build: modernize packaging and tooling for 0.3.1

[ignsm]

Breaking

• FormSchema type → FormDefinition. validateSchema() → validateDefinition().
• FormRenderer prop schema → definition (React and Vue).
• ESM-only. Dropped legacy main and module fields. Minimum Node is 18.

Fixes

• Bundlephobia was reporting ~500 B for @formhaus/core (webpack couldn't follow extension-less ESM re-exports from the barrel file).
• @formhaus/vue types failed to resolve under moduleResolution: "node16" / "nodenext".
• @formhaus/figma devDep chain pulled 3 moderate CVEs via old vitest@2. Bumped to vitest@4 and [email protected].
• Dropped leftover "JSON-schema-driven" wording from package description fields.

Sizes (gzipped)

• @formhaus/core: 2.87 KB
• @formhaus/react: 3.15 KB
• @formhaus/vue: 5.49 KB

Build and tooling

• core, react: tsc → tsup single bundled ESM.
• vue: vue-tsc --declaration → vite-plugin-dts with type rollup.
• Stopped shipping sourcemaps and declaration maps. Install size down 65-75% per package.
• exports field: types condition first. sideEffects: false on core/react/vue.
• engines.node: ">=18" on every published package.
• CI matrix: Node 20 and 22.
• CI now runs publint, @arethetypeswrong/cli --profile esm-only, and a test:resolve script that imports built dist/index.js through native Node ESM as a regression guard.

Verification

• pnpm lint:packages → All good × 3
• pnpm check:types → all 🟢 (esm-only profile)
• pnpm --filter @formhaus/core --filter @formhaus/react run test:resolve → ESM resolve OK × 2
• pnpm test → 175 passing (core 136, react 14, vue 10, figma 15)
• pnpm audit → 0 vulnerabilities

After merge

• Tag v0.3.1 on main
• npm publish core, react, vue (figma skipped — Figma plugin, not npm)
• Verify Bundlephobia shows real size for @formhaus/[email protected]

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
formhaus	Ready	Preview, Comment	Apr 10, 2026 10:23am