WRNexusJS/docs/AUDIT-0.3.md

WRNexusJS 0.3 — Source Audit and Validation Record

Audit scope

The uploaded monorepo was inspected package-by-package before changes. The baseline already contained compiler, SSR/CSR, reactive runtime, routing, gateway/dev-server integration, authentication and authorization packages, validation, database, queue, pub/sub/realtime, upload/storage helpers, UI, DevToolbar, AI tooling, mobile/native support, CLI migrations, and a VS Code extension.

The 0.3 work therefore extends existing contracts instead of replacing them. The baseline archive was committed locally before edits so every source change remained reviewable and reversible.

Compatibility decisions

• Existing @wrnexus/compiler parser/type imports remain available through re-exports from @wrnexus/syntax.
• Existing .wrn roots, directives, route forms, component mounts, SSR output, and gateway configuration remain accepted.
• New hydration, plugin, tenancy, observability, feature-flag, performance-budget, and build-analysis behavior is opt-in.
• The updater backs up the complete app/ directory and important project configuration before writing.
• Source normalization only rewrites simple unquoted dynamic attributes and safely parseable one-line props blocks. Nested-brace expressions are left unchanged for manual review.
• The updater writes a machine-readable changed-file report and is source-idempotent.

Validation completed in this sandbox

• TypeScript static validation across all package source files: passed.
• TypeScript emit of all package sources for runtime smoke testing: passed.
• Compiled smoke tests for syntax/compiler, batched reactivity, computed/effects, typed endpoints, tracing, optional/catch-all routing, plugin ordering/transforms, queue priority/idempotency/workflows/cron, and streaming SSR: passed.
• Generated browser reactive runtime JavaScript syntax check: passed.
• All 913 checked-in .wrn files compile with the 0.3 compiler: passed.
• All 913 checked-in .wrn files remain valid and formatter-idempotent after formatting: passed.
• VS Code Node regression tests: 15 passed, 0 failed.
• VS Code asset/compiler validation: passed; src/compiler.cjs was rebuilt from the 0.3 compiler and shared syntax source.
• 0.3 structural release verification: 30 named packages and 66 migration entries passed.
• Git whitespace/error check: passed.
• Synthetic 0.2.70 to 0.3.0 migration: backup, dependency bump, scripts, new packages, conservative source normalization, report, nested-expression preservation, and second-run source idempotency all passed.

Environment limitations

The sandbox did not contain Bun and could not reach the package registry. Therefore these release gates must still be run in the normal WRNexusJS development environment:

bun install
bun run check
bun run build
cd editors/vscode && bun run check && bun run package

Because VSCE dependencies were unavailable, a new 0.3.0 VSIX binary was not packaged here. The compiler bundle, source, grammar, snippets, metadata, Node tests, and extension validation were updated; run bun run package before Marketplace publishing.

The broad provider-specific parts of infrastructure adapters, advanced cache backends, and motion adapters remain deliberately marked as foundation/experimental in the implementation matrix until they receive real deployment and browser soak tests. They are not advertised as provider-complete.