Merge pull request 'ci: use ci-workflows@v1 again' (#66) from ci/pin-v1 into develop

v1 now contains node.yaml publishing (ci-workflows 0e0f145).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

.circleci/config.yml

@@ -1,82 +0,0 @@
----
-
-version: 2.1
-
-orbs:
-  qqq-orb: kingsrook/qqq-orb@0.6.9
-
-workflows:
-
-  test_only:
-    jobs:
-      - qqq-orb/node_test_only:
-          node_version: "24.21"
-          context: [qqq-maven-registry-credentials, build-qqq-sample-app]
-          filters:
-            branches:
-              ignore: /(develop|main|release/.*|hotfix/.*|integration.*)/
-            tags:
-              only: []
-
-  publish_snapshot:
-    jobs:
-      - qqq-orb/node_publish:
-          node_version: "24.21"
-          npm_trusted_publishing: true
-          context: [qqq-maven-registry-credentials, build-qqq-sample-app]
-          branch_type: snapshot
-          filters:
-            branches:
-              only:
-                - develop
-
-  publish_feature:
-    jobs:
-      - qqq-orb/node_publish:
-          node_version: "24.21"
-          npm_trusted_publishing: true
-          context: [qqq-maven-registry-credentials, build-qqq-sample-app]
-          branch_type: feature
-          filters:
-            branches:
-              only:
-                - feature/.*
-            tags:
-              only: [/publish.*/]
-
-  publish_release_candidate:
-    jobs:
-      - qqq-orb/node_publish:
-          node_version: "24.21"
-          npm_trusted_publishing: true
-          context: [qqq-maven-registry-credentials, build-qqq-sample-app]
-          branch_type: release_candidate
-          filters:
-            branches:
-              only:
-                - /release\/.*/
-
-  publish_release:
-    jobs:
-      - qqq-orb/node_publish:
-          node_version: "24.21"
-          npm_trusted_publishing: true
-          context: [qqq-maven-registry-credentials, build-qqq-sample-app]
-          branch_type: release
-          filters:
-            branches:
-              only: [main]
-            tags:
-              only: [/v.*/]
-
-  publish_hotfix_release:
-    jobs:
-      - qqq-orb/node_publish:
-          node_version: "24.21"
-          npm_trusted_publishing: true
-          context: [qqq-maven-registry-credentials, build-qqq-sample-app]
-          branch_type: hotfix
-          filters:
-            branches:
-              only:
-                - /hotfix\/.*/

.eslintignore

@@ -1,3 +1,4 @@
 node_modules
 lib
 coverage
+lib-cjs

.gitea/workflows/build.yaml

@@ -0,0 +1,17 @@
+name: build
+on:
+  push:
+jobs:
+  node:
+    # @main until the owner moves ci-workflows v1 onto the publishing node.yaml; then back to @v1.
+    uses: self:KofTwentyTwo/ci-workflows/.gitea/workflows/node.yaml@v1
+    secrets: inherit
+    with:
+      node-version: '24'
+      commands: |
+        npm run lint
+        npm test
+        npm run prepublishOnly
+      # A vX.Y.Z[-RC.N] tag equal to package.json publishes @qrunio/qqq-frontend-core to the
+      # QRun-IO Gitea npm registry (RC -> dist-tag next). Branches only verify.
+      publish: true

.gitignore

@@ -17,3 +17,4 @@ lib
 # Claude Code local settings
 .claude/
 
+lib-cjs

README.md

@@ -35,6 +35,17 @@ If you want a ready-to-use admin UI, use [qqq-frontend-material-dashboard](https
 npm install @qrunio/qqq-frontend-core
 ```
 
+Releases are published to the QRun-IO Gitea npm registry (release candidates under the `next`
+dist-tag). Point the scope there in `.npmrc`:
+
+```ini
+@qrunio:registry=https://git.kof22.com/api/packages/QRun-IO/npm/
+//git.kof22.com/api/packages/QRun-IO/npm/:_authToken=${GITEA_TOKEN}
+```
+
+To release: set the version (`npm version 0.41.0-RC.1 --no-git-tag-version`), merge, and tag the
+merge commit `v<version>`; CI verifies the tag equals `package.json`, runs the checks and publishes.
+
 ```typescript
 import { QController } from '@qrunio/qqq-frontend-core';
 

docs/npm-publishing.md

@@ -1,12 +1,19 @@
-# npm publishing
-
-CircleCI publishes `@qrunio/qqq-frontend-core` with npm Trusted Publishing using `kingsrook/qqq-orb@0.6.8` and `cimg/node:24.21`. In the package Settings on npmjs.com, add a **CircleCI** trusted publisher with the values below and explicitly allow **npm publish** (the staged-only default does not run this pipeline). Existing workflow branch filters and dist-tags remain in place.
-
-| npm field | Value |
-| --- | --- |
-| Organization ID | `bb329fea-03cd-4fb5-b530-15e85703598d` |
-| Project ID | `5bd1e544-282a-4080-afc1-36ffdebf5487` |
-| Pipeline definition ID | `3bd87740-26e6-5f18-8600-10685a13a81e` |
-| VCS origin | `github.com/QRun-IO/qqq-frontend-core` |
-
-These are public identifiers, not credentials. The job obtains a short-lived npm-audience OIDC identity only for publication, so no new `NPM_TOKEN` is needed. Do not use `npm whoami` or a publish dry run as proof: verify the real immutable version at npm and install it in a clean consumer. Once that succeeds, remove obsolete token access only after checking its other consumers. CircleCI Trusted Publishing currently does not attach npm provenance attestations. See [npm documentation](https://docs.npmjs.com/trusted-publishers/).
+# npm publishing
+
+CircleCI publishes `@qrunio/qqq-frontend-core` with npm Trusted Publishing through the shared `frontend-core` profile in `.qqq-ci.yml`. The canonical caller tracks `kingsrook/qqq-orb@0.8` and uses `cimg/node:24.21`. Publishing logic lives in the orb, not in a repository-specific workflow. In the package Settings on npmjs.com, add a **CircleCI** trusted publisher with the values below and explicitly allow **npm publish** (the staged-only default does not run this pipeline).
+
+Develop snapshots use build-specific versions such as `0.40.28-SNAPSHOT.1234`
+and the npm `snapshot` dist-tag. The version is calculated in the publishing
+workspace; the job does not push a version-only `[skip ci]` commit back to
+`develop`. Required checks therefore stay attached to the source head being
+published. See [version management](version-management.md) and the
+[shared orb policy](https://github.com/QRun-IO/qqq-orb/blob/main/docs/GENERATED-PIPELINES.md#node-snapshot-versions).
+
+| npm field | Value |
+| --- | --- |
+| Organization ID | `bb329fea-03cd-4fb5-b530-15e85703598d` |
+| Project ID | `5bd1e544-282a-4080-afc1-36ffdebf5487` |
+| Pipeline definition ID | `3bd87740-26e6-5f18-8600-10685a13a81e` |
+| VCS origin | `github.com/QRun-IO/qqq-frontend-core` |
+
+These are public identifiers, not credentials. The job obtains a short-lived npm-audience OIDC identity only for publication, so no new `NPM_TOKEN` is needed. Do not use `npm whoami` or a publish dry run as proof: verify the real immutable version at npm and install it in a clean consumer. Once that succeeds, remove obsolete token access only after checking its other consumers. CircleCI Trusted Publishing currently does not attach npm provenance attestations. See [npm documentation](https://docs.npmjs.com/trusted-publishers/).

docs/version-management.md

@@ -1,42 +1,46 @@
-# Version Management
-
-## Current Versions (as of 2026-01-12)
-
-| Package | Version | Registry |
-|---------|---------|----------|
-| `@qrunio/qqq-frontend-core` | 0.40.1-SNAPSHOT | npm |
-| `qqq-frontend-material-dashboard` | 0.40.1-SNAPSHOT | Maven Central |
-| `qqq` (backend) | 0.40.0-SNAPSHOT | Maven Central |
-
-## Frontend vs Backend Versioning
-
-Frontend repos can version independently from the backend. In `qqq-frontend-material-dashboard`:
-
-```xml
-<properties>
-  <revision>0.40.1-SNAPSHOT</revision>      <!-- This artifact's version -->
-  <qqq.version>0.40.0-SNAPSHOT</qqq.version> <!-- Backend dependency version -->
-</properties>
-```
-
-This allows frontend-only releases without requiring a full backend release.
-
-## Version Bump Process
-
-### qqq-frontend-core (npm)
-1. Update `version` in `package.json`
-2. Push to develop branch
-3. CI automatically publishes to npm
-
-### qqq-frontend-material-dashboard (Maven)
-1. Update `revision` property in `pom.xml`
-2. Optionally update `qqq.version` if backend changes needed
-3. Push to develop branch
-4. CI runs Playwright tests + publishes to Maven Central
-
-## CI/CD Orb Behavior
-
-The `kingsrook/qqq-orb` `calculate_version.sh` script:
-- For develop branch with existing SNAPSHOT: keeps current version
-- Only bumps version on release merges or RC versions
-- Each repo manages its own version independently
+# Version Management
+
+## Historical Versions (2026-01-12)
+
+| Package | Version | Registry |
+|---------|---------|----------|
+| `@qrunio/qqq-frontend-core` | 0.40.1-SNAPSHOT | npm |
+| `qqq-frontend-material-dashboard` | 0.40.1-SNAPSHOT | Maven Central |
+| `qqq` (backend) | 0.40.0-SNAPSHOT | Maven Central |
+
+## Frontend vs Backend Versioning
+
+Frontend repos can version independently from the backend. In `qqq-frontend-material-dashboard`:
+
+```xml
+<properties>
+  <revision>0.40.1-SNAPSHOT</revision>      <!-- This artifact's version -->
+  <qqq.version>0.40.0-SNAPSHOT</qqq.version> <!-- Backend dependency version -->
+</properties>
+```
+
+This allows frontend-only releases without requiring a full backend release.
+
+## Version Bump Process
+
+### qqq-frontend-core (npm)
+1. Merge a verified source change to `develop` through the shared required checks.
+2. The orb calculates `MAJOR.MINOR.NEXT_PATCH-SNAPSHOT.CIRCLE_BUILD_NUM` from the source package version and the unique CircleCI job number. For example, source `0.40.27-SNAPSHOT` in job 1234 publishes `0.40.28-SNAPSHOT.1234`.
+3. CI builds and publishes that immutable npm version under the `snapshot` dist-tag. It keeps the source branch unchanged; no snapshot version commit or manual per-build version bump is needed.
+4. Verify the published version and install it in a clean consumer before claiming publication success. CI-only declaration updates may run verification without publishing.
+
+Stable, RC and hotfix publication keep their existing shared orb policies. A
+snapshot publication is not a stable release.
+
+### qqq-frontend-material-dashboard (Maven)
+1. Update `revision` property in `pom.xml`
+2. Optionally update `qqq.version` if backend changes needed
+3. Push to develop branch
+4. CI runs Playwright tests + publishes to Maven Central
+
+## CI/CD Orb Behavior
+
+For Maven projects, the shared orb's `calculate_version.sh` script:
+- For develop branch with existing SNAPSHOT: keeps current version
+- Only bumps version on release merges or RC versions
+- Each repo manages its own version independently

package-lock.json

@@ -1,12 +1,12 @@
 {
    "name": "@qrunio/qqq-frontend-core",
-   "version": "0.40.19-SNAPSHOT",
+   "version": "0.40.27-RC.1",
    "lockfileVersion": 3,
    "requires": true,
    "packages": {
       "": {
          "name": "@qrunio/qqq-frontend-core",
-         "version": "0.40.19-SNAPSHOT",
+         "version": "0.40.27-RC.1",
          "license": "Apache-2.0",
          "dependencies": {
             "axios": "0.34.0",
@@ -29,28 +29,14 @@
             "typescript": "^4.4.4"
          }
       },
-      "node_modules/@ampproject/remapping": {
-         "version": "2.3.0",
-         "resolved": "https://registry.npmjs.org/@ampproject/remapping/-/remapping-2.3.0.tgz",
-         "integrity": "sha512-30iZtAPgz+LTIYoeivqYo853f02jBYSd5uGnGpkFV0M3xOt9aN73erkgYAmZU43x4VfqcnLxW9Kpg3R5LC4YYw==",
-         "dev": true,
-         "license": "Apache-2.0",
-         "dependencies": {
-            "@jridgewell/gen-mapping": "^0.3.5",
-            "@jridgewell/trace-mapping": "^0.3.24"
-         },
-         "engines": {
-            "node": ">=6.0.0"
-         }
-      },
       "node_modules/@babel/code-frame": {
-         "version": "7.27.1",
-         "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.27.1.tgz",
-         "integrity": "sha512-cjQ7ZlQ0Mv3b47hABuTevyTuYN4i+loJKGeV9flcCgIK37cCXRh+L1bd3iBHlynerhQ7BhCkn2BPbQUL+rGqFg==",
+         "version": "7.29.7",
+         "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.7.tgz",
+         "integrity": "sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==",
          "dev": true,
          "license": "MIT",
          "dependencies": {
-            "@babel/helper-validator-identifier": "^7.27.1",
+            "@babel/helper-validator-identifier": "^7.29.7",
             "js-tokens": "^4.0.0",
             "picocolors": "^1.1.1"
          },
@@ -59,9 +45,9 @@
          }
       },
       "node_modules/@babel/compat-data": {
-         "version": "7.28.0",
-         "resolved": "https://registry.npmjs.org/@babel/compat-data/-/compat-data-7.28.0.tgz",
-         "integrity": "sha512-60X7qkglvrap8mn1lh2ebxXdZYtUcpd7gsmy9kLaBJ4i/WdY8PqTSdxyA8qraikqKQK5C1KRBKXqznrVapyNaw==",
+         "version": "7.29.7",
+         "resolved": "https://registry.npmjs.org/@babel/compat-data/-/compat-data-7.29.7.tgz",
+         "integrity": "sha512-locTkQyKvwIEgBzVrn8693ebc97F2U8ZHjbXwDXJ5Fn2TCpNwTlKcaKLkdHop5c/icOFE7qt7Q9JC5hnKNa6Gg==",
          "dev": true,
          "license": "MIT",
          "engines": {
@@ -69,22 +55,22 @@
          }
       },
       "node_modules/@babel/core": {
-         "version": "7.28.3",
-         "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.28.3.tgz",
-         "integrity": "sha512-yDBHV9kQNcr2/sUr9jghVyz9C3Y5G2zUM2H2lo+9mKv4sFgbA8s8Z9t8D1jiTkGoO/NoIfKMyKWr4s6CN23ZwQ==",
+         "version": "7.29.7",
+         "resolved": "https://registry.npmjs.org/@babel/core/-/core-7.29.7.tgz",
+         "integrity": "sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA==",
          "dev": true,
          "license": "MIT",
          "dependencies": {
-            "@ampproject/remapping": "^2.2.0",
-            "@babel/code-frame": "^7.27.1",
-            "@babel/generator": "^7.28.3",
-            "@babel/helper-compilation-targets": "^7.27.2",
-            "@babel/helper-module-transforms": "^7.28.3",
-            "@babel/helpers": "^7.28.3",
-            "@babel/parser": "^7.28.3",
-            "@babel/template": "^7.27.2",
-            "@babel/traverse": "^7.28.3",
-            "@babel/types": "^7.28.2",
+            "@babel/code-frame": "^7.29.7",
+            "@babel/generator": "^7.29.7",
+            "@babel/helper-compilation-targets": "^7.29.7",
+            "@babel/helper-module-transforms": "^7.29.7",
+            "@babel/helpers": "^7.29.7",
+            "@babel/parser": "^7.29.7",
+            "@babel/template": "^7.29.7",
+            "@babel/traverse": "^7.29.7",
+            "@babel/types": "^7.29.7",
+            "@jridgewell/remapping": "^2.3.5",
             "convert-source-map": "^2.0.0",
             "debug": "^4.1.0",
             "gensync": "^1.0.0-beta.2",
@@ -117,14 +103,14 @@
          }
       },
       "node_modules/@babel/generator": {
-         "version": "7.28.3",
-         "resolved": "https://registry.npmjs.org/@babel/generator/-/generator-7.28.3.tgz",
-         "integrity": "sha512-3lSpxGgvnmZznmBkCRnVREPUFJv2wrv9iAoFDvADJc0ypmdOxdUtcLeBgBJ6zE0PMeTKnxeQzyk0xTBq4Ep7zw==",
+         "version": "7.29.8",
+         "resolved": "https://registry.npmjs.org/@babel/generator/-/generator-7.29.8.tgz",
+         "integrity": "sha512-gZbepsdh3WDtgZKWL+vTPh71LSBrm/Y4/QDZBVCcYfmeTEEuoOYwlSy+G1StfJg+/Zy550u/3TATbm7qDbbMtg==",
          "dev": true,
          "license": "MIT",
          "dependencies": {
-            "@babel/parser": "^7.28.3",
-            "@babel/types": "^7.28.2",
+            "@babel/parser": "^7.29.8",
+            "@babel/types": "^7.29.8",
             "@jridgewell/gen-mapping": "^0.3.12",
             "@jridgewell/trace-mapping": "^0.3.28",
             "jsesc": "^3.0.2"
@@ -134,14 +120,14 @@
          }
       },
       "node_modules/@babel/helper-compilation-targets": {
-         "version": "7.27.2",
-         "resolved": "https://registry.npmjs.org/@babel/helper-compilation-targets/-/helper-compilation-targets-7.27.2.tgz",
-         "integrity": "sha512-2+1thGUUWWjLTYTHZWK1n8Yga0ijBz1XAhUXcKy81rd5g6yh7hGqMp45v7cadSbEHc9G3OTv45SyneRN3ps4DQ==",
+         "version": "7.29.7",
+         "resolved": "https://registry.npmjs.org/@babel/helper-compilation-targets/-/helper-compilation-targets-7.29.7.tgz",
+         "integrity": "sha512-wem6WaBj4NaVYVdNhLPPVacES6ZJ+KBBfSkTMD3YZxbP3rm3Di85tJU5ljaUNhaOynt+Aj0xruhYuzQBt8n71g==",
          "dev": true,
          "license": "MIT",
          "dependencies": {
-            "@babel/compat-data": "^7.27.2",
-            "@babel/helper-validator-option": "^7.27.1",
+            "@babel/compat-data": "^7.29.7",
+            "@babel/helper-validator-option": "^7.29.7",
             "browserslist": "^4.24.0",
             "lru-cache": "^5.1.1",
             "semver": "^6.3.1"
@@ -161,9 +147,9 @@
          }
       },
       "node_modules/@babel/helper-globals": {
-         "version": "7.28.0",
-         "resolved": "https://registry.npmjs.org/@babel/helper-globals/-/helper-globals-7.28.0.tgz",
-         "integrity": "sha512-+W6cISkXFa1jXsDEdYA8HeevQT/FULhxzR99pxphltZcVaugps53THCeiWA8SguxxpSp3gKPiuYfSWopkLQ4hw==",
+         "version": "7.29.7",
+         "resolved": "https://registry.npmjs.org/@babel/helper-globals/-/helper-globals-7.29.7.tgz",
+         "integrity": "sha512-3nQVUAtvkKH9zahfWgw96Jc/uFOmjACE1kQz82E2lqWmHBgjzbNlsC22nuQTfahmWeQtTq5nQ/4Nnd2A1wj4zA==",
          "dev": true,
          "license": "MIT",
          "engines": {
@@ -171,29 +157,29 @@
          }
       },
       "node_modules/@babel/helper-module-imports": {
-         "version": "7.27.1",
-         "resolved": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.27.1.tgz",
-         "integrity": "sha512-0gSFWUPNXNopqtIPQvlD5WgXYI5GY2kP2cCvoT8kczjbfcfuIljTbcWrulD1CIPIX2gt1wghbDy08yE1p+/r3w==",
+         "version": "7.29.7",
+         "resolved": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.29.7.tgz",
+         "integrity": "sha512-ejHwrQQYcm9xnTivShn2IDOlIzInN34AXskvq9QicvCtEzq1Vzclu/tKF8Jq1Cg8JG2GL6/EmjgsCT7lXepE3g==",
          "dev": true,
          "license": "MIT",
          "dependencies": {
-            "@babel/traverse": "^7.27.1",
-            "@babel/types": "^7.27.1"
+            "@babel/traverse": "^7.29.7",
+            "@babel/types": "^7.29.7"
          },
          "engines": {
             "node": ">=6.9.0"
          }
       },
       "node_modules/@babel/helper-module-transforms": {
-         "version": "7.28.3",
-         "resolved": "https://registry.npmjs.org/@babel/helper-module-transforms/-/helper-module-transforms-7.28.3.tgz",
-         "integrity": "sha512-gytXUbs8k2sXS9PnQptz5o0QnpLL51SwASIORY6XaBKF88nsOT0Zw9szLqlSGQDP/4TljBAD5y98p2U1fqkdsw==",
+         "version": "7.29.7",
+         "resolved": "https://registry.npmjs.org/@babel/helper-module-transforms/-/helper-module-transforms-7.29.7.tgz",
+         "integrity": "sha512-UPUVSyXbOh627KiCIGQSgwWzGeBKLkaJ9PJEdrngIwMSzxLR4jS4+f1f1jb7VzBbg8nFLaYotvVPFCTqdrmTAg==",
          "dev": true,
          "license": "MIT",
          "dependencies": {
-            "@babel/helper-module-imports": "^7.27.1",
-            "@babel/helper-validator-identifier": "^7.27.1",
-            "@babel/traverse": "^7.28.3"
+            "@babel/helper-module-imports": "^7.29.7",
+            "@babel/helper-validator-identifier": "^7.29.7",
+            "@babel/traverse": "^7.29.7"
          },
          "engines": {
             "node": ">=6.9.0"
@@ -213,9 +199,9 @@
          }
       },
       "node_modules/@babel/helper-string-parser": {
-         "version": "7.27.1",
-         "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.27.1.tgz",
-         "integrity": "sha512-qMlSxKbpRlAridDExk92nSobyDdpPijUq2DW6oDnUqd0iOGxmQjyqhMIihI9+zv4LPyZdRje2cavWPbCbWm3eA==",
+         "version": "7.29.7",
+         "resolved": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.29.7.tgz",
+         "integrity": "sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==",
          "dev": true,
          "license": "MIT",
          "engines": {
@@ -223,9 +209,9 @@
          }
       },
       "node_modules/@babel/helper-validator-identifier": {
-         "version": "7.27.1",
-         "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.27.1.tgz",
-         "integrity": "sha512-D2hP9eA+Sqx1kBZgzxZh0y1trbuU+JoDkiEwqhQ36nodYqJwyEIhPSdMNd7lOm/4io72luTPWH20Yda0xOuUow==",
+         "version": "7.29.7",
+         "resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.29.7.tgz",
+         "integrity": "sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==",
          "dev": true,
          "license": "MIT",
          "engines": {
@@ -233,9 +219,9 @@
          }
       },
       "node_modules/@babel/helper-validator-option": {
-         "version": "7.27.1",
-         "resolved": "https://registry.npmjs.org/@babel/helper-validator-option/-/helper-validator-option-7.27.1.tgz",
-         "integrity": "sha512-YvjJow9FxbhFFKDSuFnVCe2WxXk1zWc22fFePVNEaWJEu8IrZVlda6N0uHwzZrUM1il7NC9Mlp4MaJYbYd9JSg==",
+         "version": "7.29.7",
+         "resolved": "https://registry.npmjs.org/@babel/helper-validator-option/-/helper-validator-option-7.29.7.tgz",
+         "integrity": "sha512-N9ZErrD+yW5geCDtBqnOoxmR8+tNKiGuxKlDpuJxfsqpa2dFcexaziGAE/qoHLiDDreVNMupxGmSoNlyvsA3gw==",
          "dev": true,
          "license": "MIT",
          "engines": {
@@ -243,27 +229,27 @@
          }
       },
       "node_modules/@babel/helpers": {
-         "version": "7.28.3",
-         "resolved": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.28.3.tgz",
-         "integrity": "sha512-PTNtvUQihsAsDHMOP5pfobP8C6CM4JWXmP8DrEIt46c3r2bf87Ua1zoqevsMo9g+tWDwgWrFP5EIxuBx5RudAw==",
+         "version": "7.29.10",
+         "resolved": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.29.10.tgz",
+         "integrity": "sha512-EMCx3AGZ3WfAl6ht7AyQoPm2Lh+BGYEMdc4Q6Hf7uSCDOZFuLq44qNwL+iaim8VlyYhRAo4X43+weadK8ZB4Yg==",
          "dev": true,
          "license": "MIT",
          "dependencies": {
-            "@babel/template": "^7.27.2",
-            "@babel/types": "^7.28.2"
+            "@babel/template": "^7.29.7",
+            "@babel/types": "^7.29.8"
          },
          "engines": {
             "node": ">=6.9.0"
          }
       },
       "node_modules/@babel/parser": {
-         "version": "7.28.3",
-         "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.28.3.tgz",
-         "integrity": "sha512-7+Ey1mAgYqFAx2h0RuoxcQT5+MlG3GTV0TQrgr7/ZliKsm/MNDxVVutlWaziMq7wJNAz8MTqz55XLpWvva6StA==",
+         "version": "7.29.9",
+         "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.9.tgz",
+         "integrity": "sha512-CjXrNHTnvqBVqHgdBysY3vk2T8tpJHb5/RMeHJBTyVa9xgugCB0CJTx/3oO8RV2QRQP391RWpB7D6hLjm8V9uA==",
          "dev": true,
          "license": "MIT",
          "dependencies": {
-            "@babel/types": "^7.28.2"
+            "@babel/types": "^7.29.8"
          },
          "bin": {
             "parser": "bin/babel-parser.js"
@@ -519,33 +505,33 @@
          }
       },
       "node_modules/@babel/template": {
-         "version": "7.27.2",
-         "resolved": "https://registry.npmjs.org/@babel/template/-/template-7.27.2.tgz",
-         "integrity": "sha512-LPDZ85aEJyYSd18/DkjNh4/y1ntkE5KwUHWTiqgRxruuZL2F1yuHligVHLvcHY2vMHXttKFpJn6LwfI7cw7ODw==",
+         "version": "7.29.7",
+         "resolved": "https://registry.npmjs.org/@babel/template/-/template-7.29.7.tgz",
+         "integrity": "sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg==",
          "dev": true,
          "license": "MIT",
          "dependencies": {
-            "@babel/code-frame": "^7.27.1",
-            "@babel/parser": "^7.27.2",
-            "@babel/types": "^7.27.1"
+            "@babel/code-frame": "^7.29.7",
+            "@babel/parser": "^7.29.7",
+            "@babel/types": "^7.29.7"
          },
          "engines": {
             "node": ">=6.9.0"
          }
       },
       "node_modules/@babel/traverse": {
-         "version": "7.28.3",
-         "resolved": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.28.3.tgz",
-         "integrity": "sha512-7w4kZYHneL3A6NP2nxzHvT3HCZ7puDZZjFMqDpBPECub79sTtSO5CGXDkKrTQq8ksAwfD/XI2MRFX23njdDaIQ==",
+         "version": "7.29.10",
+         "resolved": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.29.10.tgz",
+         "integrity": "sha512-B3lYAs2nkKskbgQ1nfy8Ma9ao9Q1rntTAQHrzzyDuj+TSO+X3le6PfWwqDvodsb+OumE10eMFfuMCTQSQ5iuIQ==",
          "dev": true,
          "license": "MIT",
          "dependencies": {
-            "@babel/code-frame": "^7.27.1",
-            "@babel/generator": "^7.28.3",
-            "@babel/helper-globals": "^7.28.0",
-            "@babel/parser": "^7.28.3",
-            "@babel/template": "^7.27.2",
-            "@babel/types": "^7.28.2",
+            "@babel/code-frame": "^7.29.7",
+            "@babel/generator": "^7.29.8",
+            "@babel/helper-globals": "^7.29.7",
+            "@babel/parser": "^7.29.9",
+            "@babel/template": "^7.29.7",
+            "@babel/types": "^7.29.8",
             "debug": "^4.3.1"
          },
          "engines": {
@@ -553,14 +539,14 @@
          }
       },
       "node_modules/@babel/types": {
-         "version": "7.28.2",
-         "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.28.2.tgz",
-         "integrity": "sha512-ruv7Ae4J5dUYULmeXw1gmb7rYRz57OWCPM57pHojnLq/3Z1CK2lNSLTCVjxVk1F/TZHwOZZrOWi0ur95BbLxNQ==",
+         "version": "7.29.8",
+         "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.8.tgz",
+         "integrity": "sha512-Vj1jF3cPfxg7OAfoI7QnVKLoILlm2JF9pnVHrX8qx7AHMiYWT+NDAA7jChlNgRS4WTLc/fD1lXLmPixluj+3Gg==",
          "dev": true,
          "license": "MIT",
          "dependencies": {
-            "@babel/helper-string-parser": "^7.27.1",
-            "@babel/helper-validator-identifier": "^7.27.1"
+            "@babel/helper-string-parser": "^7.29.7",
+            "@babel/helper-validator-identifier": "^7.29.7"
          },
          "engines": {
             "node": ">=6.9.0"
@@ -944,6 +930,17 @@
             "@jridgewell/trace-mapping": "^0.3.24"
          }
       },
+      "node_modules/@jridgewell/remapping": {
+         "version": "2.3.5",
+         "resolved": "https://registry.npmjs.org/@jridgewell/remapping/-/remapping-2.3.5.tgz",
+         "integrity": "sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==",
+         "dev": true,
+         "license": "MIT",
+         "dependencies": {
+            "@jridgewell/gen-mapping": "^0.3.5",
+            "@jridgewell/trace-mapping": "^0.3.24"
+         }
+      },
       "node_modules/@jridgewell/resolve-uri": {
          "version": "3.1.2",
          "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
@@ -1850,9 +1847,9 @@
          "license": "MIT"
       },
       "node_modules/baseline-browser-mapping": {
-         "version": "2.11.26",
-         "resolved": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.11.26.tgz",
-         "integrity": "sha512-GLQdD3y6UF8iVuMJl5fHgE4jdn/ua7n+toKfLgNlg3BqQtOZjpy68T8Tup8/wGWZCDlm7KMg7tPb4MPn7oN0TQ==",
+         "version": "2.11.28",
+         "resolved": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.11.28.tgz",
+         "integrity": "sha512-br0LOmjJqr6Rt4AEkadbcNf67Zpo7EPwKsWbjnRrJIa1QYFHQBqM4C7F2WTbV8ahTEcg1Eo+Y0aWjjORInYFyA==",
          "dev": true,
          "license": "Apache-2.0",
          "bin": {
@@ -2027,9 +2024,9 @@
          }
       },
       "node_modules/caniuse-lite": {
-         "version": "1.0.30001813",
-         "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001813.tgz",
-         "integrity": "sha512-zfjJo4rM0+fUomGDBW/xcDjhIwz/210DGvip2MAMDZ8KHcRPnOHmEgHPZP0UHlZoxr8fYKVJOqcORhYQcG4FKQ==",
+         "version": "1.0.30001816",
+         "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001816.tgz",
+         "integrity": "sha512-+8Yx7BXCoqk6IF8yTicjfUR6D/ldJzdlsodlEOiOSPmhK844WIgk67/zIQaGAOxNkZyyvBlrRFnLvqKIoqbAFw==",
          "dev": true,
          "funding": [
             {
@@ -2489,9 +2486,9 @@
          }
       },
       "node_modules/electron-to-chromium": {
-         "version": "1.5.440",
-         "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.440.tgz",
-         "integrity": "sha512-SghDzqdJokdz8zP8YNlvS74+CwLRoUPDGvP/gFA+HrKVw+pOshUAgx8pXR37xl/u16zGae746rFNWvZ/22kU2Q==",
+         "version": "1.5.456",
+         "resolved": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.456.tgz",
+         "integrity": "sha512-8hboqI6xesozteFb8aa7OGknvxUtTeRJLz0FoePysUEh/oWbddykIGdgpEJRbPRg/nIMfBf2DFos+H2MtvJl2A==",
          "dev": true,
          "license": "ISC"
       },
@@ -3404,9 +3401,9 @@
          "license": "ISC"
       },
       "node_modules/follow-redirects": {
-         "version": "1.15.11",
-         "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.11.tgz",
-         "integrity": "sha512-deG2P0JfjrTxl50XGCDyfI97ZGVCxIpfKYmfyrQ54n5FO/0gfIES8C/Psl6kWVDolizcaaxZJnTS0QSMxvnsBQ==",
+         "version": "1.16.1",
+         "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.1.tgz",
+         "integrity": "sha512-FNvFGzoMLWmE6Yj9spb/zjd7yiNCHiAW9/Tg9CXrQ8wuu32HtlJOwWO11OJafl5FfY3DxTdQ0vj42zU1kvv5jg==",
          "funding": [
             {
                "type": "individual",
@@ -5629,9 +5626,9 @@
          "license": "MIT"
       },
       "node_modules/node-releases": {
-         "version": "2.0.57",
-         "resolved": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.57.tgz",
-         "integrity": "sha512-kQK9LGGFiHtrWiNhZtA7Qbw17AQz+dmsEKODRIVTXA9+e5MS/2gZEBhYJt13GrAz5/IOZKddH/0Z3TP/Zgo+yw==",
+         "version": "2.0.58",
+         "resolved": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.58.tgz",
+         "integrity": "sha512-BdiKAgbfRlvfMq/XzO/AF9NPmaA8a+YpLAyAFTVFBj3gARrAIfWvNq7Q7NE4se3KgFu0KkrvQMxTS0XVnsGzHg==",
          "dev": true,
          "license": "MIT",
          "engines": {
@@ -7273,9 +7270,9 @@
          }
       },
       "node_modules/update-browserslist-db": {
-         "version": "1.3.3",
-         "resolved": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.3.3.tgz",
-         "integrity": "sha512-pJ2sYawQS0R/WI928Gj5GlPhTGzbMelq0+4INtSYNDV9ErKJcX6xjGWkoG/VnB3dpUm00zALaqkrUD77pO5TDQ==",
+         "version": "1.3.4",
+         "resolved": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.3.4.tgz",
+         "integrity": "sha512-t8wonIOdQyOjtPd2VktlBu6QjTVTks6v8bSi7kd0r2Vll8TK1JYDZtRRdbmCHOAMphkZgrzK+L+vXK4pyZ8t4A==",
          "dev": true,
          "funding": [
             {

package.json

@@ -1,15 +1,16 @@
 {
    "name": "@qrunio/qqq-frontend-core",
-   "version": "0.40.20-SNAPSHOT",
+   "version": "0.40.27-RC.1",
    "description": "",
-   "main": "qqq-frontend-core.js",
-   "module": "lib/qqq-frontend-core.esm.js",
+   "main": "lib-cjs/qqq-frontend-core.js",
+   "module": "lib/qqq-frontend-core.js",
+   "types": "lib/qqq-frontend-core.d.ts",
    "scripts": {
       "delete-modules": "rm -rf node_modules; rm package-lock.json",
       "lint": "eslint . --ext .ts",
       "npm-install": "npm install",
       "clean-and-install": "npm ci && npm run prepublishOnly",
-      "prepublishOnly": "rm -rf lib/ && tsc -p ./ --outDir lib/",
+      "prepublishOnly": "node scripts/clean-build.cjs && tsc -p ./ --outDir lib/ && tsc -p ./ --module commonjs --outDir lib-cjs/",
       "test": "jest",
       "yalc-push": "npm run prepublishOnly && yalc push --private",
       "yalc-watch": "yalc-watch"
@@ -21,6 +22,7 @@
    "keywords": [],
    "files": [
       "lib",
+      "lib-cjs",
       "package.json",
       "NOTICE"
    ],
@@ -31,7 +33,7 @@
       "url": "https://github.com/QRun-IO/qqq-frontend-core"
    },
    "publishConfig": {
-      "registry": "https://registry.npmjs.org/"
+      "registry": "https://git.kof22.com/api/packages/QRun-IO/npm/"
    },
    "devDependencies": {
       "@types/jest": "^27.0.2",

scripts/clean-build.cjs

@@ -0,0 +1,7 @@
+const {rmSync} = require("node:fs");
+const {resolve} = require("node:path");
+
+// Resolve only these build outputs relative to the repository, never the caller's cwd.
+for (const directory of ["lib", "lib-cjs"]) {
+   rmSync(resolve(__dirname, "..", directory), {recursive: true, force: true});
+}

src/qqq-frontend-core.ts

@@ -23,7 +23,7 @@ import {QFieldMetaData} from "./model/metaData/QFieldMetaData";
 import {QFieldType} from "./model/metaData/QFieldType";
 import {QTableMetaData} from "./model/metaData/QTableMetaData";
 
-module.exports = {
+export {
    QController,
    QTableMetaData,
    QFieldMetaData,

tests/PackageExports.test.ts

@@ -0,0 +1,32 @@
+/*
+ * QQQ - Low-code Application Framework for Engineers.
+ * Copyright (C) 2021-2022.  Kingsrook, LLC
+ * 651 N Broad St Ste 205 # 6917 | Middletown DE 19709 | United States
+ * contact@kingsrook.com
+ * https://github.com/Kingsrook/
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {QController, QFieldMetaData, QFieldType, QTableMetaData} from "../src/qqq-frontend-core";
+
+describe("public package exports", () =>
+{
+   it("exposes the controller and metadata constructors", () =>
+   {
+      expect(typeof QController).toBe("function");
+      expect(typeof QTableMetaData).toBe("function");
+      expect(new QFieldMetaData({name: "id", type: QFieldType.INTEGER}).name).toBe("id");
+      expect(QFieldType.INTEGER).toBeDefined();
+   });
+});