WRNexusJS/FIXES-0.7.0-R6-LINT-CLEANUP.md

WRNexusJS 0.7.0 R6 - Lint cleanup

R6 fixes the remaining root ESLint findings reported after R5.

Corrections

• Replaced control-character regular expressions in compiler, security URL validation, and syntax diagnostics with explicit ASCII character-code checks.
• renderStoreHydration() now actually uses serializeForHtml() for bounded, prototype-safe, HTML-safe hydration JSON.
• SBOM parse errors preserve the original caught error through ErrorOptions.cause.
• The workspace repair regression imports node:process explicitly.
• ESLint and Prettier ignore local focus-shims.d.ts and tsconfig.focus.json leftovers until bun run repair:workspace removes them.
• Added validate:0.7 guards for every R6 regression.

Security behavior retained

URLs containing ASCII whitespace, C0 control characters, or DEL are rejected by @wrnexus/security. Static compiler and syntax checks continue to normalize embedded C0 characters before detecting dangerous protocols such as javascript:.

Local validation

Run on the target Bun workspace:

bun run repair:workspace
bun install
bun run check