire-color-text);
-  border: 1px solid var(--wire-color-border);
-  border-radius: var(--wire-radius);
-  box-shadow: var(--wire-shadow-1);
+  background: var(--wrn-color-surface);
+  color: var(--wrn-color-text);
+  border: 1px solid var(--wrn-color-border);
+  border-radius: var(--wrn-radius);
+  box-shadow: var(--wrn-shadow-1);
 }
 ```
 
 ```html
-<button data-wire-theme-toggle>Toggle theme</button>
-<button data-wire-theme-set="brand">Brand theme</button>
+<button data-wrn-theme-toggle>Toggle theme</button>
+<button data-wrn-theme-set="brand">Brand theme</button>
 ```
 
 ## Requirements / Notes
@@ -249,4 +270,4 @@ In templates, consume tokens via the custom properties:
 - **Bun-only.** `bundleCss` uses `Bun.build`'s CSS bundler for `@import` resolution, nesting, and minification. Node is not supported.
 - Config and env loading use `node:fs` / `node:path` / `node:url` and read from `process.env`.
 - Peer package: `@wrnexus/core` supplies the `SeoConfig` and `SecurityConfig` types referenced by `AppConfig`.
-- The bundled global stylesheet, the theme stylesheet (`THEME_CSS_HREF`), and the theme runtime (`THEME_JS_HREF`) are wired into pages by the framework's server; this package only produces their contents.
+- The bundled global stylesheet, the theme stylesheet (`THEME_CSS_HREF`), and the theme runtime (`THEME_JS_HREF`) are connected into pages by the framework's server; this package only produces their contents.

.publish/styles/package.json

@@ -1,14 +1,30 @@
 {
   "name": "@wrnexus/styles",
-  "version": "0.2.74",
+  "version": "0.8.10",
   "type": "module",
   "description": "@wrnexus/styles — part of the WrNexus framework.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS.git",
+    "directory": "packages/styles"
+  },
+  "homepage": "https://wrnexusjs.dev/packages/styles",
+  "bugs": {
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS/issues"
+  },
+  "keywords": [
+    "wrnexus",
+    "bun",
+    "typescript",
+    "styles"
+  ],
+  "sideEffects": false,
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "engines": {
-    "bun": ">=1.1.0"
+    "bun": ">=1.3.0"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -21,9 +37,12 @@
     }
   },
   "dependencies": {
-    "@wrnexus/uploader": "^0.2.74"
+    "@wrnexus/uploader": "^0.8.9",
+    "@wrnexus/core": "^0.8.9",
+    "@wrnexus/plugin": "^0.8.8"
   },
   "files": [
-    "dist"
+    "dist",
+    "README.md"
   ]
 }

.publish/test/README.md

@@ -103,6 +103,22 @@ Remember to `await app.close()` when done.
 
 ## Usage
 
+The CLI supports focused suites by file or directory convention:
+
+```bash
+wrnexus test unit                 # *.unit.test.ts or test/unit/**
+wrnexus test component            # *.component.test.ts or test/component/**
+wrnexus test api                  # *.api.test.ts or test/api/**
+wrnexus test accessibility        # *.a11y.test.ts / *.accessibility.test.ts
+wrnexus test performance          # *.performance.test.ts / *.benchmark.test.ts
+wrnexus test browser              # Playwright project when configured
+wrnexus test visual               # Playwright tests tagged @visual
+```
+
+Pass the application directory after the level, for example
+`wrnexus test component examples/basic-app`. A focused command fails clearly when no matching
+suite exists instead of silently running unrelated tests.
+
 ```ts
 import { test, expect, renderComponent, mountHtml, createHarness } from "@wrnexus/test";
 

.publish/test/package.json

@@ -1,14 +1,30 @@
 {
   "name": "@wrnexus/test",
-  "version": "0.2.74",
+  "version": "0.8.9",
   "type": "module",
   "description": "@wrnexus/test — part of the WrNexus framework.",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS.git",
+    "directory": "packages/test"
+  },
+  "homepage": "https://wrnexusjs.dev/packages/test",
+  "bugs": {
+    "url": "https://git.workroot.in/WorkRoot/WRNexusJS/issues"
+  },
+  "keywords": [
+    "wrnexus",
+    "bun",
+    "typescript",
+    "test"
+  ],
+  "sideEffects": false,
   "main": "./dist/index.js",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "engines": {
-    "bun": ">=1.1.0"
+    "bun": ">=1.3.0"
   },
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",
@@ -21,6 +37,7 @@
     }
   },
   "files": [
-    "dist"
+    "dist",
+    "README.md"
   ]
 }

.publish/tracking/README.md

@@ -1,128 +0,0 @@
-# @wrnexus/tracking
-
-> Error tracking for WrNexus apps: capture exceptions manually or via middleware and fan them out to pluggable sinks.
-
-Part of the **WrNexus** framework — an SSR-first, Bun-native full-stack web framework.
-
-## Overview
-
-`@wrnexus/tracking` is a small, server-side error-capture layer. You create a
-tracker with one or more **sinks**, then feed it errors — either manually with
-`tracker.capture(err, context)` or automatically by mounting `tracker.middleware()`
-in your request pipeline. A `consoleSink` is included; forwarding to Sentry,
-Datadog, or any other backend is just a matter of writing a tiny sink. Reach for
-it when you want a single, sink-agnostic place to route application errors. Sinks
-run best-effort — a throwing sink never breaks the request.
-
-## Installation
-
-```bash
-bun add @wrnexus/tracking
-```
-
-> Private package — the machine must be authenticated to the `wrnexus` npm org
-> (a read token in `~/.npmrc`). Requires **Bun** (Node is not supported).
-
-## API
-
-### `createTracker(options?): Tracker`
-
-Creates a tracker. `TrackerOptions`:
-
-| Option       | Type                                        | Description                                                                 |
-| ------------ | ------------------------------------------- | --------------------------------------------------------------------------- |
-| `sinks`      | `ErrorSink[]`                               | Initial sinks to fan events out to. Defaults to `[]`.                       |
-| `now`        | `() => number`                              | Clock used for `event.timestamp` (epoch ms). Defaults to `Date.now`.        |
-| `beforeSend` | `(event: ErrorEvent) => ErrorEvent \| null` | Scrub/enrich an event before it reaches any sink. Return `null` to drop it. |
-
-The returned `Tracker`:
-
-| Member       | Signature                                                              | Description                                                                                                                                                                          |
-| ------------ | ---------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
-| `capture`    | `(error: unknown, context?: Record<string, unknown>) => Promise<void>` | Normalizes any thrown value into an `Error`, builds an `ErrorEvent`, runs `beforeSend`, then dispatches to all sinks. Non-`Error` values are wrapped in an `Error` named `NonError`. |
-| `addSink`    | `(sink: ErrorSink) => void`                                            | Registers an additional sink at runtime.                                                                                                                                             |
-| `middleware` | `() => Middleware`                                                     | Returns a WrNexus `Middleware` that captures any error thrown downstream, then re-throws it so the framework's error handler still produces the response.                            |
-
-The middleware attaches this context to captured events:
-
-```ts
-{ method: ctx.req.method, path: ctx.url.pathname, requestId: ctx.locals.requestId }
-```
-
-### `consoleSink: ErrorSink`
-
-A built-in sink that logs a compact one-line message via `console.error`, e.g.
-`[error] TypeError: cannot read x {"userId":42}`.
-
-### Types
-
-```ts
-interface ErrorEvent {
-  error: Error;
-  context: Record<string, unknown>; // request info, user id, tags…
-  timestamp: number; // epoch ms
-}
-
-interface ErrorSink {
-  name?: string;
-  capture(event: ErrorEvent): void | Promise<void>;
-}
-```
-
-## Usage
-
-Manual capture:
-
-```ts
-import { createTracker, consoleSink } from "@wrnexus/tracking";
-
-const tracker = createTracker({ sinks: [consoleSink] });
-
-try {
-  await doWork();
-} catch (err) {
-  await tracker.capture(err, { userId: 42, op: "doWork" });
-  throw err;
-}
-```
-
-As request middleware:
-
-```ts
-import { createTracker, consoleSink } from "@wrnexus/tracking";
-
-const tracker = createTracker({ sinks: [consoleSink] });
-
-app.use(tracker.middleware()); // captures + re-throws downstream errors
-```
-
-A custom sink with `beforeSend` scrubbing:
-
-```ts
-import { createTracker, type ErrorSink } from "@wrnexus/tracking";
-
-const sentrySink: ErrorSink = {
-  name: "sentry",
-  async capture(event) {
-    await Sentry.captureException(event.error, { extra: event.context });
-  },
-};
-
-const tracker = createTracker({
-  sinks: [sentrySink],
-  beforeSend(event) {
-    delete event.context.password; // scrub secrets
-    return event; // return null to drop the event entirely
-  },
-});
-
-tracker.addSink(anotherSink); // add more sinks later
-```
-
-## Requirements / Notes
-
-- Runs on **Bun** only (Node is not supported).
-- Peer package: [`@wrnexus/core`](../core) — the `Context` and `Middleware` types
-  used by `tracker.middleware()` come from there.
-- Sink dispatch is fire-and-forget-safe: all sinks run via `Promise.all`, and a
-  sink that throws is swallowed so it can never break the app.

.publish/tracking/package.json

@@ -1,26 +0,0 @@
-{
-  "name": "@wrnexus/tracking",
-  "version": "0.2.74",
-  "type": "module",
-  "description": "@wrnexus/tracking — part of the WrNexus framework.",
-  "license": "MIT",
-  "main": "./dist/index.js",
-  "module": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "engines": {
-    "bun": ">=1.1.0"
-  },
-  "publishConfig": {
-    "registry": "https://registry.npmjs.org/",
-    "access": "restricted"
-  },
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js"
-    }
-  },
-  "files": [
-    "dist"
-  ]
-}

.publish/ui/README.md

@@ -1,6 +1,6 @@
 # @wrnexus/ui
 
-> First-party Wire UI component library — a set of themeable `.wrn` components plus a single tokenized stylesheet.
+> First-party WrNexus UI component library — a set of themeable `.wrn` components plus a single tokenized stylesheet.
 
 Part of the **WrNexus** framework — an SSR-first, Bun-native full-stack web framework.
 
@@ -11,11 +11,11 @@ controls, and feedback UI) together with one themeable stylesheet, `ui.css`. The
 components are **auto-discovered** by the framework router — you don't import them
 in code. Once the package's component directory is on the router's scan path, you
 mount any component in a page with `data-component="<name>"`. Every visual is
-driven by `var(--wire-*)` theme tokens, so components restyle instantly when the
+driven by `var(--wrn-*)` theme tokens, so components restyle instantly when the
 theme changes. The tiny JS surface (`src/index.ts`) exists only so the toolchain
 (CLI build + dev server) can locate the component directory and stylesheet.
 
-The complete PDF-aligned catalog currently contains **891 components**. The
+The complete PDF-aligned catalog currently contains **85 components**. The
 generated `COMPONENTS.md` and `component-reference.json` files document every
 mount name, prop, inferred type, default/required status, slot, event, category,
 and source file directly from the packaged `.wrn` source.
@@ -30,15 +30,16 @@ bun add @wrnexus/ui
 > (a read token in `~/.npmrc`). Requires **Bun** (Node is not supported).
 
 In practice you rarely install this directly: `@wrnexus/cli` and
-`@wrnexus/dev-server` already depend on it and wire it into the router for you
+`@wrnexus/dev-server` already depend on it and wrn it into the router for you
 (see [Auto-discovery](#auto-discovery)).
 
 ## Components
 
-Components live as `.wrn` files under `packages/ui/components/`. The mount name
-is the **lowercase file basename** (e.g. `button.wrn` → `data-component="button"`).
-Each accepts a `class` prop (appended to its root element) and most render their
-body from either a named prop or the default slot.
+Components live as `.wrn` files under `packages/ui/components/`. The canonical mount
+name comes from the component declaration (for example, `component Button` mounts as
+`data-component="Button"`). Component lookup is case-insensitive, so existing lowercase
+mounts continue to work. Each component accepts a `class` prop (appended to its root
+element), and most render their body from either a named prop or the default slot.
 
 ### Layout
 
@@ -53,19 +54,19 @@ body from either a named prop or the default slot.
 
 ### Core / feedback
 
-| Name           | Purpose                                              | Key props                                                                                       |
-| -------------- | ---------------------------------------------------- | ----------------------------------------------------------------------------------------------- |
-| `button`       | Button                                               | `label`, `variant` (`default`\|`primary`\|`danger`\|`ghost`), `size` (`sm`\|`md`\|`lg`), `type` |
-| `input`        | Text input                                           | see source                                                                                      |
-| `textarea`     | Multi-line input                                     | see source                                                                                      |
-| `checkbox`     | Checkbox                                             | see source                                                                                      |
-| `badge`        | Small status badge                                   | `label`, `variant`                                                                              |
-| `alert`        | Callout box                                          | `variant` (`info`\|`success`\|`danger`\|`warning`), `title`, `message`                          |
-| `card`         | Padded, bordered surface                             | `class`                                                                                         |
-| `avatar`       | User avatar                                          | see source                                                                                      |
-| `spinner`      | Loading indicator                                    | see source                                                                                      |
-| `disclosure`   | Expandable details/summary                           | see source                                                                                      |
-| `theme-toggle` | Theme switch button (binds `data-wire-theme-toggle`) | `label`                                                                                         |
+| Name           | Purpose                                             | Key props                                                                                       |
+| -------------- | --------------------------------------------------- | ----------------------------------------------------------------------------------------------- |
+| `button`       | Button                                              | `label`, `variant` (`default`\|`primary`\|`danger`\|`ghost`), `size` (`sm`\|`md`\|`lg`), `type` |
+| `input`        | Text input                                          | see source                                                                                      |
+| `textarea`     | Multi-line input                                    | see source                                                                                      |
+| `checkbox`     | Checkbox                                            | see source                                                                                      |
+| `badge`        | Small status badge                                  | `label`, `variant`                                                                              |
+| `alert`        | Callout box                                         | `variant` (`info`\|`success`\|`danger`\|`warning`), `title`, `message`                          |
+| `card`         | Padded, bordered surface                            | `class`                                                                                         |
+| `avatar`       | User avatar                                         | see source                                                                                      |
+| `spinner`      | Loading indicator                                   | see source                                                                                      |
+| `disclosure`   | Expandable details/summary                          | see source                                                                                      |
+| `theme-toggle` | Theme switch button (binds `data-wrn-theme-toggle`) | `label`                                                                                         |
 
 ### Additional controls & data display
 
@@ -91,16 +92,17 @@ equivalent is exported as `@wrnexus/ui/component-reference.json`.
 
 ## API
 
-The JS module (`@wrnexus/ui`) exposes four helpers used by the build tooling to
+The JS module (`@wrnexus/ui`) exposes five helpers used by the build tooling to
 locate the component assets. There is no component code to import — the components
 are `.wrn` files rendered server-side.
 
-| Export             | Signature        | Returns                                                                                    |
-| ------------------ | ---------------- | ------------------------------------------------------------------------------------------ |
-| `uiComponentsDir`  | `() => string`   | Absolute path to the `.wrn` component directory (feed to `buildRouter`'s `componentDirs`). |
-| `uiCssPath`        | `() => string`   | Absolute path to `ui.css`.                                                                 |
-| `uiCss`            | `() => string`   | The `ui.css` file contents (all `.wire-*` classes, themed via tokens).                     |
-| `uiComponentNames` | `() => string[]` | Sorted list of built-in component names (e.g. for `wrnexus eject` listing).                |
+| Export             | Signature                  | Returns                                                                                    |
+| ------------------ | -------------------------- | ------------------------------------------------------------------------------------------ |
+| `uiComponentsDir`  | `() => string`             | Absolute path to the `.wrn` component directory (feed to `buildRouter`'s `componentDirs`). |
+| `uiCssPath`        | `() => string`             | Absolute path to `ui.css`.                                                                 |
+| `uiCss`            | `() => string`             | The `ui.css` file contents (all `.wrn-*` classes, themed via tokens).                      |
+| `uiComponentNames` | `() => string[]`           | Sorted list of declared built-in component names.                                          |
+| `uiComponentPath`  | `(name: string) => string` | Absolute source path for a declared component name or case-insensitive alias.              |
 
 ### `./ui.css` asset export
 
@@ -116,21 +118,17 @@ are `.wrn` files rendered server-side.
 The framework serves this stylesheet once at `/__wrnexus/ui.css`, so pages get all
 component styles from a single request.
 
-### Tailwind and motion
+### Component styles and motion
 
-Components use static Tailwind utility classes alongside the shared `.wire-*`
-layer. If the package is consumed by a separate Tailwind build, include its
-component sources so every utility is generated:
-
-```css
-@import "tailwindcss";
-@source "../node_modules/@wrnexus/ui/components/*.wrn";
-```
+Components own their BEM styles in local `style {}` blocks and do not require a
+Tailwind scan. `ui.css` supplies only global tokens, resets, and shared
+primitives. Applications can still use Tailwind independently in their own
+source files.
 
 The shared stylesheet gives all component boundaries consistent, GPU-friendly
-entry and interaction motion. Override `--wire-motion-fast`,
-`--wire-motion-base`, `--wire-motion-slow`, `--wire-ease-standard`, or
-`--wire-ease-emphasized` to tune it. Hover lift is limited to precise pointing
+entry and interaction motion. Override `--wrn-motion-fast`,
+`--wrn-motion-base`, `--wrn-motion-slow`, `--wrn-ease-standard`, or
+`--wrn-ease-emphasized` to tune it. Hover lift is limited to precise pointing
 devices and `prefers-reduced-motion` is honored automatically.
 
 ### Using the selected theme in application UI
@@ -141,21 +139,21 @@ pages and custom `.wrn` components can use the same contract:
 
 ```css
 .account-card {
-  background: var(--wire-color-surface);
-  color: var(--wire-color-text);
-  border: 1px solid var(--wire-color-border);
+  background: var(--wrn-color-surface);
+  color: var(--wrn-color-text);
+  border: 1px solid var(--wrn-color-border);
 }
 
 .account-card__action {
-  background: var(--wire-color-primary);
-  color: var(--wire-color-primary-contrast);
+  background: var(--wrn-color-primary);
+  color: var(--wrn-color-primary-contrast);
 }
 ```
 
-Stable no-spacing helper classes are also available: `wire-bg-page`,
-`wire-bg-surface`, `wire-bg-surface-2`, `wire-bg-primary`, `wire-bg-secondary`,
-`wire-text`, `wire-text-muted`, `wire-text-primary`, `wire-text-success`,
-`wire-text-warning`, `wire-text-danger`, and `wire-border`.
+Stable no-spacing helper classes are also available: `wrn-bg-page`,
+`wrn-bg-surface`, `wrn-bg-surface-2`, `wrn-bg-primary`, `wrn-bg-secondary`,
+`wrn-text`, `wrn-text-muted`, `wrn-text-primary`, `wrn-text-success`,
+`wrn-text-warning`, `wrn-text-danger`, and `wrn-border`.
 
 Tailwind-authored custom markup can continue using the palette families already
 used by packaged components. `indigo-*` and `violet-*` resolve to primary,
@@ -171,7 +169,7 @@ The router scans extra `componentDirs` (in addition to the app's own
 `app/components`) and keys components by name. Library dirs are scanned **first**
 and `app/components` **last**, so an app component of the same name shadows the
 library's. The CLI build (`@wrnexus/cli`) and dev server (`@wrnexus/dev-server`)
-both wire the UI directory in for you:
+both wrn the UI directory in for you:
 
 ```ts
 import { buildRouter } from "@wrnexus/router";
@@ -197,11 +195,11 @@ attributes (other than `data-component`) become string props:
 
 Ways to customize the components, in increasing order of power:
 
-1. **Theme tokens** — override CSS custom properties such as `--wire-color-primary`,
-   `--wire-color-surface`, `--wire-radius-sm`, etc. Every component style resolves
-   through `var(--wire-*)`, so changing a token restyles everything instantly
+1. **Theme tokens** — override CSS custom properties such as `--wrn-color-primary`,
+   `--wrn-color-surface`, `--wrn-radius-sm`, etc. Every component style resolves
+   through `var(--wrn-*)`, so changing a token restyles everything instantly
    (including across theme switches).
-2. **App CSS** — redefine a `.wire-*` class in your own stylesheet, which is loaded
+2. **App CSS** — redefine a `.wrn-*` class in your own stylesheet, which is loaded
    after `ui.css` and therefore wins.
 3. **`class` prop** — pass a `class` prop to a component; it is appended to the
    component's root element, letting you add per-instance classes without touching
@@ -219,4 +217,4 @@ Ways to customize the components, in increasing order of power:
   [`@wrnexus/dev-server`](../dev-server) / built by [`@wrnexus/cli`](../cli).
 - Depends on [`@wrnexus/core`](../core) (`dependencies`).
 - `theme-toggle` relies on the framework's theme runtime, which binds the
-  `data-wire-theme-toggle` attribute — no per-component JS is required.
+  `data-wrn-theme-toggle` attribute — no per-component JS is required.

.publish/ui/component-migrations.json

@@ -0,0 +1,12 @@
+{
+  "generatedFrom": "framework remediation 0.8.7",
+  "removedCount": 6,
+  "replacements": {
+    "AdvancedDatePicker": "DatePicker",
+    "AdvancedRangeSlider": "RangeSlider",
+    "FileUpload": "FileInput",
+    "Toast": "Toaster",
+    "ToastNotifications": "Toaster",
+    "CopyMarkup": "Clipboard"
+  }
+}

.publish/ui/components/AcceptAllCookiesButton.wrn

@@ -1,11 +0,0 @@
-component AcceptAllCookiesButton {
-  props {
-    label = "Action"
-    href = ""
-    type = "button"
-    variant = "primary"
-    disabled = false
-    class = ""
-  }
-  view { <span class="wire-catalog-action {class}">{#if href}<a href="{href}" class="wire-btn wire-btn--{variant}">{label}<slot /></a>{:else}<button type="{type}" disabled="{disabled}" class="wire-btn wire-btn--{variant}">{label}<slot /></button>{/if}</span> }
-}

.publish/ui/components/AccessibleAccordion.wrn

@@ -1,13 +0,0 @@
-component AccessibleAccordion {
-  props {
-    eyebrow = ""
-    title = ""
-    description = ""
-    href = ""
-    actionLabel = "Learn more"
-    image = ""
-    alt = ""
-    class = ""
-  }
-  view { <article class="wire-card wire-catalog-card {class}">{#if image}<img src="{image}" alt="{alt}" class="wire-catalog-card__image" />{/if}{#if eyebrow}<span class="wire-eyebrow">{eyebrow}</span>{/if}{#if title}<h3>{title}</h3>{/if}{#if description}<p>{description}</p>{/if}<slot />{#if href}<a href="{href}" class="wire-btn wire-btn--ghost">{actionLabel}</a>{/if}</article> }
-}

.publish/ui/components/AccessibleCarousel.wrn

@@ -1,13 +0,0 @@
-component AccessibleCarousel {
-  props {
-    eyebrow = ""
-    title = ""
-    description = ""
-    href = ""
-    actionLabel = "Learn more"
-    image = ""
-    alt = ""
-    class = ""
-  }
-  view { <article class="wire-card wire-catalog-card {class}">{#if image}<img src="{image}" alt="{alt}" class="wire-catalog-card__image" />{/if}{#if eyebrow}<span class="wire-eyebrow">{eyebrow}</span>{/if}{#if title}<h3>{title}</h3>{/if}{#if description}<p>{description}</p>{/if}<slot />{#if href}<a href="{href}" class="wire-btn wire-btn--ghost">{actionLabel}</a>{/if}</article> }
-}

.publish/ui/components/AccessibleChartSummary.wrn

@@ -1,15 +0,0 @@
-component AccessibleChartSummary {
-  props {
-    eyebrow = ""
-    title = ""
-    description = ""
-    href = ""
-    actionLabel = "Learn more"
-    image = ""
-    alt = ""
-    class = ""
-  }
-  view {
-    <article class="wire-card wire-catalog-card {class}"><div class="grid gap-3 rounded-xl border border-slate-200 bg-slate-50 p-4 dark:border-slate-800 dark:bg-slate-950/60"><div class="flex items-center gap-2 text-sm font-bold"><span class="icon-[lucide--chart-no-axes-combined] size-5 text-violet-500" aria-hidden="true"></span>Chart summary</div><dl class="grid gap-3"><div class="flex items-center justify-between gap-4"><dt class="text-sm text-slate-500">Delivered</dt><dd class="font-bold">96.8%</dd></div><div class="flex items-center justify-between gap-4"><dt class="text-sm text-slate-500">Engaged</dt><dd class="font-bold">42.1%</dd></div><div class="flex items-center justify-between gap-4"><dt class="text-sm text-slate-500">Converted</dt><dd class="font-bold">8.7%</dd></div></dl></div>{#if eyebrow}<span class="wire-eyebrow">{eyebrow}</span>{/if}{#if title}<h3>{title}</h3>{/if}{#if description}<p>{description}</p>{/if}<slot />{#if href}<a href="{href}" class="wire-btn wire-btn--ghost">{actionLabel}</a>{/if}</article>
-  }
-}

.publish/ui/components/AccessibleDialog.wrn

@@ -1,10 +0,0 @@
-component AccessibleDialog {
-  props {
-    title = ""
-    description = ""
-    open = false
-    closeLabel = "Close"
-    class = ""
-  }
-  view { <div data-show="open" class="wire-overlay wire-catalog-overlay {class}"><section role="dialog" aria-modal="true" aria-label="{title}" class="wire-dialog"><header><h2 data-show="title" class="wire-dialog__title">{title}</h2><p data-show="description" class="wire-dialog__description">{description}</p></header><slot /><button type="button" class="wire-btn wire-btn--ghost">{closeLabel}</button></section></div> }
-}

.publish/ui/components/AccessibleErrorSummary.wrn

@@ -1,13 +0,0 @@
-component AccessibleErrorSummary {
-  props {
-    eyebrow = ""
-    title = ""
-    description = ""
-    href = ""
-    actionLabel = "Learn more"
-    image = ""
-    alt = ""
-    class = ""
-  }
-  view { <article class="wire-card wire-catalog-card {class}">{#if image}<img src="{image}" alt="{alt}" class="wire-catalog-card__image" />{/if}{#if eyebrow}<span class="wire-eyebrow">{eyebrow}</span>{/if}{#if title}<h3>{title}</h3>{/if}{#if description}<p>{description}</p>{/if}<slot />{#if href}<a href="{href}" class="wire-btn wire-btn--ghost">{actionLabel}</a>{/if}</article> }
-}

.publish/ui/components/AccessibleIcon.wrn

@@ -1,13 +0,0 @@
-component AccessibleIcon {
-  props {
-    eyebrow = ""
-    title = ""
-    description = ""
-    href = ""
-    actionLabel = "Learn more"
-    image = ""
-    alt = ""
-    class = ""
-  }
-  view { <article class="wire-card wire-catalog-card {class}">{#if image}<img src="{image}" alt="{alt}" class="wire-catalog-card__image" />{/if}{#if eyebrow}<span class="wire-eyebrow">{eyebrow}</span>{/if}{#if title}<h3>{title}</h3>{/if}{#if description}<p>{description}</p>{/if}<slot />{#if href}<a href="{href}" class="wire-btn wire-btn--ghost">{actionLabel}</a>{/if}</article> }
-}

.publish/ui/components/AccessibleMenu.wrn

@@ -1,10 +0,0 @@
-component AccessibleMenu {
-  props {
-    title = ""
-    description = ""
-    open = false
-    closeLabel = "Close"
-    class = ""
-  }
-  view { <div data-show="open" class="wire-overlay wire-catalog-overlay {class}"><section role="dialog" aria-modal="true" aria-label="{title}" class="wire-dialog"><header><h2 data-show="title" class="wire-dialog__title">{title}</h2><p data-show="description" class="wire-dialog__description">{description}</p></header><slot /><button type="button" class="wire-btn wire-btn--ghost">{closeLabel}</button></section></div> }
-}

.publish/ui/components/AccessibleTabs.wrn

@@ -1,13 +0,0 @@
-component AccessibleTabs {
-  props {
-    eyebrow = ""
-    title = ""
-    description = ""
-    href = ""
-    actionLabel = "Learn more"
-    image = ""
-    alt = ""
-    class = ""
-  }
-  view { <article class="wire-card wire-catalog-card {class}">{#if image}<img src="{image}" alt="{alt}" class="wire-catalog-card__image" />{/if}{#if eyebrow}<span class="wire-eyebrow">{eyebrow}</span>{/if}{#if title}<h3>{title}</h3>{/if}{#if description}<p>{description}</p>{/if}<slot />{#if href}<a href="{href}" class="wire-btn wire-btn--ghost">{actionLabel}</a>{/if}</article> }
-}

.publish/ui/components/AccessibleTooltip.wrn

@@ -1,13 +0,0 @@
-component AccessibleTooltip {
-  props {
-    eyebrow = ""
-    title = ""
-    description = ""
-    href = ""
-    actionLabel = "Learn more"
-    image = ""
-    alt = ""
-    class = ""
-  }
-  view { <article class="wire-card wire-catalog-card {class}">{#if image}<img src="{image}" alt="{alt}" class="wire-catalog-card__image" />{/if}{#if eyebrow}<span class="wire-eyebrow">{eyebrow}</span>{/if}{#if title}<h3>{title}</h3>{/if}{#if description}<p>{description}</p>{/if}<slot />{#if href}<a href="{href}" class="wire-btn wire-btn--ghost">{actionLabel}</a>{/if}</article> }
-}

.publish/ui/components/Accordion.wrn

@@ -1,31 +1,478 @@
 component Accordion {
-    props {
-        class = ""
-        title = "Question"
-        open = false
-    }
+  outputs {
+    change(payload: { value?: string | number | boolean | null; values?: Array<string | number | boolean | null | object>; sourceEvent?: Event; [key: string]: string | number | boolean | null | object } | string | number | boolean | null)
+    open(payload: { sourceEvent?: Event; [key: string]: string | number | boolean | null | object })
+    close(payload: { sourceEvent?: Event; [key: string]: string | number | boolean | null | object })
+  }
 
-    state expanded = open
+  props {
+    size: string = "default"
+    color: string = "primary"
+    variant: string = "default"
+    class: string = ""
+
+    id: string = "accordion"
+    items: unknown[] = []
+    defaultOpen: unknown[] = []
+    multiple: boolean = false
+    alwaysOpen: boolean = false
+    disabled: boolean = false
+
+    indicator: string = "plus"
+    indicatorPosition: string = "start"
+    showIndicator: boolean = true
+    bordered: boolean = false
+    separated: boolean = false
+    flush: boolean = false
+    contentItalic: boolean = false
 
-    view {
-        <div class="border-b border-slate-200 dark:border-slate-800 {class}" >
-            <button
-                type="button"
-                class="flex w-full items-center justify-between gap-4 py-5 text-left font-semibold"
-                aria-expanded="{expanded}"
-                @click="expanded = !expanded"
-            >
-                <span >
-                    {title}
-                </span>
-                <span class="text-xl transition-transform {expanded ? 'rotate-45' : ''}">+</span>
-            </button>
-            <div
-                data-show="expanded"
-                class="pb-5 text-slate-600 dark:text-slate-300"
-            >
-                <slot />
-            </div>
-        </div>
-    }
+}
+
+  state openValues = defaultOpen
+
+  functions {
+    shared function itemValue(item, index) {
+      return item.value !== undefined && item.value !== ""
+        ? String(item.value)
+        : String(index)
+    }
+
+    shared function nestedValue(parent, parentIndex, item, index) {
+      return itemValue(parent, parentIndex) + "." + itemValue(item, index)
+    }
+
+    shared function isOpen(value) {
+      return openValues.includes(value)
+    }
+
+    shared function allowsMultiple() {
+      return multiple || alwaysOpen
+    }
+
+    // Named rather than computed: an output is resolved as a property name, so
+    // output[eventName] would not reach a parent binding.
+    client function dispatchAccordionEvent(sourceEvent, eventName, value, item, payload) {
+      payload = {
+        component: "Accordion",
+        value: value,
+        item: item,
+        open: isOpen(value),
+        openValues: openValues
+      }
+
+      if (eventName === "open") {
+        output.open(payload)
+      } else if (eventName === "close") {
+        output.close(payload)
+      } else {
+        output.change(payload)
+      }
+    }
+
+    client function toggleItem(sourceEvent, value, item, wasOpen) {
+      if (disabled || item.disabled) {
+        return
+      }
+
+      wasOpen = isOpen(value)
+
+      if (wasOpen) {
+        openValues = openValues.filter((entry) => entry !== value)
+      } else if (allowsMultiple()) {
+        openValues = openValues.concat([value])
+      } else {
+        openValues = [value]
+      }
+
+      dispatchAccordionEvent(
+        sourceEvent,
+        wasOpen ? "close" : "open",
+        value,
+        item
+      )
+      dispatchAccordionEvent(sourceEvent, "change", value, item)
+    }
+
+  }
+
+  view {
+    <div
+      {...attrs}
+      id="{id}"
+      data-wrn-accordion
+      data-variant="{variant}"
+      data-indicator="{indicator}"
+      data-multiple="{allowsMultiple() ? 'true' : 'false'}"
+      class="wrn-component wrn-component--color-{color} wrn-component--size-{size} wrn-next--accordion wrn-next--accordion-{variant} {bordered ? 'wrn-next--accordion-bordered' : ''} {separated ? 'wrn-next--accordion-separated' : ''} {flush ? 'wrn-next--accordion-flush' : ''} {disabled ? 'wrn-next--disabled' : ''} {class}"
+    >
+      {#each items as item, index}
+        <section
+          class="wrn-next__accordion-item"
+          data-open="{isOpen(itemValue(item, index)) ? 'true' : 'false'}"
+          data-disabled="{disabled || item.disabled ? 'true' : 'false'}"
+        >
+          <h3 class="wrn-next__accordion-heading">
+            <button
+              type="button"
+              id="{id}-trigger-{index}"
+              aria-expanded="{isOpen(itemValue(item, index)) ? 'true' : 'false'}"
+              aria-controls="{id}-panel-{index}"
+              disabled="{disabled || item.disabled}"
+              @click="toggleItem(event, itemValue(item, index), item)"
+            >
+              {#if showIndicator && indicatorPosition === "start"}
+                <span class="wrn-next__accordion-indicator" aria-hidden="true">
+                  {#if indicator === "chevron"}
+                    <span class="icon-[lucide--chevron-down]"></span>
+                  {:else}
+                    <span>+</span>
+                  {/if}
+                </span>
+              {/if}
+              <span>{item.label || item.title}</span>
+              {#if showIndicator && indicatorPosition === "end"}
+                <span class="wrn-next__accordion-indicator" aria-hidden="true">
+                  {#if indicator === "chevron"}
+                    <span class="icon-[lucide--chevron-down]"></span>
+                  {:else}
+                    <span>+</span>
+                  {/if}
+                </span>
+              {/if}
+            </button>
+          </h3>
+
+          <div
+            id="{id}-panel-{index}"
+            class="wrn-next__accordion-panel"
+            role="region"
+            aria-labelledby="{id}-trigger-{index}"
+            aria-hidden="{isOpen(itemValue(item, index)) ? 'false' : 'true'}"
+          >
+            <div>
+              <div class="wrn-next__accordion-content {contentItalic ? 'wrn-next__accordion-content-italic' : ''}">
+                {#if item.content}<p>{item.content}</p>{/if}
+
+                {#if item.children && item.children.length > 0}
+                  <div class="wrn-next__accordion-nested">
+                    {#each item.children as child, childIndex}
+                      <section
+                        class="wrn-next__accordion-item"
+                        data-open="{isOpen(nestedValue(item, index, child, childIndex)) ? 'true' : 'false'}"
+                      >
+                        <h4 class="wrn-next__accordion-heading">
+                          <button
+                            type="button"
+                            id="{id}-trigger-{index}-{childIndex}"
+                            aria-expanded="{isOpen(nestedValue(item, index, child, childIndex)) ? 'true' : 'false'}"
+                            aria-controls="{id}-panel-{index}-{childIndex}"
+                            disabled="{disabled || child.disabled}"
+                            @click="toggleItem(event, nestedValue(item, index, child, childIndex), child)"
+                          >
+                            {#if showIndicator}
+                              <span class="wrn-next__accordion-indicator" aria-hidden="true">
+                                {#if indicator === "chevron"}
+                                  <span class="icon-[lucide--chevron-down]"></span>
+                                {:else}
+                                  <span>+</span>
+                                {/if}
+                              </span>
+                            {/if}
+                            <span>{child.label || child.title}</span>
+                          </button>
+                        </h4>
+                        <div
+                          id="{id}-panel-{index}-{childIndex}"
+                          class="wrn-next__accordion-panel"
+                          role="region"
+                          aria-labelledby="{id}-trigger-{index}-{childIndex}"
+                          aria-hidden="{isOpen(nestedValue(item, index, child, childIndex)) ? 'false' : 'true'}"
+                        >
+                          <div>
+                            <div class="wrn-next__accordion-content {contentItalic ? 'wrn-next__accordion-content-italic' : ''}">
+                              <p>{child.content}</p>
+                            </div>
+                          </div>
+                        </div>
+                      </section>
+                    {/each}
+                  </div>
+                {/if}
+              </div>
+            </div>
+          </div>
+        </section>
+      {/each}
+    </div>
+  }
+
+  style {
+    .wrn-next--accordion {
+      --wrn-accordion-accent: var(--wrn-component-color);
+      display: grid;
+      width: 100%;
+      color: var(--wrn-color-text);
+    }
+
+    .wrn-next__accordion-item {
+      min-width: 0;
+    }
+
+    .wrn-next__accordion-heading {
+      margin: 0;
+      font: inherit;
+    }
+
+    .wrn-next__accordion-heading > button {
+      display: flex;
+      width: 100%;
+      align-items: center;
+      gap: 0.75rem;
+      padding: 0.85rem 0;
+      border: 0;
+      background: transparent;
+      color: var(--wrn-color-text);
+      font: inherit;
+      font-size: 0.88rem;
+      font-weight: 700;
+      text-align: left;
+      cursor: pointer;
+    }
+
+    .wrn-next__accordion-heading > button > span:not(.wrn-next__accordion-indicator) {
+      min-width: 0;
+      flex: 1;
+    }
+
+    .wrn-next__accordion-heading > button:focus-visible {
+      border-radius: var(--wrn-radius-sm);
+      outline: 2px solid var(--wrn-accordion-accent);
+      outline-offset: 2px;
+    }
+
+    .wrn-next__accordion-heading > button:disabled {
+      cursor: not-allowed;
+      opacity: 0.5;
+    }
+
+    .wrn-next__accordion-indicator {
+      display: inline-flex;
+      width: 1rem;
+      height: 1rem;
+      flex: 0 0 1rem;
+      align-items: center;
+      justify-content: center;
+      color: var(--wrn-color-muted);
+      font-size: 1rem;
+      font-weight: 500;
+      line-height: 1;
+      transition:
+        color var(--wrn-motion-fast) var(--wrn-ease-standard),
+        transform var(--wrn-motion-fast) var(--wrn-ease-standard);
+    }
+
+    .wrn-next__accordion-indicator > span {
+      display: inline-flex;
+      align-items: center;
+      justify-content: center;
+    }
+
+    .wrn-next__accordion-indicator > [class*="icon-["] {
+      width: 0.95rem;
+      height: 0.95rem;
+    }
+
+    .wrn-next__accordion-item[data-open="true"]
+      > .wrn-next__accordion-heading
+      .wrn-next__accordion-indicator {
+      color: var(--wrn-accordion-accent);
+      transform: rotate(45deg);
+    }
+
+    .wrn-next--accordion[data-indicator="chevron"]
+      .wrn-next__accordion-item[data-open="true"]
+      > .wrn-next__accordion-heading
+      .wrn-next__accordion-indicator {
+      transform: rotate(180deg);
+    }
+
+    .wrn-next__accordion-item[data-open="true"] > .wrn-next__accordion-heading > button {
+      color: var(--wrn-accordion-accent);
+    }
+
+    .wrn-next__accordion-panel {
+      display: grid;
+      grid-template-rows: 0fr;
+      opacity: 0;
+      transition:
+        grid-template-rows var(--wrn-motion-base) var(--wrn-ease-standard),
+        opacity var(--wrn-motion-fast) var(--wrn-ease-standard);
+    }
+
+    .wrn-next__accordion-item[data-open="true"] > .wrn-next__accordion-panel {
+      grid-template-rows: 1fr;
+      opacity: 1;
+    }
+
+    .wrn-next__accordion-panel > div {
+      overflow: hidden;
+    }
+
+    .wrn-next__accordion-content {
+      padding: 0 0 1rem 1.75rem;
+      color: var(--wrn-color-muted);
+      font-size: 0.86rem;
+      line-height: 1.65;
+    }
+
+    .wrn-next__accordion-content > p {
+      color: inherit;
+    }
+
+    .wrn-next__accordion-content-italic > p::first-line {
+      font-style: italic;
+    }
+
+    .wrn-next__accordion-nested {
+      display: grid;
+      margin-top: 0.5rem;
+    }
+
+    .wrn-next__accordion-nested .wrn-next__accordion-content {
+      padding-left: 1.5rem;
+    }
+
+    .wrn-next--accordion-bordered {
+      overflow: hidden;
+      border: 1px solid var(--wrn-color-border);
+      border-radius: var(--wrn-radius-md);
+      background: var(--wrn-color-surface);
+    }
+
+    .wrn-next--accordion-bordered > .wrn-next__accordion-item + .wrn-next__accordion-item {
+      border-top: 1px solid var(--wrn-color-border);
+    }
+
+    .wrn-next--accordion-bordered
+      > .wrn-next__accordion-item
+      > .wrn-next__accordion-heading
+      > button {
+      padding-inline: 1rem;
+    }
+
+    .wrn-next--accordion-bordered
+      > .wrn-next__accordion-item
+      > .wrn-next__accordion-panel
+      .wrn-next__accordion-content {
+      padding-inline: 1rem;
+    }
+
+    .wrn-next--accordion-separated {
+      gap: 0.5rem;
+    }
+
+    .wrn-next--accordion-separated > .wrn-next__accordion-item {
+      overflow: hidden;
+      border: 1px solid transparent;
+      border-radius: var(--wrn-radius-md);
+      background: var(--wrn-color-surface-2);
+    }
+
+    .wrn-next--accordion-separated > .wrn-next__accordion-item[data-open="true"] {
+      border-color: var(--wrn-color-border);
+    }
+
+    .wrn-next--accordion-separated
+      > .wrn-next__accordion-item
+      > .wrn-next__accordion-heading
+      > button,
+    .wrn-next--accordion-separated
+      > .wrn-next__accordion-item
+      > .wrn-next__accordion-panel
+      .wrn-next__accordion-content {
+      padding-inline: 1rem;
+    }
+
+    .wrn-next--accordion-flush {
+      border-radius: 0;
+      background: transparent;
+      box-shadow: none;
+    }
+
+    @media (prefers-reduced-motion: reduce) {
+    .wrn-next__accordion-panel,
+      .wrn-next__accordion-indicator {
+        transition: none;
+      }
+    }
+
+    /* Shared component foundation. */
+
+        .wrn-component {
+          --wrn-component-color: var(--wrn-color-primary);
+          --wrn-component-scale: 1;
+          margin: 0;
+          color: var(--wrn-color-text);
+          font-family: var(--wrn-font-sans, inherit);
+        }
+
+        .wrn-component--color-primary {
+          --wrn-component-color: var(--wrn-color-primary);
+        }
+
+        .wrn-component--color-secondary {
+          --wrn-component-color: var(--wrn-color-secondary);
+        }
+
+        .wrn-component--color-success {
+          --wrn-component-color: var(--wrn-color-success);
+        }
+
+        .wrn-component--color-warning {
+          --wrn-component-color: var(--wrn-color-warning);
+        }
+
+        .wrn-component--color-danger {
+          --wrn-component-color: var(--wrn-color-danger);
+        }
+
+        .wrn-component--color-info {
+          --wrn-component-color: var(--wrn-color-info);
+        }
+
+        .wrn-component--size-xs {
+          --wrn-component-scale: 0.78;
+        }
+
+        .wrn-component--size-sm {
+          --wrn-component-scale: 0.88;
+        }
+
+        .wrn-component--size-default,
+        .wrn-component--size-md {
+          --wrn-component-scale: 1;
+        }
+
+        .wrn-component--size-lg {
+          --wrn-component-scale: 1.14;
+        }
+
+        .wrn-component--size-xl {
+          --wrn-component-scale: 1.28;
+        }
+
+        .wrn-component:not(.wrn-btn) {
+          font-size: calc(1em * var(--wrn-component-scale));
+        }
+
+        .wrn-component :is(a, button, input, select, textarea):focus-visible {
+          outline-color: var(--wrn-component-color);
+        }
+
+        .wrn-component p {
+          margin: 0;
+          color: var(--wrn-color-muted);
+          line-height: 1.6;
+        }
+  }
 }

.publish/ui/components/AccountMenu.wrn

@@ -1,10 +0,0 @@
-component AccountMenu {
-  props {
-    title = ""
-    description = ""
-    open = false
-    closeLabel = "Close"
-    class = ""
-  }
-  view { <div data-show="open" class="wire-overlay wire-catalog-overlay {class}"><section role="dialog" aria-modal="true" aria-label="{title}" class="wire-dialog"><header><h2 data-show="title" class="wire-dialog__title">{title}</h2><p data-show="description" class="wire-dialog__description">{description}</p></header><slot /><button type="button" class="wire-btn wire-btn--ghost">{closeLabel}</button></section></div> }
-}

.publish/ui/components/AccountStatusBanner.wrn

@@ -1,11 +0,0 @@
-component AccountStatusBanner {
-  props {
-    label = "AccountStatus" 
-    title = ""
-    description = ""
-    value = ""
-    variant = "default"
-    class = ""
-  }
-  view { <aside role="status" class="wire-alert wire-alert--{variant} wire-catalog-feedback {class}"><strong data-show="title || label">{title || label}</strong><span data-show="value" class="wire-badge wire-badge--{variant}">{value}</span><p data-show="description">{description}</p><slot /></aside> }
-}

.publish/ui/components/ActionMenu.wrn

@@ -1,10 +0,0 @@
-component ActionMenu {
-  props {
-    title = ""
-    description = ""
-    open = false
-    closeLabel = "Close"
-    class = ""
-  }
-  view { <div data-show="open" class="wire-overlay wire-catalog-overlay {class}"><section role="dialog" aria-modal="true" aria-label="{title}" class="wire-dialog"><header><h2 data-show="title" class="wire-dialog__title">{title}</h2><p data-show="description" class="wire-dialog__description">{description}</p></header><slot /><button type="button" class="wire-btn wire-btn--ghost">{closeLabel}</button></section></div> }
-}

.publish/ui/components/ActiveFilterList.wrn

@@ -1,10 +0,0 @@
-component ActiveFilterList {
-  props {
-    title = ""
-    description = ""
-    empty = false
-    emptyText = "No items available."
-    class = ""
-  }
-  view { <section class="wire-catalog-collection {class}"><header data-show="title || description"><h2 data-show="title">{title}</h2><p data-show="description">{description}</p></header><div data-show="!empty" role="list" class="wire-catalog-collection__items"><slot /></div><p data-show="empty" role="status" class="wire-muted">{emptyText}</p></section> }
-}

.publish/ui/components/ActivityList.wrn

@@ -1,10 +0,0 @@
-component ActivityList {
-  props {
-    title = ""
-    description = ""
-    empty = false
-    emptyText = "No items available."
-    class = ""
-  }
-  view { <section class="wire-catalog-collection {class}"><header data-show="title || description"><h2 data-show="title">{title}</h2><p data-show="description">{description}</p></header><div data-show="!empty" role="list" class="wire-catalog-collection__items"><slot /></div><p data-show="empty" role="status" class="wire-muted">{emptyText}</p></section> }
-}

.publish/ui/components/AddOnCard.wrn

@@ -1,13 +0,0 @@
-component AddOnCard {
-  props {
-    eyebrow = ""
-    title = ""
-    description = ""
-    href = ""
-    actionLabel = "Learn more"
-    image = ""
-    alt = ""
-    class = ""
-  }
-  view { <article class="wire-card wire-catalog-card {class}">{#if image}<img src="{image}" alt="{alt}" class="wire-catalog-card__image" />{/if}{#if eyebrow}<span class="wire-eyebrow">{eyebrow}</span>{/if}{#if title}<h3>{title}</h3>{/if}{#if description}<p>{description}</p>{/if}<slot />{#if href}<a href="{href}" class="wire-btn wire-btn--ghost">{actionLabel}</a>{/if}</article> }
-}

.publish/ui/components/AddressInput.wrn

@@ -1,16 +0,0 @@
-component AddressInput {
-  props {
-    label = "Address" 
-    name = ""
-    value = ""
-    placeholder = ""
-    type = "text"
-    required = false
-    disabled = false
-    readonly = false
-    help = ""
-    error = ""
-    class = ""
-  }
-  view { <label class="wire-field wire-catalog-field {class}"><span class="wire-label">{label}<span data-show="required" class="wire-required"> *</span></span><input name="{name}" value="{value}" placeholder="{placeholder}" type="{type}" required="{required}" disabled="{disabled}" readonly="{readonly}" aria-invalid="{error ? 'true' : 'false'}" class="wire-input" /><span data-show="help && !error" class="wire-field-message wire-field-message--help">{help}</span><span data-show="error" role="alert" class="wire-field-message wire-field-message--error">{error}</span><slot /></label> }
-}

.publish/ui/components/AddressPreview.wrn

@@ -1,13 +0,0 @@
-component AddressPreview {
-  props {
-    eyebrow = ""
-    title = ""
-    description = ""
-    href = ""
-    actionLabel = "Learn more"
-    image = ""
-    alt = ""
-    class = ""
-  }
-  view { <article class="wire-card wire-catalog-card {class}">{#if image}<img src="{image}" alt="{alt}" class="wire-catalog-card__image" />{/if}{#if eyebrow}<span class="wire-eyebrow">{eyebrow}</span>{/if}{#if title}<h3>{title}</h3>{/if}{#if description}<p>{description}</p>{/if}<slot />{#if href}<a href="{href}" class="wire-btn wire-btn--ghost">{actionLabel}</a>{/if}</article> }
-}

.publish/ui/components/AdvancedFilterBuilder.wrn

@@ -1,13 +0,0 @@
-component AdvancedFilterBuilder {
-  props {
-    eyebrow = ""
-    title = ""
-    description = ""
-    href = ""
-    actionLabel = "Learn more"
-    image = ""
-    alt = ""
-    class = ""
-  }
-  view { <article class="wire-card wire-catalog-card {class}">{#if image}<img src="{image}" alt="{alt}" class="wire-catalog-card__image" />{/if}{#if eyebrow}<span class="wire-eyebrow">{eyebrow}</span>{/if}{#if title}<h3>{title}</h3>{/if}{#if description}<p>{description}</p>{/if}<slot />{#if href}<a href="{href}" class="wire-btn wire-btn--ghost">{actionLabel}</a>{/if}</article> }
-}

.publish/ui/components/AdvancedSelect.wrn

@@ -0,0 +1,588 @@
+import SelectStyles from "../styles/SelectStyles.wrn"
+
+component AdvancedSelect {
+  outputs {
+    search(payload: { value?: string | number | boolean | null; values?: Array<string | number | boolean | null | object>; sourceEvent?: Event; [key: string]: string | number | boolean | null | object } | string | number | boolean | null)
+    select(payload: { value?: string | number | boolean | null; values?: Array<string | number | boolean | null | object>; sourceEvent?: Event; [key: string]: string | number | boolean | null | object } | string | number | boolean | null)
+    change(payload: { value?: string | number | boolean | null; values?: Array<string | number | boolean | null | object>; sourceEvent?: Event; [key: string]: string | number | boolean | null | object } | string | number | boolean | null)
+    clear(payload: { value?: string | number | boolean | null; values?: Array<string | number | boolean | null | object>; sourceEvent?: Event; [key: string]: string | number | boolean | null | object } | string | number | boolean | null)
+    open(payload: { sourceEvent?: Event; [key: string]: string | number | boolean | null | object })
+    close(payload: { sourceEvent?: Event; [key: string]: string | number | boolean | null | object })
+    load(payload: { sourceEvent?: Event; [key: string]: string | number | boolean | null | object })
+    error(payload: { error: Error | string; sourceEvent?: Event; [key: string]: string | number | boolean | null | object } | Error | string)
+  }
+
+  props {
+    size: string = "default"
+    color: string = "primary"
+    label: string = "Advanced Select"
+    name: string = ""
+    value: string = ""
+    values: unknown[] = []
+    options: unknown[] = []
+    groups: unknown[] = []
+    placeholder: string = "Select an option"
+    placeholderIcon: string = ""
+    searchPlaceholder: string = "Search options…"
+    multiple: boolean = false
+    searchable: boolean = true
+    defaultOpen: boolean = false
+    clearable: boolean = true
+    allowEmpty: boolean = true
+    tags: boolean = false
+    disabled: boolean = false
+    required: boolean = false
+    invalid: boolean = false
+    validationMessage: string = ""
+    helpText: string = ""
+    loading: boolean = false
+    loadingLabel: string = "Loading options…"
+    emptyLabel: string = "No options found"
+    selectedOptionsLabel: string = "Selected options"
+    clearLabel: string = "Clear selection"
+    createLabel: string = "Create"
+    loadMoreLabel: string = "Load more"
+    searchMode: string = "contains"
+    searchFields: string = "label,description"
+    minSearchLength: number = 0
+    searchResultLimit: number = 0
+    maxSelections: number = 0
+    showCounter: boolean = false
+    counterTemplate: string = "{selected} selected"
+    optionTemplate: string = "default"
+    selectedTemplate: string = "default"
+    closeOnSelect: boolean = true
+    scrollToSelected: boolean = true
+    fixed: boolean = false
+    placement: string = "bottom"
+    remote: boolean = false
+    remoteUrl: string = ""
+    remoteQueryParam: string = "q"
+    remoteDebounce: number = 250
+    remoteAutoLoad: boolean = true
+    infinite: boolean = false
+    hasMore: boolean = false
+    page: number = 1
+    class: string = ""
+  }
+
+  state open = defaultOpen
+  state query: string = ""
+  state activeIndex: number = -1
+  state selectedValue = value
+  state selectedValues = values
+
+  functions {
+    shared function allOptions() {
+      return [...groups.flatMap((group) => group.options || []), ...options]
+    }
+
+    shared function searchableText(option) {
+      return ((option.label || "") + " " + (option.description || "")).toLowerCase()
+    }
+
+    shared function matches(option) {
+      if (!query || query.length < Number(minSearchLength || 0)) {
+        return true
+      }
+      if (searchMode === "startsWith") {
+        return searchableText(option).startsWith(query.toLowerCase())
+      }
+      if (searchMode === "exact") {
+        return searchableText(option) === query.toLowerCase()
+      }
+      return searchableText(option).includes(query.toLowerCase())
+    }
+
+    shared function matchingOptions(list) {
+      return list.filter((option) => matches(option))
+    }
+
+    shared function visibleOptions(list) {
+      if (searchResultLimit > 0) {
+        return matchingOptions(list).slice(0, Number(searchResultLimit))
+      }
+      return matchingOptions(list)
+    }
+
+    shared function flatVisibleOptions() {
+      return visibleOptions(allOptions())
+    }
+
+    shared function isSelected(option) {
+      return (
+        multiple
+        ? selectedValues.includes(option.value)
+        : selectedValue === option.value
+      )
+    }
+
+    shared function selectedOptions() {
+      return allOptions().filter((option) => isSelected(option))
+    }
+
+    shared function selectedCount() {
+      return multiple ? selectedValues.length : selectedValue ? 1 : 0
+    }
+
+    shared function counterText() {
+      return (
+        maxSelections
+        ? selectedCount() + " / " + maxSelections + " selected"
+        : selectedCount() + " selected"
+      )
+    }
+
+    shared function selectedText() {
+      return (
+        multiple
+        ? selectedValues.join(", ")
+        : selectedOptions().length
+          ? selectedOptions()[0].label
+          : ""
+      )
+    }
+
+    shared function triggerText() {
+      return selectedCount() ? selectedText() : placeholder
+    }
+
+    shared function canSelect(option) {
+      if (option.disabled) {
+        return false
+      }
+      if (!multiple || isSelected(option)) {
+        return true
+      }
+      if (maxSelections <= 0) {
+        return true
+      }
+      return selectedCount() < maxSelections
+    }
+
+    shared function chooseSingle(option) {
+      if (!canSelect(option)) {
+        return
+      }
+      selectedValue = option.value
+      query = ""
+      if (closeOnSelect) {
+        open = false
+      }
+    }
+
+    shared function chooseMultiple(option) {
+      if (!canSelect(option)) {
+        return
+      }
+      if (isSelected(option)) {
+        selectedValues = selectedValues.filter((item) => item !== option.value)
+      } else {
+        selectedValues = selectedValues.concat([option.value])
+      }
+      query = ""
+    }
+
+    shared function chooseOption(option) {
+      if (multiple) {
+        chooseMultiple(option)
+        return
+      }
+      chooseSingle(option)
+    }
+
+    client function clearSelection(event) {
+      event.stopPropagation()
+      selectedValue = ""
+      selectedValues = []
+      query = ""
+      open = false
+    }
+
+    shared function toggle() {
+      if (disabled) {
+        return;
+      };
+      open = !open;
+      activeIndex = open && flatVisibleOptions().length ? 0 : -1;
+    }
+
+    shared function moveActive(direction) {
+      if (!flatVisibleOptions().length) {
+        return
+      }
+      activeIndex = (activeIndex + direction + flatVisibleOptions().length) % flatVisibleOptions().length
+    }
+
+    client function handleKeydown(event) {
+      if (disabled) {
+        return
+      }
+      if (event.key === "ArrowDown") {
+        event.preventDefault()
+        if (!open) {
+          open = true
+        }
+        moveActive(1)
+      } else if (event.key === "ArrowUp") {
+        event.preventDefault()
+        if (!open) {
+          open = true
+        }
+        moveActive(-1)
+      } else if (event.key === "Enter" || event.key === " ") {
+        event.preventDefault()
+        if (!open) {
+          open = true
+        } else if (activeIndex >= 0) {
+          chooseOption(flatVisibleOptions()[activeIndex])
+        }
+      } else if (event.key === "Escape") {
+        open = false
+      } else if (event.key === "Home" && open) {
+        event.preventDefault()
+        activeIndex = 0
+      } else if (event.key === "End" && open) {
+        event.preventDefault()
+        activeIndex = flatVisibleOptions().length - 1
+      }
+    }
+
+    shared function optionIndex(option) {
+      return flatVisibleOptions().findIndex((item) => item.value === option.value)
+    }
+  }
+
+  view {
+    <div
+      class="wrn-component wrn-component--color-{color} wrn-component--size-{size} wrn-next--advanced-select {open ? 'wrn-next--open' : ''} {fixed ? 'wrn-next--advanced-select-fixed' : ''} {invalid ? 'wrn-next--invalid' : ''} {disabled ? 'wrn-next--disabled' : ''} {class}"
+      data-placement="{placement}"
+      data-search-mode="{searchMode}"
+      data-remote="{remote ? 'true' : 'false'}"
+      data-remote-url="{remoteUrl}"
+      data-remote-query-param="{remoteQueryParam}"
+      data-remote-debounce="{remoteDebounce}"
+      data-remote-auto-load="{remoteAutoLoad ? 'true' : 'false'}"
+      data-infinite="{infinite ? 'true' : 'false'}"
+      data-page="{page}"
+      data-wrn-select
+      @focusout="if (!event.currentTarget.contains(event.relatedTarget)) { open = false }"
+    >
+      <div class="wrn-next__row">
+        <label id="{name}-label" for="{name}-trigger">{label}</label>
+        <small data-show="showCounter" data-text="counterText()">{counterText()}</small>
+      </div>
+
+      <div class="wrn-next__select-control">
+        <button
+          {...attrs}
+          id="{name}-trigger"
+          type="button"
+          class="wrn-next__select-trigger"
+          role="combobox"
+          aria-haspopup="listbox"
+          aria-expanded="{open}"
+          aria-controls="{name}-listbox"
+          aria-labelledby="{name}-label"
+          aria-invalid="{invalid}"
+          disabled="{disabled}"
+          @click="toggle()"
+          @keydown="handleKeydown(event)"
+        >
+          <span class="wrn-next__select-value">
+            <span data-show="!multiple" data-text="triggerText()">{triggerText()}</span>
+            <span
+              data-show="multiple && selectedTemplate === 'count' && selectedCount() > 0"
+              data-text="selectedCount() + ' selected'"
+            >{selectedCount()} selected</span>
+            <span
+              data-show="multiple && selectedTemplate === 'text' && selectedCount() > 0"
+              data-text="selectedText()"
+            >{selectedText()}</span>
+            <span
+              class="wrn-next__select-tags"
+              aria-label="{selectedOptionsLabel}"
+              data-show="multiple && selectedTemplate !== 'count' && selectedTemplate !== 'text' && selectedCount() > 0"
+            >
+              {#each allOptions() as option}
+                <span data-show="isSelected(option)">
+                  {#if optionTemplate === "icon" && option.icon}<i class="{option.icon}" aria-hidden="true"></i>{/if}
+                  {#if optionTemplate === "avatar" && option.avatar}<img src="{option.avatar}" alt="" />{/if}
+                  {#if optionTemplate === "color" && option.color}<i class="wrn-next__color-dot" style="--option-color: {option.color}"></i>{/if}
+                  {option.label}
+                </span>
+              {/each}
+            </span>
+            <span data-show="multiple && selectedCount() === 0">
+              {#if placeholderIcon}<i class="{placeholderIcon}" aria-hidden="true"></i>{/if}
+              <span class="wrn-next__placeholder">{placeholder}</span>
+            </span>
+          </span>
+          <span
+            class="wrn-next__select-chevron icon-[lucide--chevrons-up-down]"
+            aria-hidden="true"
+          ></span>
+        </button>
+
+        <button
+          type="button"
+          class="wrn-next__clear-select"
+          data-show="clearable && allowEmpty && selectedCount() > 0 && !disabled"
+          aria-label="{clearLabel}"
+          title="{clearLabel}"
+          @click="clearSelection(event)"
+        >
+          <span class="icon-[lucide--x]" aria-hidden="true"></span>
+        </button>
+      </div>
+
+      <div
+        class="wrn-next__select-dropdown {fixed ? 'wrn-next__select-dropdown--fixed' : ''}"
+        data-show="open"
+        style="{open ? '' : 'display: none'}"
+      >
+          {#if searchable}
+            <label class="wrn-next__select-search">
+              <span class="wrn-visually-hidden">{searchPlaceholder}</span>
+              <span class="wrn-next__search-icon" aria-hidden="true">⌕</span>
+              <input
+                type="search"
+                value="{query}"
+                placeholder="{searchPlaceholder}"
+                autocomplete="off"
+                @input="query = event.target.value; activeIndex = flatVisibleOptions().length ? 0 : -1"
+                @keydown="handleKeydown(event)"
+              />
+            </label>
+          {/if}
+
+          <div
+            class="wrn-next__select-message"
+            data-show="remote && query.length !== 0 && query.length < minSearchLength"
+          >Enter at least {minSearchLength} characters.</div>
+          <div class="wrn-next__select-message" data-show="loading" role="status">
+            <i class="wrn-spinner wrn-spinner--inline" aria-hidden="true"></i>
+            {loadingLabel}
+          </div>
+            <div
+              id="{name}-listbox"
+              class="wrn-next__select-list"
+              data-show="(!remote || (query.length === 0 && remoteAutoLoad) || query.length >= minSearchLength) && !loading"
+              role="listbox"
+              aria-multiselectable="{multiple}"
+            >
+              {#each groups as group}
+                {#if visibleOptions(group.options || []).length}
+                  <div class="wrn-next__option-group" role="group" aria-label="{group.label}">
+                    <div class="wrn-next__group-label">{group.label}</div>
+                    {#each group.options || [] as option}
+                      <button
+                        type="button"
+                        class="wrn-next__select-option {isSelected(option) ? 'wrn-next__select-option--selected' : ''} {optionIndex(option) === activeIndex ? 'wrn-next__select-option--active' : ''}"
+                        data-option-value="{option.value}"
+                        data-show="matches(option)"
+                        role="option"
+                        aria-selected="{isSelected(option)}"
+                        disabled="{!canSelect(option)}"
+                        @mouseenter="activeIndex = optionIndex(option)"
+                        @click="chooseOption(option)"
+                      >
+                        {#if optionTemplate === "icon" && option.icon}<i class="{option.icon}" aria-hidden="true"></i>{/if}
+                        {#if optionTemplate === "avatar" && option.avatar}<img src="{option.avatar}" alt="" />{/if}
+                        {#if optionTemplate === "color" && option.color}<i class="wrn-next__color-dot" style="--option-color: {option.color}"></i>{/if}
+                        <span><strong>{option.label}</strong>{#if option.description}<small>{option.description}</small>{/if}</span>
+                        <i
+                          class="wrn-next__check icon-[lucide--check]"
+                          data-show="isSelected(option)"
+                          aria-hidden="true"
+                        ></i>
+                      </button>
+                    {/each}
+                  </div>
+                {/if}
+              {/each}
+
+              {#each options as option}
+                <button
+                  type="button"
+                  class="wrn-next__select-option {isSelected(option) ? 'wrn-next__select-option--selected' : ''} {optionIndex(option) === activeIndex ? 'wrn-next__select-option--active' : ''}"
+                  data-option-value="{option.value}"
+                  data-show="matches(option)"
+                  role="option"
+                  aria-selected="{isSelected(option)}"
+                  disabled="{!canSelect(option)}"
+                  @mouseenter="activeIndex = optionIndex(option)"
+                  @click="chooseOption(option)"
+                >
+                  {#if optionTemplate === "icon" && option.icon}<i class="{option.icon}" aria-hidden="true"></i>{/if}
+                  {#if optionTemplate === "avatar" && option.avatar}<img src="{option.avatar}" alt="" />{/if}
+                  {#if optionTemplate === "color" && option.color}<i class="wrn-next__color-dot" style="--option-color: {option.color}"></i>{/if}
+                  <span><strong>{option.label}</strong>{#if option.description}<small>{option.description}</small>{/if}</span>
+                  <i
+                    class="wrn-next__check icon-[lucide--check]"
+                    data-show="isSelected(option)"
+                    aria-hidden="true"
+                  ></i>
+                </button>
+              {/each}
+
+              {#if !loading && !flatVisibleOptions().length}
+                <div class="wrn-next__select-message">{emptyLabel}</div>
+              {/if}
+            </div>
+
+          {#if tags && query && !allOptions().some((option) => option.label.toLowerCase() === query.toLowerCase())}
+            <button type="button" class="wrn-next__create-option">{createLabel} “{query}”</button>
+          {/if}
+          <button
+            type="button"
+            class="wrn-next__load-more"
+            data-wrn-select-load-more
+            data-show="infinite && hasMore"
+          >{loadMoreLabel}</button>
+      </div>
+
+      <input
+        type="hidden"
+        name="{name}"
+        value="{multiple ? selectedValues.join(',') : selectedValue}"
+        required="{required}"
+        aria-describedby="{validationMessage ? `${name}-validation` : helpText ? `${name}-help` : ''}"
+      />
+
+      {#if helpText && !validationMessage}<small id="{name}-help">{helpText}</small>{/if}
+      <small
+        id="{name}-validation"
+        class="wrn-next__validation"
+        data-error="{name}"
+      >{validationMessage}</small>
+    </div>
+    <SelectStyles hidden />
+  }
+
+  style {
+    .wrn-next__row {
+      display: flex;
+      align-items: center;
+      justify-content: space-between;
+      gap: 1rem;
+    }
+
+    .wrn-next__select-search {
+      position: relative;
+      display: block;
+    }
+
+    .wrn-next__select-search input {
+      padding-left: 2.25em;
+    }
+
+    .wrn-next__select-tags {
+      display: flex;
+      flex-wrap: wrap;
+      gap: 0.4rem;
+    }
+
+    .wrn-next__select-tags > span {
+      display: inline-flex;
+      align-items: center;
+      gap: 0.35rem;
+      padding: 0.3rem 0.55rem;
+      border-radius: 999px;
+      color: var(--wrn-component-color);
+      background: color-mix(in srgb, var(--wrn-component-color) 12%, transparent);
+      font-size: 0.75em;
+      font-weight: 700;
+    }
+
+    .wrn-next__select-tags img {
+      width: 1.25rem;
+      height: 1.25rem;
+      border-radius: 50%;
+      object-fit: cover;
+    }
+
+    .wrn-next__select-value {
+      display: flex;
+      min-width: 0;
+      align-items: center;
+      gap: 0.55em;
+    }
+
+    .wrn-next__placeholder {
+      overflow: hidden;
+      color: var(--wrn-color-muted);
+      text-overflow: ellipsis;
+      white-space: nowrap;
+    }
+
+    /* Shared component foundation. */
+
+        .wrn-component {
+          --wrn-component-color: var(--wrn-color-primary);
+          --wrn-component-scale: 1;
+          margin: 0;
+          color: var(--wrn-color-text);
+          font-family: var(--wrn-font-sans, inherit);
+        }
+
+        .wrn-component--color-primary {
+          --wrn-component-color: var(--wrn-color-primary);
+        }
+
+        .wrn-component--color-secondary {
+          --wrn-component-color: var(--wrn-color-secondary);
+        }
+
+        .wrn-component--color-success {
+          --wrn-component-color: var(--wrn-color-success);
+        }
+
+        .wrn-component--color-warning {
+          --wrn-component-color: var(--wrn-color-warning);
+        }
+
+        .wrn-component--color-danger {
+          --wrn-component-color: var(--wrn-color-danger);
+        }
+
+        .wrn-component--color-info {
+          --wrn-component-color: var(--wrn-color-info);
+        }
+
+        .wrn-component--size-xs {
+          --wrn-component-scale: 0.78;
+        }
+
+        .wrn-component--size-sm {
+          --wrn-component-scale: 0.88;
+        }
+
+        .wrn-component--size-default,
+        .wrn-component--size-md {
+          --wrn-component-scale: 1;
+        }
+
+        .wrn-component--size-lg {
+          --wrn-component-scale: 1.14;
+        }
+
+        .wrn-component--size-xl {
+          --wrn-component-scale: 1.28;
+        }
+
+        .wrn-component:not(.wrn-btn) {
+          font-size: calc(1em * var(--wrn-component-scale));
+        }
+
+        .wrn-component :is(a, button, input, select, textarea):focus-visible {
+          outline-color: var(--wrn-component-color);
+        }
+
+        .wrn-component p {
+          margin: 0;
+          color: var(--wrn-color-muted);
+          line-height: 1.6;
+        }
+  }
+}

.publish/ui/components/AlertDialog.wrn

@@ -1,10 +0,0 @@
-component AlertDialog {
-  props {
-    title = ""
-    description = ""
-    open = false
-    closeLabel = "Close"
-    class = ""
-  }
-  view { <div data-show="open" class="wire-overlay wire-catalog-overlay {class}"><section role="dialog" aria-modal="true" aria-label="{title}" class="wire-dialog"><header><h2 data-show="title" class="wire-dialog__title">{title}</h2><p data-show="description" class="wire-dialog__description">{description}</p></header><slot /><button type="button" class="wire-btn wire-btn--ghost">{closeLabel}</button></section></div> }
-}

.publish/ui/components/AmountInput.wrn

@@ -1,16 +0,0 @@
-component AmountInput {
-  props {
-    label = "Amount" 
-    name = ""
-    value = ""
-    placeholder = ""
-    type = "text"
-    required = false
-    disabled = false
-    readonly = false
-    help = ""
-    error = ""
-    class = ""
-  }
-  view { <label class="wire-field wire-catalog-field {class}"><span class="wire-label">{label}<span data-show="required" class="wire-required"> *</span></span><input name="{name}" value="{value}" placeholder="{placeholder}" type="{type}" required="{required}" disabled="{disabled}" readonly="{readonly}" aria-invalid="{error ? 'true' : 'false'}" class="wire-input" /><span data-show="help && !error" class="wire-field-message wire-field-message--help">{help}</span><span data-show="error" role="alert" class="wire-field-message wire-field-message--error">{error}</span><slot /></label> }
-}

.publish/ui/components/AnalyticsDashboardPreview.wrn

@@ -1,15 +0,0 @@
-component AnalyticsDashboardPreview {
-  props {
-    eyebrow = ""
-    title = ""
-    description = ""
-    href = ""
-    actionLabel = "Learn more"
-    image = ""
-    alt = ""
-    class = ""
-  }
-  view {
-    <article class="wire-card wire-catalog-card {class}">{#if image}<img src="{image}" alt="{alt}" class="wire-catalog-card__image" />{:else}<div role="img" aria-label="Communication performance chart trending upward over seven days" class="grid min-h-64 gap-4 rounded-xl border border-slate-200 bg-slate-50 p-5 dark:border-slate-800 dark:bg-slate-950/60"><div class="flex items-center justify-between"><span class="text-sm font-semibold">Delivery trend</span><span class="inline-flex items-center gap-1 text-xs font-bold text-emerald-500"><span class="icon-[lucide--trending-up] size-4" aria-hidden="true"></span>18.4%</span></div><svg viewBox="0 0 600 190" role="presentation" class="h-auto w-full overflow-visible"><defs><linearGradient id="wire-analytics-fill" x1="0" y1="0" x2="0" y2="1"><stop offset="0%" stop-color="currentColor" stop-opacity="0.28"></stop><stop offset="100%" stop-color="currentColor" stop-opacity="0"></stop></linearGradient></defs><g stroke="currentColor" stroke-opacity="0.12"><path d="M0 30H600M0 80H600M0 130H600M0 180H600"></path></g><path d="M0 157 C55 150 70 118 124 126 S205 152 255 103 S342 91 392 98 S470 67 515 74 S566 38 600 30 L600 190 L0 190 Z" fill="url(#wire-analytics-fill)" class="text-violet-500"></path><path d="M0 157 C55 150 70 118 124 126 S205 152 255 103 S342 91 392 98 S470 67 515 74 S566 38 600 30" fill="none" stroke="currentColor" stroke-width="5" stroke-linecap="round" class="text-violet-500"></path><g fill="currentColor" class="text-violet-500"><circle cx="124" cy="126" r="5"></circle><circle cx="255" cy="103" r="5"></circle><circle cx="392" cy="98" r="5"></circle><circle cx="515" cy="74" r="5"></circle><circle cx="600" cy="30" r="6"></circle></g></svg><div class="flex justify-between text-[0.6875rem] text-slate-500"><span>Mon</span><span>Tue</span><span>Wed</span><span>Thu</span><span>Fri</span><span>Sat</span><span>Sun</span></div></div>{/if}{#if eyebrow}<span class="wire-eyebrow">{eyebrow}</span>{/if}{#if title}<h3>{title}</h3>{/if}{#if description}<p>{description}</p>{/if}<slot />{#if href}<a href="{href}" class="wire-btn wire-btn--ghost">{actionLabel}</a>{/if}</article>
-  }
-}

.publish/ui/components/AnchorNavigation.wrn

@@ -1,10 +0,0 @@
-component AnchorNavigation {
-  props {
-    eyebrow = ""
-    title = ""
-    description = ""
-    align = "start"
-    class = ""
-  }
-  view { <section class="wire-catalog-section wire-text--{align} {class}"><header data-show="eyebrow || title || description"><span data-show="eyebrow" class="wire-eyebrow">{eyebrow}</span><h2 data-show="title">{title}</h2><p data-show="description" class="wire-muted">{description}</p></header><slot /></section> }
-}

.publish/ui/components/AnnouncementBar.wrn

@@ -1,96 +0,0 @@
-component AnnouncementBar {
-    props {
-        class: string = ""
-        badge: string = "New"
-        message: string = "WrNexus Organizations is now available."
-        description: string = "Build secure multi-tenant applications with teams, roles, domains, and enterprise SSO."
-        href: string = "/organizations"
-        actionLabel: string = "Explore organizations"
-        ariaLabel: string = "Announcement"
-        badgeIcon: string = "icon-[lucide--sparkles]"
-        actionIcon: string = "icon-[lucide--arrow-right]"
-        dismissLabel: string = "Dismiss announcement"
-        showBadge: boolean = true
-        showDescription: boolean = true
-        showAction: boolean = true
-        dismissible: boolean = true
-    }
-
-    state visible = true
-
-    view {
-        <aside
-            role="region"
-            aria-label="{ariaLabel}"
-            class="relative z-[70] overflow-hidden border-b border-indigo-200 bg-indigo-50 text-slate-900 dark:border-indigo-500/20 dark:bg-indigo-500/10 dark:text-white {class}"
-            class:hidden="!visible"
-        >
-            <!-- Decorative background -->
-            <div
-                aria-hidden="true"
-                class="pointer-events-none absolute inset-0 overflow-hidden"
-            >
-                <div class="absolute -left-20 -top-24 h-40 w-40 rounded-full bg-indigo-300/30 blur-3xl dark:bg-indigo-500/10"></div>
-
-                <div class="absolute -right-20 -bottom-24 h-40 w-40 rounded-full bg-violet-300/30 blur-3xl dark:bg-violet-500/10"></div>
-            </div>
-
-            <div
-                class="relative flex min-h-11 w-full items-center justify-between gap-4 px-4 py-2.5 sm:px-6 lg:px-10 xl:px-12"
-            >
-                <div class="flex min-w-0 flex-1 items-center justify-center gap-3">
-                    <!-- Badge -->
-                    <span data-show="showBadge"
-                        class="hidden shrink-0 items-center gap-1.5 rounded-full bg-indigo-600 px-2.5 py-1 text-[10px] font-bold uppercase tracking-[0.12em] text-white shadow-sm sm:inline-flex"
-                    >
-                        <span class="{badgeIcon} h-3 w-3" aria-hidden="true" ></span>
-
-                        {badge}
-                    </span>
-
-                    <!-- Message -->
-                    <p
-                        class="min-w-0 text-center text-xs font-medium leading-5 text-slate-700 dark:text-slate-300 sm:text-sm"
-                    >
-                        <span class="font-semibold text-slate-950 dark:text-white">
-                            {message}
-                        </span>
-
-                        <span data-show="showDescription" class="hidden md:inline">
-                            {description}
-                        </span>
-                    </p>
-
-                    <!-- CTA -->
-                    <a data-show="showAction"
-                        href="{href}"
-                        class="group hidden shrink-0 items-center gap-1.5 text-xs font-bold text-indigo-700 transition hover:text-indigo-900 dark:text-indigo-300 dark:hover:text-indigo-200 sm:inline-flex"
-                    >
-                        {actionLabel}
-
-                        <span class="{actionIcon} h-3.5 w-3.5 transition-transform group-hover:translate-x-0.5" aria-hidden="true" ></span>
-                    </a>
-                </div>
-
-                <!-- Mobile CTA -->
-                <a data-show="showAction"
-                    href="{href}"
-                    aria-label="{actionLabel}"
-                    class="grid h-8 w-8 shrink-0 place-items-center rounded-lg bg-indigo-100 text-indigo-700 transition hover:bg-indigo-200 dark:bg-indigo-500/15 dark:text-indigo-300 dark:hover:bg-indigo-500/25 sm:hidden"
-                >
-                    <span class="icon-[lucide--arrow-up-right] h-4 w-4" aria-hidden="true" ></span>
-                </a>
-
-                <!-- Close -->
-                <button data-show="dismissible"
-                    type="button"
-                    @click="visible = false"
-                    aria-label="{dismissLabel}"
-                    class="grid h-8 w-8 shrink-0 place-items-center rounded-lg text-slate-500 transition hover:bg-indigo-100 hover:text-slate-950 focus:outline-none focus-visible:ring-2 focus-visible:ring-indigo-500 dark:text-slate-400 dark:hover:bg-white/10 dark:hover:text-white"
-                >
-                    <span class="icon-[lucide--x] h-4 w-4" aria-hidden="true" ></span>
-                </button>
-            </div>
-        </aside>
-    }
-}

.publish/ui/components/ApartmentInput.wrn

@@ -1,16 +0,0 @@
-component ApartmentInput {
-  props {
-    label = "Apartment" 
-    name = ""
-    value = ""
-    placeholder = ""
-    type = "text"
-    required = false
-    disabled = false
-    readonly = false
-    help = ""
-    error = ""
-    class = ""
-  }
-  view { <label class="wire-field wire-catalog-field {class}"><span class="wire-label">{label}<span data-show="required" class="wire-required"> *</span></span><input name="{name}" value="{value}" placeholder="{placeholder}" type="{type}" required="{required}" disabled="{disabled}" readonly="{readonly}" aria-invalid="{error ? 'true' : 'false'}" class="wire-input" /><span data-show="help && !error" class="wire-field-message wire-field-message--help">{help}</span><span data-show="error" role="alert" class="wire-field-message wire-field-message--error">{error}</span><slot /></label> }
-}

.publish/ui/components/ApiAuthenticationNotice.wrn

@@ -1,11 +0,0 @@
-component ApiAuthenticationNotice {
-  props {
-    label = "ApiAuthentication" 
-    title = ""
-    description = ""
-    value = ""
-    variant = "default"
-    class = ""
-  }
-  view { <aside role="status" class="wire-alert wire-alert--{variant} wire-catalog-feedback {class}"><strong data-show="title || label">{title || label}</strong><span data-show="value" class="wire-badge wire-badge--{variant}">{value}</span><p data-show="description">{description}</p><slot /></aside> }
-}

.publish/ui/components/ApiEndpointCard.wrn

@@ -1,39 +0,0 @@
-component ApiEndpointCard {
-    props {
-        class = ""
-        method = "GET"
-        path = "/api/example"
-        eyebrow = ""
-        title = ""
-        description = ""
-        href = ""
-        actionLabel = "View endpoint"
-    }
-
-    view {
-        <article
-            class="rounded-2xl border border-slate-200 bg-white p-5 dark:border-slate-800 dark:bg-slate-900 {class}"
-        >
-            <div class="flex flex-wrap items-center gap-3" >
-                <span
-                    class="rounded-lg px-2.5 py-1 font-mono text-xs font-bold {method === 'GET' ? 'bg-emerald-100 text-emerald-700' : method === 'POST' ? 'bg-blue-100 text-blue-700' : method === 'DELETE' ? 'bg-red-100 text-red-700' : 'bg-amber-100 text-amber-700'}"
-                >
-                    {method}
-                </span>
-                <code class="text-sm font-semibold">
-                    {title || path}
-                </code>
-            </div>
-            <p
-                data-show="description"
-                class="mt-3 text-sm text-slate-500"
-            >
-                {description}
-            </p>
-            <div class="mt-4">
-                <slot />
-            </div>
-            {#if href}<a href="{href}" class="mt-5 inline-flex items-center gap-2 text-sm font-bold text-violet-600 dark:text-violet-300">{actionLabel}<span class="icon-[lucide--arrow-right] size-4" aria-hidden="true"></span></a>{/if}
-        </article>
-    }
-}

.publish/ui/components/ApiErrorExample.wrn

@@ -1,13 +0,0 @@
-component ApiErrorExample {
-  props {
-    eyebrow = ""
-    title = ""
-    description = ""
-    href = ""
-    actionLabel = "Learn more"
-    image = ""
-    alt = ""
-    class = ""
-  }
-  view { <article class="wire-card wire-catalog-card {class}">{#if image}<img src="{image}" alt="{alt}" class="wire-catalog-card__image" />{/if}{#if eyebrow}<span class="wire-eyebrow">{eyebrow}</span>{/if}{#if title}<h3>{title}</h3>{/if}{#if description}<p>{description}</p>{/if}<slot />{#if href}<a href="{href}" class="wire-btn wire-btn--ghost">{actionLabel}</a>{/if}</article> }
-}

.publish/ui/components/ApiHeaderTable.wrn

@@ -1,10 +0,0 @@
-component ApiHeaderTable {
-  props {
-    title = ""
-    description = ""
-    empty = false
-    emptyText = "No items available."
-    class = ""
-  }
-  view { <section class="wire-catalog-collection {class}"><header data-show="title || description"><h2 data-show="title">{title}</h2><p data-show="description">{description}</p></header><div data-show="!empty" role="list" class="wire-catalog-collection__items"><slot /></div><p data-show="empty" role="status" class="wire-muted">{emptyText}</p></section> }
-}

.publish/ui/components/ApiKeyCreateDialog.wrn

@@ -1,10 +0,0 @@
-component ApiKeyCreateDialog {
-  props {
-    title = ""
-    description = ""
-    open = false
-    closeLabel = "Close"
-    class = ""
-  }
-  view { <div data-show="open" class="wire-overlay wire-catalog-overlay {class}"><section role="dialog" aria-modal="true" aria-label="{title}" class="wire-dialog"><header><h2 data-show="title" class="wire-dialog__title">{title}</h2><p data-show="description" class="wire-dialog__description">{description}</p></header><slot /><button type="button" class="wire-btn wire-btn--ghost">{closeLabel}</button></section></div> }
-}

.publish/ui/components/ApiKeyDisplay.wrn

@@ -1,13 +0,0 @@
-component ApiKeyDisplay {
-  props {
-    eyebrow = ""
-    title = ""
-    description = ""
-    href = ""
-    actionLabel = "Learn more"
-    image = ""
-    alt = ""
-    class = ""
-  }
-  view { <article class="wire-card wire-catalog-card {class}">{#if image}<img src="{image}" alt="{alt}" class="wire-catalog-card__image" />{/if}{#if eyebrow}<span class="wire-eyebrow">{eyebrow}</span>{/if}{#if title}<h3>{title}</h3>{/if}{#if description}<p>{description}</p>{/if}<slot />{#if href}<a href="{href}" class="wire-btn wire-btn--ghost">{actionLabel}</a>{/if}</article> }
-}

.publish/ui/components/ApiKeyInput.wrn

@@ -1,16 +0,0 @@
-component ApiKeyInput {
-  props {
-    label = "ApiKey" 
-    name = ""
-    value = ""
-    placeholder = ""
-    type = "text"
-    required = false
-    disabled = false
-    readonly = false
-    help = ""
-    error = ""
-    class = ""
-  }
-  view { <label class="wire-field wire-catalog-field {class}"><span class="wire-label">{label}<span data-show="required" class="wire-required"> *</span></span><input name="{name}" value="{value}" placeholder="{placeholder}" type="{type}" required="{required}" disabled="{disabled}" readonly="{readonly}" aria-invalid="{error ? 'true' : 'false'}" class="wire-input" /><span data-show="help && !error" class="wire-field-message wire-field-message--help">{help}</span><span data-show="error" role="alert" class="wire-field-message wire-field-message--error">{error}</span><slot /></label> }
-}

.publish/ui/components/ApiMethodBadge.wrn

@@ -1,11 +0,0 @@
-component ApiMethodBadge {
-  props {
-    label = "ApiMethod" 
-    title = ""
-    description = ""
-    value = ""
-    variant = "default"
-    class = ""
-  }
-  view { <aside role="status" class="wire-alert wire-alert--{variant} wire-catalog-feedback {class}"><strong data-show="title || label">{title || label}</strong><span data-show="value" class="wire-badge wire-badge--{variant}">{value}</span><p data-show="description">{description}</p><slot /></aside> }
-}

.publish/ui/components/ApiParameterTable.wrn

@@ -1,10 +0,0 @@
-component ApiParameterTable {
-  props {
-    title = ""
-    description = ""
-    empty = false
-    emptyText = "No items available."
-    class = ""
-  }
-  view { <section class="wire-catalog-collection {class}"><header data-show="title || description"><h2 data-show="title">{title}</h2><p data-show="description">{description}</p></header><div data-show="!empty" role="list" class="wire-catalog-collection__items"><slot /></div><p data-show="empty" role="status" class="wire-muted">{emptyText}</p></section> }
-}

.publish/ui/components/ApiRateLimitNotice.wrn

@@ -1,11 +0,0 @@
-component ApiRateLimitNotice {
-  props {
-    label = "ApiRateLimit" 
-    title = ""
-    description = ""
-    value = ""
-    variant = "default"
-    class = ""
-  }
-  view { <aside role="status" class="wire-alert wire-alert--{variant} wire-catalog-feedback {class}"><strong data-show="title || label">{title || label}</strong><span data-show="value" class="wire-badge wire-badge--{variant}">{value}</span><p data-show="description">{description}</p><slot /></aside> }
-}

.publish/ui/components/ApiRequestExample.wrn

@@ -1,13 +0,0 @@
-component ApiRequestExample {
-  props {
-    eyebrow = ""
-    title = ""
-    description = ""
-    href = ""
-    actionLabel = "Learn more"
-    image = ""
-    alt = ""
-    class = ""
-  }
-  view { <article class="wire-card wire-catalog-card {class}">{#if image}<img src="{image}" alt="{alt}" class="wire-catalog-card__image" />{/if}{#if eyebrow}<span class="wire-eyebrow">{eyebrow}</span>{/if}{#if title}<h3>{title}</h3>{/if}{#if description}<p>{description}</p>{/if}<slot />{#if href}<a href="{href}" class="wire-btn wire-btn--ghost">{actionLabel}</a>{/if}</article> }
-}

.publish/ui/components/ApiResponseExample.wrn

@@ -1,13 +0,0 @@
-component ApiResponseExample {
-  props {
-    eyebrow = ""
-    title = ""
-    description = ""
-    href = ""
-    actionLabel = "Learn more"
-    image = ""
-    alt = ""
-    class = ""
-  }
-  view { <article class="wire-card wire-catalog-card {class}">{#if image}<img src="{image}" alt="{alt}" class="wire-catalog-card__image" />{/if}{#if eyebrow}<span class="wire-eyebrow">{eyebrow}</span>{/if}{#if title}<h3>{title}</h3>{/if}{#if description}<p>{description}</p>{/if}<slot />{#if href}<a href="{href}" class="wire-btn wire-btn--ghost">{actionLabel}</a>{/if}</article> }
-}

.publish/ui/components/ApiSchemaTable.wrn

@@ -1,10 +0,0 @@
-component ApiSchemaTable {
-  props {
-    title = ""
-    description = ""
-    empty = false
-    emptyText = "No items available."
-    class = ""
-  }
-  view { <section class="wire-catalog-collection {class}"><header data-show="title || description"><h2 data-show="title">{title}</h2><p data-show="description">{description}</p></header><div data-show="!empty" role="list" class="wire-catalog-collection__items"><slot /></div><p data-show="empty" role="status" class="wire-muted">{emptyText}</p></section> }
-}

.publish/ui/components/ApiSchemaViewer.wrn

@@ -1,13 +0,0 @@
-component ApiSchemaViewer {
-  props {
-    eyebrow = ""
-    title = ""
-    description = ""
-    href = ""
-    actionLabel = "Learn more"
-    image = ""
-    alt = ""
-    class = ""
-  }
-  view { <article class="wire-card wire-catalog-card {class}">{#if image}<img src="{image}" alt="{alt}" class="wire-catalog-card__image" />{/if}{#if eyebrow}<span class="wire-eyebrow">{eyebrow}</span>{/if}{#if title}<h3>{title}</h3>{/if}{#if description}<p>{description}</p>{/if}<slot />{#if href}<a href="{href}" class="wire-btn wire-btn--ghost">{actionLabel}</a>{/if}</article> }
-}