# WRNexusJS 0.7.0 R6 - Lint cleanup

R6 fixes the remaining root ESLint findings reported after R5.

## Corrections

- Replaced control-character regular expressions in compiler, security URL validation, and syntax diagnostics with explicit ASCII character-code checks.
- `renderStoreHydration()` now actually uses `serializeForHtml()` for bounded, prototype-safe, HTML-safe hydration JSON.
- SBOM parse errors preserve the original caught error through `ErrorOptions.cause`.
- The workspace repair regression imports `node:process` explicitly.
- ESLint and Prettier ignore local `focus-shims.d.ts` and `tsconfig.focus.json` leftovers until `bun run repair:workspace` removes them.
- Added `validate:0.7` guards for every R6 regression.

## Security behavior retained

URLs containing ASCII whitespace, C0 control characters, or DEL are rejected by `@wrnexus/security`. Static compiler and syntax checks continue to normalize embedded C0 characters before detecting dangerous protocols such as `javascript:`.

## Local validation

Run on the target Bun workspace:

```powershell
bun run repair:workspace
bun install
bun run check
```