# WRNexusJS 0.4.0

## Package platform

- Added automatic package plugin discovery from application dependencies and workspaces.
- Added package-owned components, client runtimes, assets, styles, routes, middleware, database migrations, and DevToolbar panels.
- Added duplicate/collision validation and strict discovery in development, build, doctor, and inspect flows.
- Added production content-hashed client runtimes, content-addressed package asset storage with stable public URLs, and page-scoped runtime injection.
- Added development bundling for TypeScript package runtimes and package-source HMR.
- Added CSR package runtime mount/unmount lifecycle.

## CLI and diagnostics

- Added `wrnexus inspect packages|plugins|routes|assets|runtimes|styles|migrations|bundle`.
- Added `wrnexus generate system <name>`.
- Expanded production build reports with all route types, plugins, runtimes, assets, component directories, and package migrations.
- Added the 0.4 application migration and release verification scripts.
- Fixed duplicate historical migration IDs.

## CAPTCHA

- Removed manual `captcha.js` copying and script inclusion.
- Removed duplicated CAPTCHA components from `@wrnexus/ui` and the showcase application.
- CAPTCHA is now discovered from `@wrnexus/captcha` and injected only on pages that render it.
- Preserved all challenge modes, audio, protected-page flow, validated form, compact/normal/big modes, Listen controls, not-robot mode, disturbance controls, and image-style renderers.

## Existing packages

Every existing package received an exported advanced capability layer. See `docs/PACKAGE-UPGRADES-0.4.md` for the package-by-package inventory.

## Fixes

- Package runtime and asset path collisions now fail before serving.
- Production style processing fails closed by default.
- Page ETags now include structured script metadata.
- Package `.wrn` changes invalidate Tailwind output during HMR.
- Package migrations use the same ordered migration contract as application migrations.