WRNexusJS/RELEASE_NOTES-0.7.0.md

WRNexusJS 0.7.0 — Security and Performance Foundation

WRNexusJS 0.7.0 implements the framework-wide production hardening program across compiler security, SSR serialization, headers, CSRF, sessions, gateway limits, SSRF, uploads, database instrumentation, static runtime analysis, hydration telemetry, caching, images, HTTP compression, realtime controls, observability, DevToolbar, release gates, SBOM generation, and benchmarks.

New packages

@wrnexus/security, @wrnexus/cache, @wrnexus/image, @wrnexus/observability, and @wrnexus/benchmark.

Compatibility

The release keeps existing 0.6 syntax and component/runtime contracts. The updater adds the new packages and inserts production defaults only when the corresponding top-level config section is absent. Existing custom security, performance, observability, and navigation sections are preserved.

The new default navigation mode is auto: fully static pages ship no framework JavaScript and use native document navigation. Set navigation.mode: "client" to retain client navigation on every route.

Required validation

bun install
bun run validate:0.7
bun run security:framework
bun run benchmark:framework
bun run check

0.7.0 R2 typecheck correction

• Removed leaked focused-typecheck shim files that polluted the root TypeScript program.
• Added a validation gate preventing those temporary files from entering future archives.

0.7.0 R3 workspace-state correction

• Added a safe workspace repair command for stale files that survive ZIP overlays.
• Root TypeScript explicitly excludes focused-typecheck helper declarations.
• Local .env contents are retained while unsafe files are removed from Git tracking.
• Security, release, and package-staging gates now reject tracked typecheck shims.
• Added a Git-backed workspace repair regression test.

0.7.0 R4 Happy DOM test typing correction

• Derived synthetic validation event types from Happy DOM's own dispatchEvent signature.
• Fixed the two remaining strict TypeScript errors in validation tests.
• Clarified workspace check output with would remove wording in dry-run mode.
• Added a validator guard for the Happy DOM event type contract.

R6 lint cleanup

• Removed lint-blocked control-character regexes from URL security paths.
• Enabled secure store hydration serialization.
• Preserved caught SBOM parse errors with cause.
• Fixed Node global handling in the workspace repair test.
• Isolated local focused-typecheck leftovers from lint and formatting.
• Added permanent validate:0.7 regression gates.