WRNexusJS/MANIFEST-0.4.0.md

WRNexusJS 0.4.0 upgrade manifest

This replacement upgrades the uploaded WRNexusJS repository to the 0.4.0 platform baseline and preserves existing APIs where practical.

Compared with the uploaded baseline archive, the final tree contains 45 added files, 214 modified files, and 15 removed obsolete or generated files.

Main platform additions

• Automatic installed/workspace package discovery through package.json wrnexus.plugin
• Package-owned component directories
• Page-scoped client runtimes
• Virtual development assets with secure content types
• Hashed production runtime assets
• Package CSS entries and Tailwind scan sources
• Package page/API/realtime routes and middleware
• Package database migrations
• Package DevToolbar panels
• Dependency ordering, duplicate detection, cycle detection, and safe contribution validation
• Runtime mount/unmount lifecycle during CSR navigation
• Package-aware HMR and build reporting
• wrnexus inspect commands and wrnexus generate system
• 0.4 migration and compatibility tooling

CAPTCHA integration

@wrnexus/captcha is now self-contained and automatically discovered. The old duplicate copies are removed from @wrnexus/ui and the showcase. The package contributes its own component, runtime, Tailwind scan source, and DevToolbar audit.

Developers use:

bun add @wrnexus/captcha

<Captcha type="alphanumeric" action="contact-submit" />

They do not copy captcha.js, add a script tag, or manually register captchaPlugin() for normal use. The runtime is injected only on pages that render a CAPTCHA.

Existing packages upgraded

Package	0.4.0 addition or hardening
@wrnexus/syntax	syntax contract, feature/version metadata, ranges and diagnostics
@wrnexus/compiler	compilation cache, dependency graph, cycle-safe cache implementation
@wrnexus/reactive	watchers, resources, abort/supersession handling and cleanup scopes
@wrnexus/core	service container, lifecycle, health, Problem Details, request IDs and idempotency
@wrnexus/router	named routes, manifests, reverse URLs and app-over-package precedence
@wrnexus/ssr	structured scripts, deduplication, CSP/SRI attributes and streaming output
@wrnexus/csr	lazy package runtime loading and navigation mount/unmount lifecycle
@wrnexus/plugin	discovery and package components/runtimes/assets/styles/routes/middleware/migrations
@wrnexus/dev-server	virtual assets, TS runtime bundling, package HMR and migration integration
@wrnexus/cli	package-aware builds, inspect commands, generator and 0.4 migration
@wrnexus/dev-toolbar	package panels and platform snapshots
@wrnexus/styles	package CSS/source support, package-only styles, token and contrast audits
@wrnexus/test	request/context utilities, JSON/problem assertions, cookies and deferred helpers
@wrnexus/db	migration ordering, cursor pagination, optimistic updates and tenant helpers
@wrnexus/queue	durable stores, claims, priority, retry, dead-letter and processing safety
@wrnexus/pubsub	resilient delivery and expiring defensive presence channels
@wrnexus/uploader	safe object keys, inspection, policy enforcement and signed file tokens
@wrnexus/encryption	versioned payloads and validated rotatable keyrings
@wrnexus/jwt	key-ID signing, validated keyrings and safe decoding
@wrnexus/oauth	state/PKCE storage, refresh, OIDC discovery and safe return URLs
@wrnexus/authz	explainable decisions, owner policies, composition and filtering
@wrnexus/captcha	automatic component/runtime, providers, audio, image styles, gates and guards
@wrnexus/validation	async/cross-field refinements and OpenAPI conversion
@wrnexus/i18n	fallbacks, coverage, formatters and plural messages
@wrnexus/ui	component metadata and reference audits
@wrnexus/helpers	retry, backoff, abortable sleep, timeouts and stable serialization
@wrnexus/tracking	sampled/batched telemetry and reliable sink handling
@wrnexus/ai	provider-neutral client, fallback providers and usage metadata
@wrnexus/mobile	deep links, offline tasks and environment detection
@wrnexus/native	capability manifests, permissions and target inspection

Upgrade and release tooling

• Root/package/service versions: 0.4.0
• VS Code extension version: 0.4.0
• Workspace lock versions updated
• update.ts includes a 0.4.0 migration
• Legacy CAPTCHA scripts are archived by migration rather than silently destroyed
• Obsolete generated/release artifacts removed
• New commands:

bun run verify:0.4
bun run validate:0.4
wrnexus doctor
wrnexus inspect packages .
wrnexus inspect plugins .
wrnexus inspect routes .
wrnexus inspect runtimes .
wrnexus inspect assets .
wrnexus generate system <name>

Documentation included

• README.md
• CHANGELOG-0.4.0.md
• docs/ARCHITECTURE-0.4.md
• docs/PACKAGE-RUNTIMES-0.4.md
• docs/PACKAGE-UPGRADES-0.4.md
• docs/UPGRADE-0.4.md
• docs/TEST-CHECKLIST-0.4.md
• VALIDATION-0.4.0.md
• MANIFEST-0.4.0.md

See VALIDATION-0.4.0.md for the exact checks completed and the required final Bun validation commands.