diff --git a/Cargo.lock b/Cargo.lock
index cf1b6637..3b0585a5 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -167,7 +167,7 @@ dependencies = [
  "serde_json",
  "serde_urlencoded",
  "smallvec",
- "socket2 0.6.2",
+ "socket2 0.6.3",
  "time",
  "tracing",
  "url",
@@ -193,9 +193,9 @@ checksum = "320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa"
 
 [[package]]
 name = "aho-corasick"
-version = "1.1.3"
+version = "1.1.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8e60d3430d3a69478ad0993f19238d2df97c507009a52b3c10addcd7f6bcb916"
+checksum = "ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301"
 dependencies = [
  "memchr",
 ]
@@ -232,9 +232,9 @@ checksum = "4b46cbb362ab8752921c97e041f5e366ee6297bd428a31275b9fcf1e380f7299"
 
 [[package]]
 name = "anstream"
-version = "0.6.18"
+version = "0.6.21"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8acc5369981196006228e28809f761875c0327210a891e941f4c683b3a99529b"
+checksum = "43d5b281e737544384e969a5ccad3f1cdd24b48086a0fc1b2a5262a26b8f4f4a"
 dependencies = [
  "anstyle",
  "anstyle-parse",
@@ -247,50 +247,50 @@ dependencies = [
 
 [[package]]
 name = "anstyle"
-version = "1.0.10"
+version = "1.0.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "55cc3b69f167a1ef2e161439aa98aed94e6028e5f9a59be9a6ffb47aef1651f9"
+checksum = "5192cca8006f1fd4f7237516f40fa183bb07f8fbdfedaa0036de5ea9b0b45e78"
 
 [[package]]
 name = "anstyle-parse"
-version = "0.2.6"
+version = "0.2.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3b2d16507662817a6a20a9ea92df6652ee4f94f914589377d69f3b21bc5798a9"
+checksum = "4e7644824f0aa2c7b9384579234ef10eb7efb6a0deb83f9630a49594dd9c15c2"
 dependencies = [
  "utf8parse",
 ]
 
 [[package]]
 name = "anstyle-query"
-version = "1.1.2"
+version = "1.1.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "79947af37f4177cfead1110013d678905c37501914fba0efea834c3fe9a8d60c"
+checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
 dependencies = [
- "windows-sys 0.59.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
 name = "anstyle-wincon"
-version = "3.0.7"
+version = "3.0.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ca3534e77181a9cc07539ad51f2141fe32f6c3ffd4df76db8ad92346b003ae4e"
+checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
 dependencies = [
  "anstyle",
- "once_cell",
- "windows-sys 0.59.0",
+ "once_cell_polyfill",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
 name = "anyhow"
-version = "1.0.101"
+version = "1.0.102"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5f0e0fee31ef5ed1ba1316088939cea399010ed7731dba877ed44aeb407a75ea"
+checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
 
 [[package]]
 name = "autocfg"
-version = "1.4.0"
+version = "1.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ace50bade8e6234aa140d9a2f552bbee1db4d353f69b8217bc503490fc1a9f26"
+checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"
 
 [[package]]
 name = "base64"
@@ -300,9 +300,9 @@ checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
 [[package]]
 name = "bitflags"
-version = "2.9.0"
+version = "2.11.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5c8214115b7bf84099f1309324e63141d4c5d7cc26862f97a0a857dbefe165bd"
+checksum = "843867be96c8daad0d758b57df9392b6d8d271134fce549de6ce169ff98a92af"
 
 [[package]]
 name = "block-buffer"
@@ -345,15 +345,15 @@ dependencies = [
 
 [[package]]
 name = "bumpalo"
-version = "3.17.0"
+version = "3.20.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1628fb46dfa0b37568d12e5edd512553eccf6a22a78e8bde00bb4aed84d5bdbf"
+checksum = "5d20789868f4b01b2f2caec9f5c4e0213b41e3e5702a50157d699ae31ced2fcb"
 
 [[package]]
 name = "bytes"
-version = "1.10.1"
+version = "1.11.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d71b6127be86fdcfddb610f7182ac57211d4b18a3e9c82eb2d17662f2227ad6a"
+checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33"
 
 [[package]]
 name = "bytestring"
@@ -403,9 +403,9 @@ dependencies = [
 
 [[package]]
 name = "cfg-if"
-version = "1.0.0"
+version = "1.0.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
 
 [[package]]
 name = "cfg_aliases"
@@ -442,9 +442,9 @@ dependencies = [
 
 [[package]]
 name = "clap"
-version = "4.5.32"
+version = "4.5.60"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6088f3ae8c3608d19260cd7445411865a485688711b78b5be70d78cd96136f83"
+checksum = "2797f34da339ce31042b27d23607e051786132987f595b02ba4f6a6dffb7030a"
 dependencies = [
  "clap_builder",
  "clap_derive",
@@ -452,9 +452,9 @@ dependencies = [
 
 [[package]]
 name = "clap_builder"
-version = "4.5.32"
+version = "4.5.60"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "22a7ef7f676155edfb82daa97f99441f3ebf4a58d5e32f295a56259f1b6facc8"
+checksum = "24a241312cea5059b13574bb9b3861cabf758b879c15190b37b6d6fd63ab6876"
 dependencies = [
  "anstream",
  "anstyle",
@@ -464,9 +464,9 @@ dependencies = [
 
 [[package]]
 name = "clap_derive"
-version = "4.5.32"
+version = "4.5.55"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "09176aae279615badda0765c0c0b3f6ed53f4709118af73cf4655d85d1530cd7"
+checksum = "a92793da1a46a5f2a02a6f4c46c6496b28c43638adea8306fcb0caa1634f24e5"
 dependencies = [
  "heck",
  "proc-macro2",
@@ -476,27 +476,27 @@ dependencies = [
 
 [[package]]
 name = "clap_lex"
-version = "0.7.4"
+version = "1.0.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f46ad14479a25103f283c0f10005961cf086d8dc42205bb44c46ac563475dca6"
+checksum = "3a822ea5bc7590f9d40f1ba12c0dc3c2760f3482c6984db1573ad11031420831"
 
 [[package]]
 name = "colorchoice"
-version = "1.0.3"
+version = "1.0.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5b63caa9aa9397e2d9480a9b13673856c78d8ac123288526c37d7839f2a86990"
+checksum = "b05b61dc5112cbb17e4b6cd61790d9845d13888356391624cbe7e41efeac1e75"
 
 [[package]]
 name = "console"
-version = "0.15.11"
+version = "0.16.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "054ccb5b10f9f2cbf51eb355ca1d05c2d279ce1804688d0db74b4733a5aeafd8"
+checksum = "03e45a4a8926227e4197636ba97a9fc9b00477e9f4bd711395687c5f0734bec4"
 dependencies = [
  "encode_unicode",
  "libc",
  "once_cell",
  "unicode-width",
- "windows-sys 0.59.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -558,7 +558,7 @@ dependencies = [
  "ciborium",
  "clap",
  "criterion-plot",
- "itertools",
+ "itertools 0.13.0",
  "num-traits",
  "oorandom",
  "page_size",
@@ -578,7 +578,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d8d80a2f4f5b554395e47b5d8305bc3d27813bacb73493eb1001e8f76dae29ea"
 dependencies = [
  "cast",
- "itertools",
+ "itertools 0.13.0",
 ]
 
 [[package]]
@@ -608,9 +608,9 @@ checksum = "d0a5c400df2834b80a4c3327b3aad3a4c4cd4de0629063962b03235697506a28"
 
 [[package]]
 name = "crunchy"
-version = "0.2.3"
+version = "0.2.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "43da5946c66ffcc7745f48db692ffbb10a83bfe0afd96235c5c2a4fb23994929"
+checksum = "460fbee9c2c2f33933d720630a6a0bac33ba7053db5344fac858d4b8952d77d5"
 
 [[package]]
 name = "crypto-common"
@@ -770,12 +770,12 @@ checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
 
 [[package]]
 name = "errno"
-version = "0.3.10"
+version = "0.3.14"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "33d852cb9b869c2a9b3df2f71a3074817f01e1844f839a144f5fcef059a4eb5d"
+checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
 dependencies = [
  "libc",
- "windows-sys 0.59.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -839,9 +839,9 @@ dependencies = [
 
 [[package]]
 name = "fragile"
-version = "2.0.0"
+version = "2.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6c2141d6d6c8512188a7891b4b01590a45f6dac67afb4f255c4124dbb86d4eaa"
+checksum = "28dd6caf6059519a65843af8fe2a3ae298b14b80179855aeb4adc2c1934ee619"
 
 [[package]]
 name = "futures"
@@ -943,14 +943,27 @@ dependencies = [
 
 [[package]]
 name = "getrandom"
-version = "0.3.1"
+version = "0.3.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "43a49c392881ce6d5c3b8cb70f98717b7c07aabbdff06687b9030dbfbe2725f8"
+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
 dependencies = [
  "cfg-if",
  "libc",
- "wasi 0.13.3+wasi-0.2.2",
- "windows-targets 0.52.6",
+ "r-efi 5.3.0",
+ "wasip2",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0de51e6874e94e7bf76d726fc5d13ba782deca734ff60d5bb2fb2607c7406555"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "r-efi 6.0.0",
+ "wasip2",
+ "wasip3",
 ]
 
 [[package]]
@@ -974,12 +987,22 @@ dependencies = [
 
 [[package]]
 name = "half"
-version = "2.5.0"
+version = "2.7.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7db2ff139bba50379da6aa0766b52fdcb62cb5b263009b09ed58ba604e14bbd1"
+checksum = "6ea2d84b969582b4b1864a92dc5d27cd2b77b622a8d79306834f1be5ba20d84b"
 dependencies = [
  "cfg-if",
  "crunchy",
+ "zerocopy",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.15.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9229cfe53dfd69f0609a49f65461bd93001ea1ef889cd5529dd176593f5338a1"
+dependencies = [
+ "foldhash",
 ]
 
 [[package]]
@@ -1116,6 +1139,12 @@ dependencies = [
  "zerovec",
 ]
 
+[[package]]
+name = "id-arena"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d3067d79b975e8844ca9eb072e16b31c3c1c36928edf9c6789548c524d0d954"
+
 [[package]]
 name = "idna"
 version = "1.1.0"
@@ -1150,14 +1179,16 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7714e70437a7dc3ac8eb7e6f8df75fd8eb422675fc7678aff7364301092b1017"
 dependencies = [
  "equivalent",
- "hashbrown",
+ "hashbrown 0.16.1",
+ "serde",
+ "serde_core",
 ]
 
 [[package]]
 name = "is_terminal_polyfill"
-version = "1.70.1"
+version = "1.70.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7943c866cc5cd64cbc25b2e01621d07fa8eb2a1a23160ee81ce38704e97b8ecf"
+checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
 
 [[package]]
 name = "itertools"
@@ -1168,18 +1199,28 @@ dependencies = [
  "either",
 ]
 
+[[package]]
+name = "itertools"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b192c782037fadd9cfa75548310488aabdbf3d2da73885b31bd0abd03351285"
+dependencies = [
+ "either",
+]
+
 [[package]]
 name = "itoa"
-version = "1.0.15"
+version = "1.0.17"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4a5f13b858c8d314ee3e8f639011f7ccefe71f97f96e50151fb991f267928e2c"
+checksum = "92ecc6618181def0457392ccd0ee51198e065e016d1d527a7ac1b6dc7c1f09d2"
 
 [[package]]
 name = "jobserver"
-version = "0.1.32"
+version = "0.1.34"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "48d1dbcbbeb6a7fec7e059840aa538bd62aaccf972c7346c4d9d2059312853d0"
+checksum = "9afb3de4395d6b3e67a780b6de64b51c978ecf11cb9a462c66be7d4ca9039d33"
 dependencies = [
+ "getrandom 0.3.4",
  "libc",
 ]
 
@@ -1199,6 +1240,12 @@ version = "0.3.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d4345964bb142484797b161f473a503a434de77149dd8c7427788c6e13379388"
 
+[[package]]
+name = "leb128fmt"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09edd9e8b54e49e587e4f6295a7d29c3ea94d469cb40ab8ca70b288248a81db2"
+
 [[package]]
 name = "libc"
 version = "0.2.182"
@@ -1217,9 +1264,9 @@ dependencies = [
 
 [[package]]
 name = "linux-raw-sys"
-version = "0.11.0"
+version = "0.12.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "df1d3c3b53da64cf5760482273a98e575c651a67eec7f77df96b5b642de8f039"
+checksum = "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53"
 
 [[package]]
 name = "litemap"
@@ -1246,25 +1293,24 @@ checksum = "4d873d7c67ce09b42110d801813efbc9364414e356be9935700d368351657487"
 
 [[package]]
 name = "lock_api"
-version = "0.4.12"
+version = "0.4.14"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "07af8b9cdd281b7915f413fa73f29ebd5d55d0d3f0155584dade1ff18cea1b17"
+checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"
 dependencies = [
- "autocfg",
  "scopeguard",
 ]
 
 [[package]]
 name = "log"
-version = "0.4.26"
+version = "0.4.29"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "30bde2b3dc3671ae49d8e2e9f044c7c005836e7a023ee57cffa25ab82764bb9e"
+checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897"
 
 [[package]]
 name = "memchr"
-version = "2.7.4"
+version = "2.8.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "78ca9ab1a0babb1e7d5695e3530886289c18cf2f87ec19a575a0abdce112e3a3"
+checksum = "f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79"
 
 [[package]]
 name = "mime"
@@ -1294,14 +1340,14 @@ dependencies = [
 
 [[package]]
 name = "mio"
-version = "1.0.3"
+version = "1.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2886843bf800fba2e3377cff24abf6379b4c4d5c6681eaf9ea5b0d15090450bd"
+checksum = "a69bcab0ad47271a0234d9422b131806bf3968021e5dc9328caf2d4cd58557fc"
 dependencies = [
  "libc",
  "log",
- "wasi 0.11.0+wasi-snapshot-preview1",
- "windows-sys 0.52.0",
+ "wasi",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -1443,9 +1489,15 @@ checksum = "ef25abbcd74fb2609453eb695bd2f860d389e457f67dc17cafc8b8cbc89d0c33"
 
 [[package]]
 name = "once_cell"
-version = "1.21.1"
+version = "1.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d"
+
+[[package]]
+name = "once_cell_polyfill"
+version = "1.70.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d75b0bedcc4fe52caa0e03d9f1151a323e4aa5e2d78ba3580400cd3c9e2bc4bc"
+checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
 
 [[package]]
 name = "oorandom"
@@ -1465,9 +1517,9 @@ dependencies = [
 
 [[package]]
 name = "parking_lot"
-version = "0.12.3"
+version = "0.12.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f1bf18183cf54e8d6059647fc3063646a1801cf30896933ec2311622cc4b9a27"
+checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
 dependencies = [
  "lock_api",
  "parking_lot_core",
@@ -1475,15 +1527,15 @@ dependencies = [
 
 [[package]]
 name = "parking_lot_core"
-version = "0.9.10"
+version = "0.9.12"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e401f977ab385c9e4e3ab30627d6f26d00e2c73eef317493c4ec6d468726cf8"
+checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
 dependencies = [
  "cfg-if",
  "libc",
  "redox_syscall",
  "smallvec",
- "windows-targets 0.52.6",
+ "windows-link",
 ]
 
 [[package]]
@@ -1494,19 +1546,20 @@ checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
 
 [[package]]
 name = "petgraph"
-version = "0.7.1"
+version = "0.8.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3672b37090dbd86368a4145bc067582552b29c27377cad4e0a306c97f9bd7772"
+checksum = "8701b58ea97060d5e5b155d383a69952a60943f0e6dfe30b04c287beb0b27455"
 dependencies = [
  "fixedbitset",
+ "hashbrown 0.15.5",
  "indexmap",
 ]
 
 [[package]]
 name = "pin-project-lite"
-version = "0.2.16"
+version = "0.2.17"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3b3cff922bd51709b605d9ead9aa71031d81447142d828eb4a6eba76fe619f9b"
+checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
 
 [[package]]
 name = "pkg-config"
@@ -1568,9 +1621,9 @@ dependencies = [
 
 [[package]]
 name = "predicates"
-version = "3.1.3"
+version = "3.1.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a5d19ee57562043d37e82899fade9a22ebab7be9cef5026b07fda9cdd4293573"
+checksum = "ada8f2932f28a27ee7b70dd6c1c39ea0675c55a36879ab92f3a715eaa1e63cfe"
 dependencies = [
  "anstyle",
  "predicates-core",
@@ -1578,15 +1631,15 @@ dependencies = [
 
 [[package]]
 name = "predicates-core"
-version = "1.0.9"
+version = "1.0.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "727e462b119fe9c93fd0eb1429a5f7647394014cf3c04ab2c0350eeb09095ffa"
+checksum = "cad38746f3166b4031b1a0d39ad9f954dd291e7854fcc0eed52ee41a0b50d144"
 
 [[package]]
 name = "predicates-tree"
-version = "1.0.12"
+version = "1.0.13"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "72dd2d6d381dfb73a193c7fca536518d7caee39fc8503f74e7dc0be0531b425c"
+checksum = "d0de1b847b39c8131db0467e9df1ff60e6d0562ab8e9a16e568ad0fdb372e2f2"
 dependencies = [
  "predicates-core",
  "termtree",
@@ -1594,9 +1647,9 @@ dependencies = [
 
 [[package]]
 name = "prettyplease"
-version = "0.2.34"
+version = "0.2.37"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6837b9e10d61f45f987d50808f83d1ee3d206c66acf650c3e4ae2e1f6ddedf55"
+checksum = "479ca8adacdd7ce8f1fb39ce9ecccbfe93a3f1344b3d0d97f20bc0196208f62b"
 dependencies = [
  "proc-macro2",
  "syn",
@@ -1604,18 +1657,18 @@ dependencies = [
 
 [[package]]
 name = "proc-macro2"
-version = "1.0.94"
+version = "1.0.106"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a31971752e70b8b2686d7e46ec17fb38dad4051d94024c88df49b667caea9c84"
+checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
 dependencies = [
  "unicode-ident",
 ]
 
 [[package]]
 name = "prost"
-version = "0.13.5"
+version = "0.14.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2796faa41db3ec313a31f7624d9286acf277b52de526150b7e69f3debf891ee5"
+checksum = "d2ea70524a2f82d518bce41317d0fae74151505651af45faf1ffbd6fd33f0568"
 dependencies = [
  "bytes",
  "prost-derive",
@@ -1623,15 +1676,14 @@ dependencies = [
 
 [[package]]
 name = "prost-build"
-version = "0.13.5"
+version = "0.14.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "be769465445e8c1474e9c5dac2018218498557af32d9ed057325ec9a41ae81bf"
+checksum = "343d3bd7056eda839b03204e68deff7d1b13aba7af2b2fd16890697274262ee7"
 dependencies = [
  "heck",
- "itertools",
+ "itertools 0.14.0",
  "log",
  "multimap",
- "once_cell",
  "petgraph",
  "prettyplease",
  "prost",
@@ -1643,12 +1695,12 @@ dependencies = [
 
 [[package]]
 name = "prost-derive"
-version = "0.13.5"
+version = "0.14.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8a56d757972c98b346a9b766e3f02746cde6dd1cd1d1d563472929fdd74bec4d"
+checksum = "27c6023962132f4b30eb4c172c91ce92d933da334c59c23cddee82358ddafb0b"
 dependencies = [
  "anyhow",
- "itertools",
+ "itertools 0.14.0",
  "proc-macro2",
  "quote",
  "syn",
@@ -1656,22 +1708,34 @@ dependencies = [
 
 [[package]]
 name = "prost-types"
-version = "0.13.5"
+version = "0.14.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "52c2c1bf36ddb1a1c396b3601a3cec27c2462e45f07c386894ec3ccf5332bd16"
+checksum = "8991c4cbdb8bc5b11f0b074ffe286c30e523de90fee5ba8132f1399f23cb3dd7"
 dependencies = [
  "prost",
 ]
 
 [[package]]
 name = "quote"
-version = "1.0.40"
+version = "1.0.45"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1885c039570dc00dcb4ff087a89e185fd56bae234ddc7f056a945bf36467248d"
+checksum = "41f2619966050689382d2b44f664f4bc593e129785a36d6ee376ddf37259b924"
 dependencies = [
  "proc-macro2",
 ]
 
+[[package]]
+name = "r-efi"
+version = "5.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
+
+[[package]]
+name = "r-efi"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
+
 [[package]]
 name = "rand"
 version = "0.9.2"
@@ -1698,14 +1762,14 @@ version = "0.9.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
 dependencies = [
- "getrandom",
+ "getrandom 0.3.4",
 ]
 
 [[package]]
 name = "rayon"
-version = "1.10.0"
+version = "1.11.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b418a60154510ca1a002a752ca9714984e21e4241e804d32555251faf8b78ffa"
+checksum = "368f01d005bf8fd9b1206fb6fa653e6c4a81ceb1466406b81792d87c5677a58f"
 dependencies = [
  "either",
  "rayon-core",
@@ -1713,9 +1777,9 @@ dependencies = [
 
 [[package]]
 name = "rayon-core"
-version = "1.12.1"
+version = "1.13.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1465873a3dfdaa8ae7cb14b4383657caab0b3e8a0aa9ae8e04b044854c8dfce2"
+checksum = "22e18b0f0062d30d4230b2e85ff77fdfe4326feb054b9783a3460d8435c8ab91"
 dependencies = [
  "crossbeam-deque",
  "crossbeam-utils",
@@ -1723,9 +1787,9 @@ dependencies = [
 
 [[package]]
 name = "redox_syscall"
-version = "0.5.10"
+version = "0.5.18"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0b8c0c260b63a8219631167be35e6a988e9554dbd323f8bd08439c8ed1302bd1"
+checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
 dependencies = [
  "bitflags",
 ]
@@ -1761,9 +1825,9 @@ checksum = "cab834c73d247e67f4fae452806d17d3c7501756d98c8808d7c9c7aa7d18f973"
 
 [[package]]
 name = "regex-syntax"
-version = "0.8.9"
+version = "0.8.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a96887878f22d7bad8a3b6dc5b7440e0ada9a245242924394987b21cf2210a4c"
+checksum = "dc897dd8d9e8bd1ed8cdad82b5966c3e0ecae09fb1907d58efaa013543185d0a"
 
 [[package]]
 name = "rustc-hash"
@@ -1782,9 +1846,9 @@ dependencies = [
 
 [[package]]
 name = "rustix"
-version = "1.1.3"
+version = "1.1.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "146c9e247ccc180c1f61615433868c99f3de3ae256a30a43b49f67c2d9171f34"
+checksum = "b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190"
 dependencies = [
  "bitflags",
  "errno",
@@ -1795,9 +1859,9 @@ dependencies = [
 
 [[package]]
 name = "rustversion"
-version = "1.0.20"
+version = "1.0.22"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eded382c5f5f786b989652c49544c4877d9f015cc22e145a5ea8ea66c2921cd2"
+checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
 
 [[package]]
 name = "ryu"
@@ -1921,10 +1985,11 @@ checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
 
 [[package]]
 name = "signal-hook-registry"
-version = "1.4.2"
+version = "1.4.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a9e9e0b4211b72e7b8b6e85c807d36c212bdb33ea8587f7569562a84df5465b1"
+checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"
 dependencies = [
+ "errno",
  "libc",
 ]
 
@@ -1942,9 +2007,9 @@ checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
 
 [[package]]
 name = "smallvec"
-version = "1.14.0"
+version = "1.15.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7fcf8323ef1faaee30a44a340193b1ac6814fd9b7b4e88e9d4519a3e4abe1cfd"
+checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03"
 
 [[package]]
 name = "socket2"
@@ -1958,12 +2023,12 @@ dependencies = [
 
 [[package]]
 name = "socket2"
-version = "0.6.2"
+version = "0.6.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "86f4aa3ad99f2088c990dfa82d367e19cb29268ed67c574d10d0a4bfe71f07e0"
+checksum = "3a766e1110788c36f4fa1c2b71b387a7815aa65f88ce0229841826633d93723e"
 dependencies = [
  "libc",
- "windows-sys 0.60.2",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -1997,9 +2062,9 @@ checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
 
 [[package]]
 name = "syn"
-version = "2.0.100"
+version = "2.0.117"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b09a44accad81e1ba1cd74a32461ba89dee89095ba17b32f5d03683b1b1fc2a0"
+checksum = "e665b8803e7b1d2a727f4023456bbbbe74da67099c585258af0ad9c5013b9b99"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -2019,12 +2084,12 @@ dependencies = [
 
 [[package]]
 name = "tempfile"
-version = "3.25.0"
+version = "3.26.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0136791f7c95b1f6dd99f9cc786b91bb81c3800b639b3478e561ddb7be95e5f1"
+checksum = "82a72c767771b47409d2345987fda8628641887d5466101319899796367354a0"
 dependencies = [
  "fastrand",
- "getrandom",
+ "getrandom 0.4.2",
  "once_cell",
  "rustix",
  "windows-sys 0.61.2",
@@ -2109,9 +2174,9 @@ dependencies = [
 
 [[package]]
 name = "tokio"
-version = "1.49.0"
+version = "1.50.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "72a2903cd7736441aac9df9d7688bd0ce48edccaadf181c3b90be801e81d3d86"
+checksum = "27ad5e34374e03cfffefc301becb44e9dc3c17584f414349ebe29ed26661822d"
 dependencies = [
  "bytes",
  "libc",
@@ -2119,16 +2184,16 @@ dependencies = [
  "parking_lot",
  "pin-project-lite",
  "signal-hook-registry",
- "socket2 0.6.2",
+ "socket2 0.6.3",
  "tokio-macros",
  "windows-sys 0.61.2",
 ]
 
 [[package]]
 name = "tokio-macros"
-version = "2.6.0"
+version = "2.6.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "af407857209536a95c8e56f8231ef2c2e2aff839b22e07a1ffcbc617e9db9fa5"
+checksum = "5c55a2eff8b69ce66c84f85e1da1c233edc36ceb85a2058d11b0d6a3c7e7569c"
 dependencies = [
  "proc-macro2",
  "quote",
@@ -2137,9 +2202,9 @@ dependencies = [
 
 [[package]]
 name = "tokio-stream"
-version = "0.1.17"
+version = "0.1.18"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eca58d7bba4a75707817a2c44174253f9236b2d5fbd055602e9d5c07c139a047"
+checksum = "32da49809aab5c3bc678af03902d4ccddea2a87d028d86392a4b1560c6906c70"
 dependencies = [
  "futures-core",
  "pin-project-lite",
@@ -2243,9 +2308,9 @@ dependencies = [
 
 [[package]]
 name = "tree-sitter"
-version = "0.26.5"
+version = "0.26.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "12987371f54efc9b9306a20dc87ed5aaee9f320c8a8b115e28515c412b2efe39"
+checksum = "13f456d2108c3fef07342ba4689a8503ec1fb5beed245e2b9be93096ef394848"
 dependencies = [
  "cc",
  "regex",
@@ -2295,9 +2360,9 @@ checksum = "dbc4bc3a9f746d862c45cb89d705aa10f187bb96c76001afab07a0d35ce60142"
 
 [[package]]
 name = "unicode-ident"
-version = "1.0.18"
+version = "1.0.24"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5a5f39404a5da50712a4c1eecf25e90dd62b613502b7e925fd4e4d19b5c96512"
+checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
 
 [[package]]
 name = "unicode-segmentation"
@@ -2331,9 +2396,9 @@ dependencies = [
 
 [[package]]
 name = "utf8-width"
-version = "0.1.7"
+version = "0.1.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "86bd8d4e895da8537e5315b8254664e6b769c4ff3db18321b297a1e7004392e3"
+checksum = "1292c0d970b54115d14f2492fe0170adf21d68a1de108eebc51c1df4f346a091"
 
 [[package]]
 name = "utf8_iter"
@@ -2365,17 +2430,26 @@ dependencies = [
 
 [[package]]
 name = "wasi"
-version = "0.11.0+wasi-snapshot-preview1"
+version = "0.11.1+wasi-snapshot-preview1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9c8d87e72b64a3b4db28d11ce29237c246188f4f51057d65a7eab63b7987e423"
+checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
 
 [[package]]
-name = "wasi"
-version = "0.13.3+wasi-0.2.2"
+name = "wasip2"
+version = "1.0.2+wasi-0.2.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "26816d2e1a4a36a2940b96c5296ce403917633dff8f3440e9b236ed6f6bacad2"
+checksum = "9517f9239f02c069db75e65f174b3da828fe5f5b945c4dd26bd25d89c03ebcf5"
 dependencies = [
- "wit-bindgen-rt",
+ "wit-bindgen",
+]
+
+[[package]]
+name = "wasip3"
+version = "0.4.0+wasi-0.3.0-rc-2026-01-06"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5428f8bf88ea5ddc08faddef2ac4a67e390b88186c703ce6dbd955e1c145aca5"
+dependencies = [
+ "wit-bindgen",
 ]
 
 [[package]]
@@ -2436,6 +2510,40 @@ dependencies = [
  "unicode-ident",
 ]
 
+[[package]]
+name = "wasm-encoder"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "990065f2fe63003fe337b932cfb5e3b80e0b4d0f5ff650e6985b1048f62c8319"
+dependencies = [
+ "leb128fmt",
+ "wasmparser",
+]
+
+[[package]]
+name = "wasm-metadata"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bb0e353e6a2fbdc176932bbaab493762eb1255a7900fe0fea1a2f96c296cc909"
+dependencies = [
+ "anyhow",
+ "indexmap",
+ "wasm-encoder",
+ "wasmparser",
+]
+
+[[package]]
+name = "wasmparser"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47b807c72e1bac69382b3a6fb3dbe8ea4c0ed87ff5629b8685ae6b9a611028fe"
+dependencies = [
+ "bitflags",
+ "hashbrown 0.15.5",
+ "indexmap",
+ "semver",
+]
+
 [[package]]
 name = "web-sys"
 version = "0.3.77"
@@ -2446,9 +2554,22 @@ dependencies = [
  "wasm-bindgen",
 ]
 
+[[package]]
+name = "webui"
+version = "0.0.1"
+dependencies = [
+ "serde_json",
+ "tempfile",
+ "thiserror",
+ "webui-discovery",
+ "webui-handler",
+ "webui-parser",
+ "webui-protocol",
+]
+
 [[package]]
 name = "webui-cli"
-version = "0.1.0"
+version = "0.0.1"
 dependencies = [
  "actix-web",
  "anyhow",
@@ -2460,15 +2581,15 @@ dependencies = [
  "serde_json",
  "tempfile",
  "walkdir",
+ "webui",
  "webui-discovery",
  "webui-handler",
- "webui-parser",
  "webui-protocol",
 ]
 
 [[package]]
 name = "webui-discovery"
-version = "0.1.0"
+version = "0.0.1"
 dependencies = [
  "anyhow",
  "expand-tilde",
@@ -2480,7 +2601,7 @@ dependencies = [
 
 [[package]]
 name = "webui-expressions"
-version = "0.1.0"
+version = "0.0.1"
 dependencies = [
  "criterion",
  "serde",
@@ -2493,7 +2614,7 @@ dependencies = [
 
 [[package]]
 name = "webui-ffi"
-version = "0.1.0"
+version = "0.0.1"
 dependencies = [
  "cbindgen",
  "libc",
@@ -2507,7 +2628,7 @@ dependencies = [
 
 [[package]]
 name = "webui-handler"
-version = "0.1.0"
+version = "0.0.1"
 dependencies = [
  "criterion",
  "html-escape",
@@ -2523,12 +2644,14 @@ dependencies = [
 
 [[package]]
 name = "webui-node"
-version = "0.1.0"
+version = "0.0.1"
 dependencies = [
  "napi",
  "napi-build",
  "napi-derive",
  "serde_json",
+ "tempfile",
+ "webui",
  "webui-handler",
  "webui-parser",
  "webui-protocol",
@@ -2537,8 +2660,9 @@ dependencies = [
 
 [[package]]
 name = "webui-parser"
-version = "0.1.0"
+version = "0.0.1"
 dependencies = [
+ "clap",
  "criterion",
  "mockall",
  "serde",
@@ -2557,7 +2681,7 @@ dependencies = [
 
 [[package]]
 name = "webui-protocol"
-version = "0.1.0"
+version = "0.0.1"
 dependencies = [
  "anyhow",
  "criterion",
@@ -2580,7 +2704,7 @@ dependencies = [
 
 [[package]]
 name = "webui-state"
-version = "0.1.0"
+version = "0.0.1"
 dependencies = [
  "criterion",
  "serde",
@@ -2590,7 +2714,7 @@ dependencies = [
 
 [[package]]
 name = "webui-test-utils"
-version = "0.1.0"
+version = "0.0.1"
 dependencies = [
  "mockall",
  "serde_json",
@@ -2601,7 +2725,7 @@ dependencies = [
 
 [[package]]
 name = "webui-wasm"
-version = "0.1.0"
+version = "0.0.1"
 dependencies = [
  "serde",
  "serde-wasm-bindgen",
@@ -2615,11 +2739,10 @@ dependencies = [
 
 [[package]]
 name = "which"
-version = "7.0.3"
+version = "8.0.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "24d643ce3fd3e5b54854602a080f34fb10ab75e0b813ee32d00ca2b44fa74762"
+checksum = "3a824aeba0fbb27264f815ada4cff43d65b1741b7a4ed7629ff9089148c4a4e0"
 dependencies = [
- "either",
  "env_home",
  "rustix",
  "winsafe",
@@ -2643,11 +2766,11 @@ checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
 
 [[package]]
 name = "winapi-util"
-version = "0.1.9"
+version = "0.1.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cf221c93e13a30d793f7645a0e7762c55d169dbb0a49671918a2319d289b10bb"
+checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
 dependencies = [
- "windows-sys 0.59.0",
+ "windows-sys 0.61.2",
 ]
 
 [[package]]
@@ -2763,25 +2886,7 @@ version = "0.52.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
 dependencies = [
- "windows-targets 0.52.6",
-]
-
-[[package]]
-name = "windows-sys"
-version = "0.59.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
-dependencies = [
- "windows-targets 0.52.6",
-]
-
-[[package]]
-name = "windows-sys"
-version = "0.60.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
-dependencies = [
- "windows-targets 0.53.5",
+ "windows-targets",
 ]
 
 [[package]]
@@ -2799,31 +2904,14 @@ version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
 dependencies = [
- "windows_aarch64_gnullvm 0.52.6",
- "windows_aarch64_msvc 0.52.6",
- "windows_i686_gnu 0.52.6",
- "windows_i686_gnullvm 0.52.6",
- "windows_i686_msvc 0.52.6",
- "windows_x86_64_gnu 0.52.6",
- "windows_x86_64_gnullvm 0.52.6",
- "windows_x86_64_msvc 0.52.6",
-]
-
-[[package]]
-name = "windows-targets"
-version = "0.53.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3"
-dependencies = [
- "windows-link",
- "windows_aarch64_gnullvm 0.53.1",
- "windows_aarch64_msvc 0.53.1",
- "windows_i686_gnu 0.53.1",
- "windows_i686_gnullvm 0.53.1",
- "windows_i686_msvc 0.53.1",
- "windows_x86_64_gnu 0.53.1",
- "windows_x86_64_gnullvm 0.53.1",
- "windows_x86_64_msvc 0.53.1",
+ "windows_aarch64_gnullvm",
+ "windows_aarch64_msvc",
+ "windows_i686_gnu",
+ "windows_i686_gnullvm",
+ "windows_i686_msvc",
+ "windows_x86_64_gnu",
+ "windows_x86_64_gnullvm",
+ "windows_x86_64_msvc",
 ]
 
 [[package]]
@@ -2841,101 +2929,53 @@ version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
 
-[[package]]
-name = "windows_aarch64_gnullvm"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53"
-
 [[package]]
 name = "windows_aarch64_msvc"
 version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
 
-[[package]]
-name = "windows_aarch64_msvc"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006"
-
 [[package]]
 name = "windows_i686_gnu"
 version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
 
-[[package]]
-name = "windows_i686_gnu"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3"
-
 [[package]]
 name = "windows_i686_gnullvm"
 version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
 
-[[package]]
-name = "windows_i686_gnullvm"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c"
-
 [[package]]
 name = "windows_i686_msvc"
 version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
 
-[[package]]
-name = "windows_i686_msvc"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2"
-
 [[package]]
 name = "windows_x86_64_gnu"
 version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
 
-[[package]]
-name = "windows_x86_64_gnu"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499"
-
 [[package]]
 name = "windows_x86_64_gnullvm"
 version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
 
-[[package]]
-name = "windows_x86_64_gnullvm"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1"
-
 [[package]]
 name = "windows_x86_64_msvc"
 version = "0.52.6"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
 
-[[package]]
-name = "windows_x86_64_msvc"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650"
-
 [[package]]
 name = "winnow"
-version = "0.7.14"
+version = "0.7.15"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5a5364e9d77fcdeeaa6062ced926ee3381faa2ee02d3eb83a5c27a8825540829"
+checksum = "df79d97927682d2fd8adb29682d1140b343be4ac0f08fd68b7765d9c059d3945"
 
 [[package]]
 name = "winsafe"
@@ -2944,12 +2984,91 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d135d17ab770252ad95e9a872d365cf3090e3be864a34ab46f48555993efc904"
 
 [[package]]
-name = "wit-bindgen-rt"
-version = "0.33.0"
+name = "wit-bindgen"
+version = "0.51.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3268f3d866458b787f390cf61f4bbb563b922d091359f9608842999eaee3943c"
+checksum = "d7249219f66ced02969388cf2bb044a09756a083d0fab1e566056b04d9fbcaa5"
 dependencies = [
+ "wit-bindgen-rust-macro",
+]
+
+[[package]]
+name = "wit-bindgen-core"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ea61de684c3ea68cb082b7a88508a8b27fcc8b797d738bfc99a82facf1d752dc"
+dependencies = [
+ "anyhow",
+ "heck",
+ "wit-parser",
+]
+
+[[package]]
+name = "wit-bindgen-rust"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7c566e0f4b284dd6561c786d9cb0142da491f46a9fbed79ea69cdad5db17f21"
+dependencies = [
+ "anyhow",
+ "heck",
+ "indexmap",
+ "prettyplease",
+ "syn",
+ "wasm-metadata",
+ "wit-bindgen-core",
+ "wit-component",
+]
+
+[[package]]
+name = "wit-bindgen-rust-macro"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c0f9bfd77e6a48eccf51359e3ae77140a7f50b1e2ebfe62422d8afdaffab17a"
+dependencies = [
+ "anyhow",
+ "prettyplease",
+ "proc-macro2",
+ "quote",
+ "syn",
+ "wit-bindgen-core",
+ "wit-bindgen-rust",
+]
+
+[[package]]
+name = "wit-component"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d66ea20e9553b30172b5e831994e35fbde2d165325bec84fc43dbf6f4eb9cb2"
+dependencies = [
+ "anyhow",
  "bitflags",
+ "indexmap",
+ "log",
+ "serde",
+ "serde_derive",
+ "serde_json",
+ "wasm-encoder",
+ "wasm-metadata",
+ "wasmparser",
+ "wit-parser",
+]
+
+[[package]]
+name = "wit-parser"
+version = "0.244.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ecc8ac4bc1dc3381b7f59c34f00b67e18f910c2c0f50015669dde7def656a736"
+dependencies = [
+ "anyhow",
+ "id-arena",
+ "indexmap",
+ "log",
+ "semver",
+ "serde",
+ "serde_derive",
+ "serde_json",
+ "unicode-xid",
+ "wasmparser",
 ]
 
 [[package]]
@@ -2965,6 +3084,8 @@ dependencies = [
  "console",
  "ctrlc",
  "libc",
+ "serde_json",
+ "tempfile",
  "which",
 ]
 
diff --git a/Cargo.toml b/Cargo.toml
index dfd9977c..2d7888c5 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -8,7 +8,7 @@ members = [
 resolver = "2"
 
 [workspace.package]
-version = "0.1.0"
+version = "0.0.1"
 edition = "2021"
 authors = ["Microsoft Edge"]
 license = "MIT"
@@ -24,12 +24,12 @@ env_logger = "0.11.9"
 async-trait = "0.1.89"
 tokio = { version = "1.49.0", features = ["full"] }
 clap = { version = "4", features = ["derive", "color"] }
-console = "0.15"
+console = "0.16.2"
 ctrlc = "3.4"
-prost = "0.13"
+prost = "0.14.3"
 napi = { version = "3", features = ["napi4"] }
 napi-derive = "3"
-wasm-bindgen = "0.2"
+wasm-bindgen = "=0.2.100"
 serde-wasm-bindgen = "0.6"
 actix-web = "4.11.0"
 expand-tilde = "0.6.1"
@@ -41,7 +41,7 @@ tree-sitter-html = "0.23.2"
 tree-sitter-css = "0.25.0"
 walkdir = "2.5.0"
 libc = "0.2.182"
-which = "7"
+which = "8.0.1"
 windows = { version = "0.62.2", features = [
     "Win32_Foundation",
     "Win32_System_LibraryLoader",
@@ -55,7 +55,7 @@ tempfile = "3.25.0"
 tokio-test = "0.4.5"
 
 # Build dependencies
-prost-build = "0.13"
+prost-build = "0.14.3"
 napi-build = "2"
 cbindgen = "0.29.2"
 
diff --git a/DESIGN.md b/DESIGN.md
index 28be6373..7d7a1e97 100644
--- a/DESIGN.md
+++ b/DESIGN.md
@@ -466,14 +466,14 @@ pub struct HtmlParser {
 /// Strategy for how component CSS is delivered in rendered output.
 pub enum CssStrategy {
     /// Emit `<link rel="stylesheet" href="./component.css">` tags (default).
-    External,
+    Link,
     /// Embed CSS content inline in `<style>` tags within the shadow DOM template.
-    Inline,
+    Style,
 }
 ```
 
-- **External** (default): Emits `<link>` tags referencing external `.css` files. Used by the CLI for production builds where CSS files are served separately.
-- **Inline**: Embeds the full CSS content in `<style>` tags inside the shadow DOM template. Used when all files are needed in-memory.
+- **Link** (default): Emits `<link>` tags referencing external `.css` files. Used by the CLI for production builds where CSS files are served separately.
+- **Style**: Embeds the full CSS content in `<style>` tags inside the shadow DOM template. Used when all files are needed in-memory.
 
 Set via `parser.set_css_strategy(CssStrategy::Inline)`.
 
@@ -518,7 +518,7 @@ parser.parse("index.html", &html)?;
 **CLI integration:**
 ```bash
 webui build ./templates --out ./dist --plugin=fast
-webui start ./templates --state ./data/state.json --plugin=fast
+webui serve ./templates --state ./data/state.json --plugin=fast
 ```
 #### Content Processing
 
@@ -678,6 +678,7 @@ pub enum ParserError {
 ```
 webui/
 ├── crates/
+│   ├── webui/                # Programmatic library API (build, inspect, re-exports)
 │   ├── webui-cli/            # CLI build tool (binary: "webui")
 │   ├── webui-discovery/      # External component discovery (npm, paths)
 │   ├── webui-expressions/    # Expression evaluation engine
@@ -689,11 +690,47 @@ webui/
 │   ├── webui-state/          # State management
 │   ├── webui-test-utils/     # Testing utilities
 │   └── webui-wasm/           # WebAssembly bindings
+├── packages/
+│   └── @microsoft/
+│       ├── webui/            # npm package (CLI + programmatic JS API)
+│       ├── webui-darwin-arm64/   # Platform binary (macOS ARM64)
+│       ├── webui-darwin-x64/     # Platform binary (macOS x64)
+│       ├── webui-linux-x64/      # Platform binary (Linux x64)
+│       ├── webui-linux-arm64/    # Platform binary (Linux ARM64)
+│       ├── webui-win32-x64/      # Platform binary (Windows x64)
+│       └── webui-win32-arm64/    # Platform binary (Windows ARM64)
 ├── examples/                 # Example applications
 ├── docs/                     # Documentation
 ├── tests/                    # Integration tests
 └── benchmarks/               # Performance benchmarks
 ```
+
+### Crate Dependency Graph
+
+```
+webui-cli ──────► webui (library) ◄────── webui-node
+                    │                        │
+                    ├── webui-parser          ├── webui-handler
+                    ├── webui-handler         ├── webui-protocol
+                    ├── webui-protocol        └── serde_json
+                    └── webui-discovery
+
+webui-ffi ──────► webui-handler ◄────── webui-wasm
+                  webui-parser              webui-parser
+                  webui-protocol            webui-protocol
+```
+
+The `webui` library crate is the primary API surface for programmatic use.
+It re-exports `WebUIHandler`, `ResponseWriter`, and `WebUIProtocol` from their
+respective crates and provides `build()`, `build_to_disk()`, and `inspect()`
+functions with `BuildStats` (duration, fragment/component/CSS counts, protocol size).
+
+### npm Distribution
+
+The `@microsoft/webui` npm package follows the esbuild single-package model:
+- `bin: { "webui": "bin/webui" }` — CLI binary via platform-specific `optionalDependencies`
+- `main: "lib/main.js"` — Programmatic API that loads the `.node` native addon directly
+- WASM fallback for render when native addon is unavailable (one-time warning logged)
 ### Documentation Guidelines
 - Using `vitepress` in `docs/`
 - API documentation for all public interfaces
diff --git a/README.md b/README.md
index 26051d8f..d6fb63ed 100644
--- a/README.md
+++ b/README.md
@@ -1,121 +1,72 @@
 # WebUI
 
-A high-performance, truly cross-platform web framework leveraging native web technologies, built with Rust.
+A high-performance server-side rendering framework built with Rust. No JavaScript runtime required.
 
-## Overview
+**📖 Documentation & Usage → [microsoft.github.io/webui](https://microsoft.github.io/webui)**
 
-WebUI is a framework that transforms standard HTML/CSS templates into a platform-agnostic protocol that can be rendered natively across any environment - without JavaScript runtime dependencies. Dynamic Server Side Rendering without Node.js.
-
-The framework represents a paradigm shift in web development:
-
-- **Truly Cross-Platform**: Run identical templates in Rust, Go, .NET, and other environments without requiring Node.js or any JavaScript runtime
-- **Native Performance**: Built with Rust for unparalleled efficiency and minimal overhead compared to JavaScript-based frameworks
-- **Familiar Developer Experience**: Uses standard HTML templates, web components, and CSS you already know
-- **Zero Runtime Dependencies**: No need for Node.js, npm modules, or browser polyfills - templates run directly on native code
-- **Type Safety**: Strongly typed interfaces ensure reliable component integration across language boundaries
-- **Small Footprint**: Minimal binary size with no bloated dependencies
-
-WebUI enables you to write web-based UIs once and deploy them anywhere - from cloud servers to embedded devices - with consistent rendering and superior performance.
-
-## Core Architecture
-WebUI follows a modular architecture with four primary components:
-
-- **Protocol:** Defines the structural representation of UI components using a serializable format
-- **Parser:** Processes HTML/CSS templates into protocol structures at build time
-- **Expression Evaluation:** Handles conditional logic for dynamic rendering
-- **Handler:** Renders protocol with state data into final HTML output at runtime
-- **Plugin System:** Extensible hooks for framework-specific behavior (parsing + rendering) without modifying core logic
-
-## How It Works
-- **Write Standard HTML/CSS:**  Create templates with familiar syntax plus WebUI directives (`<for>`, `<if>`, `{{signals}}`)
-- **Parse to WebUIProtocol:**  Templates compile to a lightweight, language-agnostic protocol at build time
-- **Native Rendering:** The protocol is rendered with your data using a platform-specific handler in your language of choice
-- **Efficient Output:** The handler produces optimized HTML with Web Component support
-- **Framework Plugins:** Optional plugins (e.g., `--plugin=fast`) inject hydration markers for client-side frameworks like FAST-HTML
-
-## Getting Started
-
-### Prerequisites
-
-- Rust toolchain (1.80+)
-- Node.js (22+) with pnpm
-- Go (1.18+) - optional
-- .NET SDK (8.0+) - optional
-
-### Building
+## Install
 
 ```bash
-# Clone the repository
-git clone https://github.com/microsoft/webui.git
-cd webui
-
-# Build Rust components
-cargo build --release
+npm install @microsoft/webui
 ```
 
-### Using the CLI
-
-The `webui` CLI builds your app folder into the WebUI protocol format:
-
-```bash
-# Build an app (outputs protocol.bin and component CSS to the out folder)
-cargo run -p webui-cli -- build ./my-app --out ./dist
+Or with Rust: `cargo install webui-cli`
 
-# Build with the FAST plugin for hydration support
-cargo run -p webui-cli -- build ./my-app --out ./dist --plugin=fast
+## Development
 
-# Specify a custom entry file
-cargo run -p webui-cli -- build ./my-app --out ./dist --entry page.html
-
-# Build the hello-world example
-cargo run -p webui-cli -- build examples/app/hello-world/src --out ./dist
-```
-
-After building with `--release`, use the binary directly:
-
-```bash
-webui build ./my-app --out ./dist
-```
+### Prerequisites
 
-### Building the WASM Playground
+- Rust 1.93+ with `clippy` and `rustfmt`
+- Node.js 22+ with pnpm
 
-The interactive playground runs WebUI in the browser via WebAssembly. The WASM output is committed to the repo — most developers don't need to rebuild it. Only rebuild when you change Rust code in the core crates:
+### Commands
 
-```bash
-cargo xtask build-wasm
-```
+All development tasks go through `cargo xtask`:
 
-### Running Benchmarks
+| Command | Description |
+|---------|-------------|
+| `cargo xtask check` | **Run before every commit.** Runs fmt → clippy → deny → test → build → docs |
+| `cargo xtask fmt` | Check formatting |
+| `cargo xtask clippy` | Run clippy lints |
+| `cargo xtask deny` | License & advisory audit |
+| `cargo xtask test` | Run all tests |
+| `cargo xtask build` | Build the workspace + examples |
+| `cargo xtask build-wasm` | Build WASM playground module |
+| `cargo xtask docs` | Build the documentation site |
+| `cargo xtask bench <crate>` | Run benchmarks (parser, handler, protocol, expressions, state, all) |
+| `cargo xtask dev <app>` | Run example app in dev mode |
+| `cargo xtask version <semver>` | Update version across all Cargo.toml and package.json files |
 
-WebUI includes [Criterion](https://github.com/bheisler/criterion.rs) benchmarks for all core crates. Run them in release mode for accurate results:
+### Project Structure
 
-```bash
-# Run benchmarks for a specific crate
-cargo bench -p webui-parser
-cargo bench -p webui-handler
-cargo bench -p webui-protocol
-cargo bench -p webui-expressions
-cargo bench -p webui-state
-
-# Run all benchmarks across the workspace
-cargo bench --workspace
 ```
-
-### Development Server
-
-Preview your app using the built-in dev server. Add `--watch` to enable live reload:
-
-```bash
-webui-cli start examples/app/hello-world/templates --state examples/app/hello-world/data/state.json --servedir examples/app/hello-world/assets --watch
+crates/
+├── webui/              # Library API (build, inspect, re-exports)
+├── webui-cli/          # CLI binary
+├── webui-node/         # Node.js native addon (napi-rs)
+├── webui-ffi/          # C-compatible FFI bindings
+├── webui-wasm/         # WebAssembly bindings
+├── webui-parser/       # HTML/CSS parser
+├── webui-protocol/     # Protocol definition (protobuf)
+├── webui-handler/      # Rendering engine
+├── webui-expressions/  # Expression evaluator
+├── webui-state/        # State management
+├── webui-discovery/    # Component discovery
+└── webui-test-utils/   # Shared test helpers
+packages/
+└── webui/              # @microsoft/webui npm package
+docs/                   # VitePress documentation site
 ```
 
-This builds, renders, and serves the app at `http://127.0.0.1:3000/`. With `--watch`, file changes trigger automatic reload.
+### Key Files
 
-For runnable sample apps and integration walkthroughs, see [examples/README.md](examples/README.md).
+- [`DESIGN.md`](DESIGN.md) — Technical specification (the source of truth)
+- [`clippy.toml`](clippy.toml) — Lint policy (no `unwrap`/`expect`, complexity ≤ 20)
+- [`deny.toml`](deny.toml) — License allowlist & advisory audit
 
 ## Contributing
 
-This project welcomes contributions and suggestions.  Most contributions require you to agree to a
+This project welcomes contributions and suggestions. Most contributions require you to agree to a
 Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us
 the rights to use your contribution. For details, visit https://cla.opensource.microsoft.com.
 
@@ -129,8 +80,8 @@ contact [opencode@microsoft.com](mailto:opencode@microsoft.com) with any additio
 
 ## Trademarks
 
-This project may contain trademarks or logos for projects, products, or services. Authorized use of Microsoft 
-trademarks or logos is subject to and must follow 
+This project may contain trademarks or logos for projects, products, or services. Authorized use of Microsoft
+trademarks or logos is subject to and must follow
 [Microsoft's Trademark & Brand Guidelines](https://www.microsoft.com/en-us/legal/intellectualproperty/trademarks/usage/general).
 Use of Microsoft trademarks or logos in modified versions of this project must not cause confusion or imply Microsoft sponsorship.
 Any use of third-party trademarks or logos are subject to those third-party's policies.
diff --git a/crates/webui-cli/Cargo.toml b/crates/webui-cli/Cargo.toml
index c3c1214e..57fc8300 100644
--- a/crates/webui-cli/Cargo.toml
+++ b/crates/webui-cli/Cargo.toml
@@ -12,8 +12,7 @@ name = "webui"
 path = "src/main.rs"
 
 [dependencies]
-webui-parser = { path = "../webui-parser" }
-webui-protocol = { path = "../webui-protocol" }
+webui = { path = "../webui", features = ["cli"] }
 webui-handler = { path = "../webui-handler" }
 webui-discovery = { path = "../webui-discovery" }
 clap = { workspace = true }
diff --git a/crates/webui-cli/README.md b/crates/webui-cli/README.md
index 1dedf860..6e32588c 100644
--- a/crates/webui-cli/README.md
+++ b/crates/webui-cli/README.md
@@ -53,12 +53,12 @@ Example:
 webui inspect ./dist/protocol.bin
 ```
 
-### `webui start`
+### `webui serve`
 
 Starts a dev server with build+render. Live reload/HMR is optional via `--watch`.
 
 ```bash
-webui-cli start [APP] --state <FILE> [--servedir <DIR>] [--watch] [--port <PORT>] [--entry <FILE>] [--css <MODE>]
+webui-cli serve [APP] --state <FILE> [--servedir <DIR>] [--watch] [--port <PORT>] [--entry <FILE>] [--css <MODE>]
 ```
 
 - `APP`: template/component directory (default `.`)
@@ -79,7 +79,7 @@ Behavior:
 Example:
 
 ```bash
-webui-cli start ./examples/app/hello-world/templates \
+webui-cli serve ./examples/app/hello-world/templates \
   --state ./examples/app/hello-world/data/state.json \
   --servedir ./examples/app/hello-world/assets \
   --watch \
diff --git a/crates/webui-cli/src/commands/build.rs b/crates/webui-cli/src/commands/build.rs
index 2c60c2e4..6a64cad3 100644
--- a/crates/webui-cli/src/commands/build.rs
+++ b/crates/webui-cli/src/commands/build.rs
@@ -1,9 +1,7 @@
 use anyhow::{Context, Result};
 use clap::Args;
 use expand_tilde::expand_tilde;
-use std::fs;
 use std::path::PathBuf;
-use std::time::Instant;
 
 use super::common::*;
 use crate::utils::output;
@@ -34,8 +32,6 @@ pub fn execute(args: &BuildArgs) -> Result<()> {
 }
 
 fn run(args: &BuildArgs) -> Result<()> {
-    let started = Instant::now();
-
     let app_input = expand_tilde(&args.app_args.app)
         .with_context(|| format!("Failed to expand app path: {}", args.app_args.app.display()))?
         .into_owned();
@@ -60,75 +56,38 @@ fn run(args: &BuildArgs) -> Result<()> {
     }
     eprintln!();
 
-    // Create output directory
-    fs::create_dir_all(&out)
-        .with_context(|| format!("Failed to create output dir: {}", out.display()))?;
-
-    // Build the protocol using shared logic
-    let build_output = build_protocol(&app, &args.app_args)?;
+    let build_options = args.app_args.to_build_options(&app);
+    let stats = webui::build_to_disk(build_options, &out).with_context(|| "Build failed")?;
 
     output::success(&format!(
         "Registered {} component{}",
-        console::style(build_output.component_count).bold(),
-        if build_output.component_count == 1 {
-            ""
-        } else {
-            "s"
-        }
+        console::style(stats.component_count).bold(),
+        if stats.component_count == 1 { "" } else { "s" }
     ));
 
     output::success(&format!(
         "Parsed {} ({} fragment{})",
         console::style(&args.app_args.entry).bold(),
-        console::style(build_output.fragment_count).bold(),
-        if build_output.fragment_count == 1 {
-            ""
-        } else {
-            "s"
-        }
+        console::style(stats.fragment_count).bold(),
+        if stats.fragment_count == 1 { "" } else { "s" }
     ));
 
-    if build_output.token_count > 0 {
+    if stats.token_count > 0 {
         output::success(&format!(
             "Discovered {} CSS token{}",
-            console::style(build_output.token_count).bold(),
-            if build_output.token_count == 1 {
-                ""
-            } else {
-                "s"
-            }
+            console::style(stats.token_count).bold(),
+            if stats.token_count == 1 { "" } else { "s" }
         ));
     }
 
-    // Write protocol as optimized protobuf binary
-    let bytes = build_output
-        .protocol
-        .to_protobuf()
-        .context("Failed to serialize protocol")?;
-    let protocol_path = out.join("protocol.bin");
-    fs::write(&protocol_path, &bytes)
-        .with_context(|| format!("Failed to write {}", protocol_path.display()))?;
+    let files_written = 1 + stats.css_file_count;
     output::success(&format!("Wrote {}", console::style("protocol.bin").bold()));
 
-    let mut files_written: usize = 1;
-
-    // Copy component CSS files (only in external mode)
-    if matches!(args.app_args.css, CssMode::External) {
-        for (filename, css_content) in &build_output.css_files {
-            let css_path = out.join(filename);
-            fs::write(&css_path, css_content)
-                .with_context(|| format!("Failed to write {}", css_path.display()))?;
-            output::success(&format!("Wrote {}", console::style(filename).bold()));
-            files_written += 1;
-        }
-    }
-
-    let elapsed = started.elapsed();
     output::finish(&format!(
         "Build complete ({} file{} written) {}",
         console::style(files_written).bold(),
         if files_written == 1 { "" } else { "s" },
-        console::style(format!("in {elapsed:.0?}")).dim(),
+        console::style(format!("in {:.0?}", stats.duration)).dim(),
     ));
 
     Ok(())
@@ -141,7 +100,7 @@ pub fn build(app: &std::path::Path, out: &std::path::Path, entry: &str) -> Resul
         app_args: AppArgs {
             app: app.to_path_buf(),
             entry: entry.to_string(),
-            css: CssMode::External,
+            css: CssStrategy::Link,
             plugin: None,
             components: Vec::new(),
         },
@@ -153,6 +112,7 @@ pub fn build(app: &std::path::Path, out: &std::path::Path, entry: &str) -> Resul
 #[allow(clippy::disallowed_methods)]
 mod tests {
     use super::*;
+    use std::fs;
     use std::path::Path;
     use tempfile::TempDir;
     use webui_protocol::web_ui_fragment::Fragment;
@@ -242,7 +202,7 @@ mod tests {
             app_args: AppArgs {
                 app: app_dir.path().to_path_buf(),
                 entry: "index.html".to_string(),
-                css: CssMode::Inline,
+                css: CssStrategy::Style,
                 plugin: None,
                 components: Vec::new(),
             },
@@ -262,7 +222,8 @@ mod tests {
 
         let result = build(app_dir.path(), out_dir.path(), "index.html");
         assert!(result.is_err());
-        assert!(result.unwrap_err().to_string().contains("Failed to read"));
+        let err = format!("{:#}", result.unwrap_err());
+        assert!(err.contains("Failed to read"));
     }
 
     #[test]
@@ -356,7 +317,7 @@ mod tests {
             app_args: AppArgs {
                 app: app_dir.path().to_path_buf(),
                 entry: "index.html".to_string(),
-                css: CssMode::External,
+                css: CssStrategy::Link,
                 plugin: None,
                 components: vec![ext_path],
             },
@@ -435,7 +396,7 @@ mod tests {
             app_args: AppArgs {
                 app: app_dir,
                 entry: "index.html".to_string(),
-                css: CssMode::External,
+                css: CssStrategy::Link,
                 plugin: None,
                 components: vec!["test-widget".to_string()],
             },
@@ -511,7 +472,7 @@ mod tests {
             app_args: AppArgs {
                 app: app_dir,
                 entry: "index.html".to_string(),
-                css: CssMode::External,
+                css: CssStrategy::Link,
                 plugin: None,
                 components: vec!["@myui".to_string()],
             },
diff --git a/crates/webui-cli/src/commands/common.rs b/crates/webui-cli/src/commands/common.rs
index 4652f1d3..0d4cf664 100644
--- a/crates/webui-cli/src/commands/common.rs
+++ b/crates/webui-cli/src/commands/common.rs
@@ -1,29 +1,6 @@
-use anyhow::{Context, Result};
-use clap::{Args, ValueEnum};
-use std::fs;
-use std::path::{Path, PathBuf};
-use webui_parser::plugin::FastParserPlugin;
-use webui_parser::{CssStrategy, HtmlParser};
-use webui_protocol::WebUIProtocol;
-
-/// CSS delivery strategy for component stylesheets.
-#[derive(ValueEnum, Clone, Copy, Debug, Default)]
-pub enum CssMode {
-    /// Emit <link> tags referencing external .css files (default)
-    #[default]
-    External,
-    /// Embed CSS inline in <style> tags within shadow DOM templates
-    Inline,
-}
-
-impl From<CssMode> for CssStrategy {
-    fn from(mode: CssMode) -> Self {
-        match mode {
-            CssMode::External => CssStrategy::External,
-            CssMode::Inline => CssStrategy::Inline,
-        }
-    }
-}
+use clap::Args;
+use std::path::PathBuf;
+pub use webui::CssStrategy;
 
 /// Shared CLI arguments used by both `build` and `start` commands.
 #[derive(Args, Clone)]
@@ -37,8 +14,8 @@ pub struct AppArgs {
     pub entry: String,
 
     /// CSS delivery strategy for component stylesheets
-    #[arg(long, value_enum, default_value_t = CssMode::External)]
-    pub css: CssMode,
+    #[arg(long, value_enum, default_value_t = CssStrategy::Link)]
+    pub css: CssStrategy,
 
     /// Parser plugin to load (e.g., "fast" for FAST-HTML hydration support)
     #[arg(long)]
@@ -49,103 +26,15 @@ pub struct AppArgs {
     pub components: Vec<String>,
 }
 
-/// Result of building the protocol from app templates.
-pub struct BuildOutput {
-    /// The compiled WebUI protocol
-    pub protocol: WebUIProtocol,
-    /// Component CSS files: (filename, content) — only components used in the protocol
-    pub css_files: Vec<(String, String)>,
-    /// Total fragment count
-    pub fragment_count: usize,
-    /// Number of registered components
-    pub component_count: usize,
-    /// Number of unique CSS tokens discovered
-    pub token_count: usize,
-}
-
-/// Build the protocol from an app directory.
-///
-/// This is the shared core: sets up parser, registers components (app + external),
-/// parses entry HTML, collects CSS for used components, and returns the protocol.
-pub fn build_protocol(app_dir: &Path, args: &AppArgs) -> Result<BuildOutput> {
-    // Set up parser with plugin
-    let mut parser = match args.plugin.as_deref() {
-        Some("fast") => HtmlParser::with_plugin(Box::new(FastParserPlugin::new())),
-        Some(unknown) => anyhow::bail!("Unknown plugin: {unknown}"),
-        None => HtmlParser::new(),
-    };
-    parser.set_css_strategy(args.css.into());
-
-    // Register app directory components
-    parser
-        .component_registry_mut()
-        .register_from_paths(&[app_dir])
-        .context("Failed to register components")?;
-
-    // Discover and register --components sources
-    for source in &args.components {
-        let result = webui_discovery::discover_source(source, app_dir)
-            .with_context(|| format!("Failed to discover components from {source}"))?;
-        for comp in &result.components {
-            parser
-                .component_registry_mut()
-                .register_component(
-                    &comp.tag_name,
-                    &comp.html_content,
-                    comp.css_content.as_deref(),
-                )
-                .with_context(|| {
-                    format!(
-                        "Failed to register component '{}' from {}",
-                        comp.tag_name, comp.source
-                    )
-                })?;
+impl AppArgs {
+    /// Convert CLI arguments into library `BuildOptions`.
+    pub fn to_build_options(&self, app_dir: &std::path::Path) -> webui::BuildOptions {
+        webui::BuildOptions {
+            app_dir: app_dir.to_path_buf(),
+            entry: self.entry.clone(),
+            css: self.css,
+            plugin: self.plugin.clone(),
+            components: self.components.clone(),
         }
     }
-
-    let component_count = parser.component_registry_mut().len();
-
-    // Parse entry HTML
-    let entry_path = app_dir.join(&args.entry);
-    let html_content = fs::read_to_string(&entry_path)
-        .with_context(|| format!("Failed to read {}", entry_path.display()))?;
-    parser
-        .parse(&args.entry, &html_content)
-        .context("Failed to parse HTML")?;
-
-    // Snapshot CSS for components that have it before consuming the parser
-    let css_snapshot: Vec<(String, String)> = parser
-        .component_registry_mut()
-        .get_all()
-        .filter_map(|c| {
-            c.css_content
-                .as_ref()
-                .map(|css| (c.tag_name.clone(), css.clone()))
-        })
-        .collect();
-
-    // Collect CSS tokens before consuming the parser
-    let tokens = parser.take_tokens();
-    let token_count = tokens.len();
-
-    // Build protocol (consumes parser)
-    let fragment_records = parser.into_fragment_records();
-    let fragment_count: usize = fragment_records.values().map(|v| v.fragments.len()).sum();
-
-    // Filter CSS to only protocol-referenced components
-    let css_files: Vec<(String, String)> = css_snapshot
-        .into_iter()
-        .filter(|(tag, _)| fragment_records.contains_key(tag))
-        .map(|(tag, css)| (format!("{tag}.css"), css))
-        .collect();
-
-    let protocol = WebUIProtocol::with_tokens(fragment_records, tokens);
-
-    Ok(BuildOutput {
-        protocol,
-        css_files,
-        fragment_count,
-        component_count,
-        token_count,
-    })
 }
diff --git a/crates/webui-cli/src/commands/inspect.rs b/crates/webui-cli/src/commands/inspect.rs
index 8639ce3f..a0d2e7d4 100644
--- a/crates/webui-cli/src/commands/inspect.rs
+++ b/crates/webui-cli/src/commands/inspect.rs
@@ -2,7 +2,6 @@ use anyhow::{Context, Result};
 use clap::Args;
 use expand_tilde::expand_tilde;
 use std::path::PathBuf;
-use webui_protocol::WebUIProtocol;
 
 #[derive(Args)]
 pub struct InspectArgs {
@@ -15,12 +14,8 @@ pub fn execute(args: &InspectArgs) -> Result<()> {
         .with_context(|| format!("Failed to expand input path: {}", args.file.display()))?
         .into_owned();
 
-    let protocol = WebUIProtocol::from_protobuf_file(&input_file)
-        .with_context(|| format!("Failed to read {}", args.file.display()))?;
-
-    let json = protocol
-        .to_json_pretty()
-        .context("Failed to serialize to JSON")?;
+    let json = webui::inspect(&input_file)
+        .with_context(|| format!("Failed to inspect {}", args.file.display()))?;
 
     println!("{json}");
     Ok(())
@@ -76,4 +71,4 @@ mod tests {
         let result = execute(&InspectArgs { file: path });
         assert!(result.is_err());
     }
-}
+}
diff --git a/crates/webui-cli/src/commands/mod.rs b/crates/webui-cli/src/commands/mod.rs
index 90ba6336..fe85ed68 100644
--- a/crates/webui-cli/src/commands/mod.rs
+++ b/crates/webui-cli/src/commands/mod.rs
@@ -1,7 +1,7 @@
 pub mod build;
 pub mod common;
 pub mod inspect;
-pub mod start;
+pub mod serve;
 
 use clap::Subcommand;
 
@@ -12,5 +12,5 @@ pub enum Commands {
     /// Inspect a protocol.bin file and output JSON to stdout
     Inspect(inspect::InspectArgs),
     /// Start a development server with live reload
-    Start(start::StartArgs),
+    Serve(serve::ServeArgs),
 }
diff --git a/crates/webui-cli/src/commands/start.rs b/crates/webui-cli/src/commands/serve.rs
similarity index 97%
rename from crates/webui-cli/src/commands/start.rs
rename to crates/webui-cli/src/commands/serve.rs
index 3047351a..2649f391 100644
--- a/crates/webui-cli/src/commands/start.rs
+++ b/crates/webui-cli/src/commands/serve.rs
@@ -10,14 +10,15 @@ use std::path::{Path, PathBuf};
 use std::sync::{Arc, Mutex};
 use std::thread;
 use std::time::{Duration, SystemTime};
+use webui::WebUIHandler;
 use webui_handler::plugin::FastHydrationPlugin;
-use webui_handler::{ResponseWriter, WebUIHandler};
+use webui_handler::ResponseWriter;
 
 use super::common::*;
 use crate::utils::output;
 
 #[derive(Args)]
-pub struct StartArgs {
+pub struct ServeArgs {
     #[command(flatten)]
     pub app_args: AppArgs,
 
@@ -38,16 +39,16 @@ pub struct StartArgs {
     pub watch: bool,
 }
 
-/// Resolved paths for `webui start`.
+/// Resolved paths for `webui serve`.
 #[derive(Clone)]
-struct StartPaths {
+struct ServePaths {
     app_dir: PathBuf,
     state_file: PathBuf,
     serve_dir: Option<PathBuf>,
 }
 
-impl StartPaths {
-    fn from_args(args: &StartArgs) -> Result<Self> {
+impl ServePaths {
+    fn from_args(args: &ServeArgs) -> Result<Self> {
         let app_input = expand_tilde(&args.app_args.app)
             .with_context(|| format!("Failed to expand app path: {}", args.app_args.app.display()))?
             .into_owned();
@@ -224,7 +225,7 @@ impl HmrBackend for PollingHmrBackend {
     }
 }
 
-pub fn execute(args: &StartArgs) -> Result<()> {
+pub fn execute(args: &ServeArgs) -> Result<()> {
     run(args).map_err(|err| {
         output::error(&err);
 
@@ -241,8 +242,8 @@ pub fn execute(args: &StartArgs) -> Result<()> {
     })
 }
 
-fn run(args: &StartArgs) -> Result<()> {
-    let paths = StartPaths::from_args(args)?;
+fn run(args: &ServeArgs) -> Result<()> {
+    let paths = ServePaths::from_args(args)?;
     let hmr_backend: Option<Arc<dyn HmrBackend>> = if args.watch {
         Some(Arc::new(PollingHmrBackend::new("/hmr", 1000)))
     } else {
@@ -360,7 +361,8 @@ fn build_and_render(
     config: &RenderConfig,
     hmr_backend: Option<&dyn HmrBackend>,
 ) -> Result<(String, HashMap<String, String>)> {
-    let build_output = build_protocol(&config.app_dir, &config.app_args)?;
+    let build_options = config.app_args.to_build_options(&config.app_dir);
+    let build_result = webui::build(build_options).with_context(|| "Build failed")?;
 
     let json = fs::read_to_string(&config.state_file)
         .with_context(|| format!("Failed to read {}", config.state_file.display()))?;
@@ -377,14 +379,14 @@ fn build_and_render(
         Some("fast") => WebUIHandler::with_plugin(Box::new(FastHydrationPlugin::new())),
         _ => WebUIHandler::new(),
     };
-    handler.handle(&build_output.protocol, &state, &mut writer)?;
+    handler.handle(&build_result.protocol, &state, &mut writer)?;
 
     let html = match hmr_backend {
         Some(backend) => backend.inject(&writer.buf),
         None => writer.buf,
     };
 
-    let css_map: HashMap<String, String> = build_output.css_files.into_iter().collect();
+    let css_map: HashMap<String, String> = build_result.css_files.into_iter().collect();
 
     Ok((html, css_map))
 }
@@ -634,7 +636,7 @@ mod tests {
             app_args: AppArgs {
                 app: app.path().to_path_buf(),
                 entry: "index.html".to_string(),
-                css: CssMode::External,
+                css: CssStrategy::Link,
                 plugin: None,
                 components: Vec::new(),
             },
@@ -656,7 +658,7 @@ mod tests {
             app_args: AppArgs {
                 app: app.path().to_path_buf(),
                 entry: "index.html".to_string(),
-                css: CssMode::External,
+                css: CssStrategy::Link,
                 plugin: None,
                 components: Vec::new(),
             },
@@ -675,7 +677,7 @@ mod tests {
             app_args: AppArgs {
                 app: app.path().to_path_buf(),
                 entry: "index.html".to_string(),
-                css: CssMode::External,
+                css: CssStrategy::Link,
                 plugin: None,
                 components: Vec::new(),
             },
@@ -693,7 +695,7 @@ mod tests {
             app_args: AppArgs {
                 app: app.path().to_path_buf(),
                 entry: "index.html".to_string(),
-                css: CssMode::External,
+                css: CssStrategy::Link,
                 plugin: None,
                 components: Vec::new(),
             },
@@ -712,7 +714,7 @@ mod tests {
             app_args: AppArgs {
                 app: app.path().to_path_buf(),
                 entry: "index.html".to_string(),
-                css: CssMode::External,
+                css: CssStrategy::Link,
                 plugin: None,
                 components: Vec::new(),
             },
@@ -825,7 +827,7 @@ mod tests {
             app_args: AppArgs {
                 app: app_dir.clone(),
                 entry: "index.html".to_string(),
-                css: CssMode::External,
+                css: CssStrategy::Link,
                 plugin: None,
                 components: Vec::new(),
             },
diff --git a/crates/webui-cli/src/main.rs b/crates/webui-cli/src/main.rs
index 5ab7a066..c6eb37fb 100644
--- a/crates/webui-cli/src/main.rs
+++ b/crates/webui-cli/src/main.rs
@@ -22,7 +22,7 @@ fn main() {
     let result = match command {
         Commands::Build(args) => commands::build::execute(args),
         Commands::Inspect(args) => commands::inspect::execute(args),
-        Commands::Start(args) => commands::start::execute(args),
+        Commands::Serve(args) => commands::serve::execute(args),
     };
 
     if result.is_err() {
diff --git a/crates/webui-node/Cargo.toml b/crates/webui-node/Cargo.toml
index b5053100..410c6fef 100644
--- a/crates/webui-node/Cargo.toml
+++ b/crates/webui-node/Cargo.toml
@@ -13,6 +13,7 @@ crate-type = ["cdylib"]
 [dependencies]
 napi = { workspace = true }
 napi-derive = { workspace = true }
+webui = { path = "../webui" }
 webui-handler = { path = "../webui-handler" }
 webui-protocol = { path = "../webui-protocol" }
 serde_json = { workspace = true }
@@ -23,3 +24,4 @@ napi-build = { workspace = true }
 [dev-dependencies]
 webui-parser = { path = "../webui-parser", default-features = false }
 webui-test-utils = { path = "../webui-test-utils" }
+tempfile = { workspace = true }
diff --git a/crates/webui-node/src/lib.rs b/crates/webui-node/src/lib.rs
index c16fe714..e624a9d8 100644
--- a/crates/webui-node/src/lib.rs
+++ b/crates/webui-node/src/lib.rs
@@ -1,236 +1,441 @@
-//! Node.js native addon for the WebUI framework via napi-rs.
-//!
-//! Provides high-performance server-side rendering by compiling the Rust
-//! WebUI handler directly into a `.node` native addon — no C ABI intermediary.
-//!
-//! The `render` function accepts pre-compiled protobuf protocol data (from
-//! `webui build`) and streams rendered HTML fragments via a callback, enabling
-//! true streaming SSR without buffering the entire response.
-//!
-//! ## Usage (from Node.js)
-//!
-//! ```js
-//! import fs from 'node:fs';
-//!
-//! // Load the native addon
-//! const mod = { exports: {} };
-//! process.dlopen(mod, './target/release/libwebui_node.dylib');
-//! const { render } = mod.exports;
-//!
-//! // Read pre-compiled protocol (from `webui build`)
-//! const protocol = fs.readFileSync('./dist/protocol.bin');
-//! const state = '{"name": "WebUI"}';
-//!
-//! // Stream rendered fragments
-//! render(protocol, state, (chunk) => process.stdout.write(chunk));
-//! ```
-
-use napi::bindgen_prelude::{Buffer, Function};
-use napi::Error as NapiError;
-use napi_derive::napi;
-use serde_json::Value;
-use webui_handler::plugin::FastHydrationPlugin;
-use webui_handler::{ResponseWriter, WebUIHandler};
-use webui_protocol::WebUIProtocol;
-
-/// A writer that streams each rendered fragment to a JS callback.
-struct CallbackWriter<'a, 'env> {
-    callback: &'a Function<'env, String, ()>,
-    error: Option<String>,
-}
-
-impl<'a, 'env> CallbackWriter<'a, 'env> {
-    fn new(callback: &'a Function<'env, String, ()>) -> Self {
-        Self {
-            callback,
-            error: None,
-        }
-    }
-}
-
-impl ResponseWriter for CallbackWriter<'_, '_> {
-    fn write(&mut self, content: &str) -> webui_handler::Result<()> {
-        if self.error.is_some() {
-            return Ok(());
-        }
-        if let Err(e) = self.callback.call(content.to_owned()) {
-            // Ignore "Value is not undefined" errors from callbacks that
-            // return non-void (e.g. res.write() returns a boolean).
-            let msg = format!("{e}");
-            if !msg.contains("Value is not undefined") {
-                self.error = Some(msg);
-            }
-        }
-        Ok(())
-    }
-
-    fn end(&mut self) -> webui_handler::Result<()> {
-        Ok(())
-    }
-}
-
-/// Render a pre-compiled WebUI protocol with JSON state, streaming each
-/// fragment to the provided callback.
-///
-/// # Arguments
-///
-/// * `protocol_data` — Protobuf binary from `webui build` (zero-copy Buffer).
-/// * `state_json` — JSON string with the render state.
-/// * `on_chunk` — Called with each rendered HTML fragment as it is produced.
-/// * `plugin` — Optional plugin identifier (e.g., `"fast"`).
-#[napi]
-pub fn render(
-    protocol_data: Buffer,
-    state_json: String,
-    on_chunk: Function<String, ()>,
-    plugin: Option<String>,
-) -> napi::Result<()> {
-    let protocol = WebUIProtocol::from_protobuf(&protocol_data)
-        .map_err(|e| NapiError::from_reason(format!("Protocol decode error: {e}")))?;
-
-    let state: Value = serde_json::from_str(&state_json)
-        .map_err(|e| NapiError::from_reason(format!("State JSON error: {e}")))?;
-
-    let mut writer = CallbackWriter::new(&on_chunk);
-    let mut handler = match plugin.as_deref() {
-        Some("fast") => WebUIHandler::with_plugin(Box::new(FastHydrationPlugin::new())),
-        Some(unknown) => {
-            return Err(NapiError::from_reason(format!("Unknown plugin: {unknown}")));
-        }
-        None => WebUIHandler::new(),
-    };
-    handler
-        .render(&protocol, &state, &mut writer)
-        .map_err(|e| NapiError::from_reason(format!("Render error: {e}")))?;
-
-    if let Some(err) = writer.error {
-        return Err(NapiError::from_reason(format!("Callback error: {err}")));
-    }
-
-    Ok(())
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use webui_parser::HtmlParser;
-
-    /// Helper: parse HTML into protobuf bytes for testing.
-    fn build_protocol(html: &str) -> Vec<u8> {
-        let mut parser = HtmlParser::new();
-        parser.parse("index.html", html).expect("parse failed");
-        let protocol = WebUIProtocol::new(parser.into_fragment_records());
-        protocol.to_protobuf().expect("protobuf encode failed")
-    }
-
-    /// Helper: render protocol bytes + state, collecting output into a String.
-    fn render_to_string(protocol_bytes: &[u8], state_json: &str) -> Result<String, String> {
-        let protocol = WebUIProtocol::from_protobuf(protocol_bytes).map_err(|e| e.to_string())?;
-        let state: Value = serde_json::from_str(state_json).map_err(|e| e.to_string())?;
-
-        let mut output = String::with_capacity(1024);
-        let mut handler = WebUIHandler::new();
-
-        struct StringWriter<'a> {
-            output: &'a mut String,
-        }
-        impl ResponseWriter for StringWriter<'_> {
-            fn write(&mut self, content: &str) -> webui_handler::Result<()> {
-                self.output.push_str(content);
-                Ok(())
-            }
-            fn end(&mut self) -> webui_handler::Result<()> {
-                Ok(())
-            }
-        }
-
-        let mut writer = StringWriter {
-            output: &mut output,
-        };
-        handler
-            .render(&protocol, &state, &mut writer)
-            .map_err(|e| e.to_string())?;
-        Ok(output)
-    }
-
-    #[test]
-    fn test_simple_passthrough() {
-        let proto = build_protocol("<p>Hello</p>");
-        let result = render_to_string(&proto, "{}");
-        assert_eq!(result.as_deref(), Ok("<p>Hello</p>"));
-    }
-
-    #[test]
-    fn test_signal_substitution() {
-        let proto = build_protocol("Hello, {{name}}!");
-        let result = render_to_string(&proto, r#"{"name": "WebUI"}"#);
-        assert_eq!(result.as_deref(), Ok("Hello, WebUI!"));
-    }
-
-    #[test]
-    fn test_for_loop() {
-        let proto = build_protocol("<ul><for each=\"item in items\"><li>{{item}}</li></for></ul>");
-        let result = render_to_string(&proto, r#"{"items": ["a", "b", "c"]}"#);
-        assert_eq!(
-            result.as_deref(),
-            Ok("<ul><li>a</li><li>b</li><li>c</li></ul>")
-        );
-    }
-
-    #[test]
-    fn test_if_condition_true() {
-        let proto = build_protocol("<if condition=\"show\"><p>Visible</p></if>");
-        let result = render_to_string(&proto, r#"{"show": true}"#);
-        assert_eq!(result.as_deref(), Ok("<p>Visible</p>"));
-    }
-
-    #[test]
-    fn test_if_condition_false() {
-        let proto = build_protocol("<if condition=\"show\"><p>Hidden</p></if>");
-        let result = render_to_string(&proto, r#"{"show": false}"#);
-        assert_eq!(result.as_deref(), Ok(""));
-    }
-
-    #[test]
-    fn test_html_escaping() {
-        let proto = build_protocol("<div>{{content}}</div>");
-        let state = r#"{"content": "<script>alert('xss')</script>"}"#;
-        let result = render_to_string(&proto, state).expect("render should succeed");
-        assert!(!result.contains("<script>"));
-        assert!(result.contains("&lt;script&gt;"));
-    }
-
-    #[test]
-    fn test_raw_signal() {
-        let proto = build_protocol("<div>{{{content}}}</div>");
-        let result = render_to_string(&proto, r#"{"content": "<b>bold</b>"}"#);
-        assert_eq!(result.as_deref(), Ok("<div><b>bold</b></div>"));
-    }
-
-    #[test]
-    fn test_invalid_json() {
-        let proto = build_protocol("<p>hi</p>");
-        let result = render_to_string(&proto, "NOT JSON");
-        assert!(result.is_err());
-    }
-
-    #[test]
-    fn test_empty_state() {
-        let proto = build_protocol("<p>static</p>");
-        let result = render_to_string(&proto, "{}");
-        assert_eq!(result.as_deref(), Ok("<p>static</p>"));
-    }
-
-    #[test]
-    fn test_nested_object_signal() {
-        let proto = build_protocol("{{user.name}}");
-        let result = render_to_string(&proto, r#"{"user": {"name": "Alice"}}"#);
-        assert_eq!(result.as_deref(), Ok("Alice"));
-    }
-
-    #[test]
-    fn test_invalid_protobuf() {
-        let result = render_to_string(&[0xFF, 0xFF, 0xFF], "{}");
-        assert!(result.is_err());
-    }
-}
+//! Node.js native addon for the WebUI framework via napi-rs.
+//!
+//! Provides high-performance server-side rendering by compiling the Rust
+//! WebUI handler directly into a `.node` native addon — no C ABI intermediary.
+//!
+//! The `render` function accepts pre-compiled protobuf protocol data (from
+//! `webui build`) and streams rendered HTML fragments via a callback, enabling
+//! true streaming SSR without buffering the entire response.
+//!
+//! ## Usage (from Node.js)
+//!
+//! ```js
+//! import fs from 'node:fs';
+//!
+//! // Load the native addon
+//! const mod = { exports: {} };
+//! process.dlopen(mod, './target/release/libwebui_node.dylib');
+//! const { render } = mod.exports;
+//!
+//! // Read pre-compiled protocol (from `webui build`)
+//! const protocol = fs.readFileSync('./dist/protocol.bin');
+//! const state = '{"name": "WebUI"}';
+//!
+//! // Stream rendered fragments
+//! render(protocol, state, (chunk) => process.stdout.write(chunk));
+//! ```
+
+use napi::bindgen_prelude::{Buffer, Function};
+use napi::Error as NapiError;
+use napi_derive::napi;
+use serde_json::Value;
+use webui_handler::plugin::FastHydrationPlugin;
+use webui_handler::{ResponseWriter, WebUIHandler};
+use webui_protocol::WebUIProtocol;
+
+/// Build statistics returned from the build function.
+#[napi(object)]
+pub struct JsBuildStats {
+    /// Build duration in milliseconds.
+    pub duration_ms: f64,
+    /// Total number of protocol fragments.
+    pub fragment_count: u32,
+    /// Number of registered components.
+    pub component_count: u32,
+    /// Number of CSS files produced.
+    pub css_file_count: u32,
+    /// Size of the serialized protocol in bytes.
+    pub protocol_size_bytes: u32,
+    /// Number of unique CSS tokens discovered.
+    pub token_count: u32,
+}
+
+/// Result of a successful build operation.
+#[napi(object)]
+pub struct JsBuildResult {
+    /// Serialized protocol (protobuf binary).
+    pub protocol: Buffer,
+    /// CSS files as alternating [filename, content, filename, content, ...].
+    pub css_files: Vec<String>,
+    /// Build statistics.
+    pub stats: JsBuildStats,
+}
+
+/// Build options for the webui build API.
+#[napi(object)]
+pub struct JsBuildOptions {
+    /// Path to the application folder containing templates.
+    pub app_dir: String,
+    /// Entry HTML file name (defaults to "index.html").
+    pub entry: Option<String>,
+    /// CSS mode: "link" (default) or "style".
+    pub css: Option<String>,
+    /// Parser plugin (e.g., "fast").
+    pub plugin: Option<String>,
+    /// Additional component sources (npm packages or local paths).
+    pub components: Option<Vec<String>>,
+}
+
+/// Build a WebUI application from an app directory.
+///
+/// Returns the compiled protocol bytes, CSS files, and build statistics.
+#[napi]
+pub fn build(options: JsBuildOptions) -> napi::Result<JsBuildResult> {
+    let css = match options.css.as_deref() {
+        Some("style") => webui::CssStrategy::Style,
+        Some("link") | None => webui::CssStrategy::Link,
+        Some(unknown) => {
+            return Err(NapiError::from_reason(format!(
+                "Unknown CSS mode: {unknown}. Use \"link\" or \"style\"."
+            )));
+        }
+    };
+
+    let build_options = webui::BuildOptions {
+        app_dir: std::path::PathBuf::from(&options.app_dir),
+        entry: options.entry.unwrap_or_else(|| "index.html".to_string()),
+        css,
+        plugin: options.plugin,
+        components: options.components.unwrap_or_default(),
+    };
+
+    let result = webui::build(build_options)
+        .map_err(|e| NapiError::from_reason(format!("Build error: {e}")))?;
+
+    // Flatten css_files into alternating [filename, content, ...] for JS interop
+    let css_files: Vec<String> = result
+        .css_files
+        .into_iter()
+        .flat_map(|(name, content)| [name, content])
+        .collect();
+
+    Ok(JsBuildResult {
+        protocol: Buffer::from(result.protocol_bytes),
+        css_files,
+        stats: JsBuildStats {
+            duration_ms: result.stats.duration.as_secs_f64() * 1000.0,
+            fragment_count: result.stats.fragment_count as u32,
+            component_count: result.stats.component_count as u32,
+            css_file_count: result.stats.css_file_count as u32,
+            protocol_size_bytes: result.stats.protocol_size_bytes as u32,
+            token_count: result.stats.token_count as u32,
+        },
+    })
+}
+
+/// Inspect protocol bytes and return a JSON representation.
+#[napi]
+pub fn inspect(protocol_data: Buffer) -> napi::Result<String> {
+    webui::inspect_bytes(&protocol_data)
+        .map_err(|e| NapiError::from_reason(format!("Inspect error: {e}")))
+}
+
+/// A writer that streams each rendered fragment to a JS callback.
+struct CallbackWriter<'a, 'env> {
+    callback: &'a Function<'env, String, ()>,
+    error: Option<String>,
+}
+
+impl<'a, 'env> CallbackWriter<'a, 'env> {
+    fn new(callback: &'a Function<'env, String, ()>) -> Self {
+        Self {
+            callback,
+            error: None,
+        }
+    }
+}
+
+impl ResponseWriter for CallbackWriter<'_, '_> {
+    fn write(&mut self, content: &str) -> webui_handler::Result<()> {
+        if self.error.is_some() {
+            return Ok(());
+        }
+        if let Err(e) = self.callback.call(content.to_owned()) {
+            // Ignore "Value is not undefined" errors from callbacks that
+            // return non-void (e.g. res.write() returns a boolean).
+            let msg = format!("{e}");
+            if !msg.contains("Value is not undefined") {
+                self.error = Some(msg);
+            }
+        }
+        Ok(())
+    }
+
+    fn end(&mut self) -> webui_handler::Result<()> {
+        Ok(())
+    }
+}
+
+/// Render a pre-compiled WebUI protocol with JSON state, streaming each
+/// fragment to the provided callback.
+///
+/// # Arguments
+///
+/// * `protocol_data` — Protobuf binary from `webui build` (zero-copy Buffer).
+/// * `state_json` — JSON string with the render state.
+/// * `on_chunk` — Called with each rendered HTML fragment as it is produced.
+/// * `plugin` — Optional plugin identifier (e.g., `"fast"`).
+#[napi]
+pub fn render(
+    protocol_data: Buffer,
+    state_json: String,
+    on_chunk: Function<String, ()>,
+    plugin: Option<String>,
+) -> napi::Result<()> {
+    let protocol = WebUIProtocol::from_protobuf(&protocol_data)
+        .map_err(|e| NapiError::from_reason(format!("Protocol decode error: {e}")))?;
+
+    let state: Value = serde_json::from_str(&state_json)
+        .map_err(|e| NapiError::from_reason(format!("State JSON error: {e}")))?;
+
+    let mut writer = CallbackWriter::new(&on_chunk);
+    let mut handler = match plugin.as_deref() {
+        Some("fast") => WebUIHandler::with_plugin(Box::new(FastHydrationPlugin::new())),
+        Some(unknown) => {
+            return Err(NapiError::from_reason(format!("Unknown plugin: {unknown}")));
+        }
+        None => WebUIHandler::new(),
+    };
+    handler
+        .render(&protocol, &state, &mut writer)
+        .map_err(|e| NapiError::from_reason(format!("Render error: {e}")))?;
+
+    if let Some(err) = writer.error {
+        return Err(NapiError::from_reason(format!("Callback error: {err}")));
+    }
+
+    Ok(())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use webui_parser::HtmlParser;
+
+    /// Helper: parse HTML into protobuf bytes for testing.
+    fn build_protocol(html: &str) -> Vec<u8> {
+        let mut parser = HtmlParser::new();
+        parser.parse("index.html", html).expect("parse failed");
+        let tokens = parser.take_tokens();
+        let protocol = WebUIProtocol::with_tokens(parser.into_fragment_records(), tokens);
+        protocol.to_protobuf().expect("protobuf encode failed")
+    }
+
+    /// Helper: render protocol bytes + state, collecting output into a String.
+    fn render_to_string(protocol_bytes: &[u8], state_json: &str) -> Result<String, String> {
+        let protocol = WebUIProtocol::from_protobuf(protocol_bytes).map_err(|e| e.to_string())?;
+        let state: Value = serde_json::from_str(state_json).map_err(|e| e.to_string())?;
+
+        let mut output = String::with_capacity(1024);
+        let mut handler = WebUIHandler::new();
+
+        struct StringWriter<'a> {
+            output: &'a mut String,
+        }
+        impl ResponseWriter for StringWriter<'_> {
+            fn write(&mut self, content: &str) -> webui_handler::Result<()> {
+                self.output.push_str(content);
+                Ok(())
+            }
+            fn end(&mut self) -> webui_handler::Result<()> {
+                Ok(())
+            }
+        }
+
+        let mut writer = StringWriter {
+            output: &mut output,
+        };
+        handler
+            .render(&protocol, &state, &mut writer)
+            .map_err(|e| e.to_string())?;
+        Ok(output)
+    }
+
+    #[test]
+    fn test_simple_passthrough() {
+        let proto = build_protocol("<p>Hello</p>");
+        let result = render_to_string(&proto, "{}");
+        assert_eq!(result.as_deref(), Ok("<p>Hello</p>"));
+    }
+
+    #[test]
+    fn test_signal_substitution() {
+        let proto = build_protocol("Hello, {{name}}!");
+        let result = render_to_string(&proto, r#"{"name": "WebUI"}"#);
+        assert_eq!(result.as_deref(), Ok("Hello, WebUI!"));
+    }
+
+    #[test]
+    fn test_for_loop() {
+        let proto = build_protocol("<ul><for each=\"item in items\"><li>{{item}}</li></for></ul>");
+        let result = render_to_string(&proto, r#"{"items": ["a", "b", "c"]}"#);
+        assert_eq!(
+            result.as_deref(),
+            Ok("<ul><li>a</li><li>b</li><li>c</li></ul>")
+        );
+    }
+
+    #[test]
+    fn test_if_condition_true() {
+        let proto = build_protocol("<if condition=\"show\"><p>Visible</p></if>");
+        let result = render_to_string(&proto, r#"{"show": true}"#);
+        assert_eq!(result.as_deref(), Ok("<p>Visible</p>"));
+    }
+
+    #[test]
+    fn test_if_condition_false() {
+        let proto = build_protocol("<if condition=\"show\"><p>Hidden</p></if>");
+        let result = render_to_string(&proto, r#"{"show": false}"#);
+        assert_eq!(result.as_deref(), Ok(""));
+    }
+
+    #[test]
+    fn test_html_escaping() {
+        let proto = build_protocol("<div>{{content}}</div>");
+        let state = r#"{"content": "<script>alert('xss')</script>"}"#;
+        let result = render_to_string(&proto, state).expect("render should succeed");
+        assert!(!result.contains("<script>"));
+        assert!(result.contains("&lt;script&gt;"));
+    }
+
+    #[test]
+    fn test_raw_signal() {
+        let proto = build_protocol("<div>{{{content}}}</div>");
+        let result = render_to_string(&proto, r#"{"content": "<b>bold</b>"}"#);
+        assert_eq!(result.as_deref(), Ok("<div><b>bold</b></div>"));
+    }
+
+    #[test]
+    fn test_invalid_json() {
+        let proto = build_protocol("<p>hi</p>");
+        let result = render_to_string(&proto, "NOT JSON");
+        assert!(result.is_err());
+    }
+
+    #[test]
+    fn test_empty_state() {
+        let proto = build_protocol("<p>static</p>");
+        let result = render_to_string(&proto, "{}");
+        assert_eq!(result.as_deref(), Ok("<p>static</p>"));
+    }
+
+    #[test]
+    fn test_nested_object_signal() {
+        let proto = build_protocol("{{user.name}}");
+        let result = render_to_string(&proto, r#"{"user": {"name": "Alice"}}"#);
+        assert_eq!(result.as_deref(), Ok("Alice"));
+    }
+
+    #[test]
+    fn test_invalid_protobuf() {
+        let result = render_to_string(&[0xFF, 0xFF, 0xFF], "{}");
+        assert!(result.is_err());
+    }
+
+    // ── Tests for build() and inspect() napi exports ─────────────────
+
+    #[test]
+    fn test_build_simple_app() {
+        let dir = tempfile::TempDir::new().unwrap();
+        std::fs::write(dir.path().join("index.html"), "<h1>Hello</h1>").unwrap();
+
+        let options = JsBuildOptions {
+            app_dir: dir.path().to_string_lossy().to_string(),
+            entry: None,
+            css: None,
+            plugin: None,
+            components: None,
+        };
+
+        let result = build(options).unwrap();
+        assert!(!result.protocol.is_empty());
+        assert!(result.stats.fragment_count > 0);
+        assert!(result.stats.protocol_size_bytes > 0);
+        assert!(result.stats.duration_ms >= 0.0);
+    }
+
+    #[test]
+    fn test_build_with_custom_entry() {
+        let dir = tempfile::TempDir::new().unwrap();
+        std::fs::write(dir.path().join("page.html"), "<p>Custom</p>").unwrap();
+
+        let options = JsBuildOptions {
+            app_dir: dir.path().to_string_lossy().to_string(),
+            entry: Some("page.html".to_string()),
+            css: None,
+            plugin: None,
+            components: None,
+        };
+
+        let result = build(options).unwrap();
+        assert!(!result.protocol.is_empty());
+    }
+
+    #[test]
+    fn test_build_missing_app_dir() {
+        let options = JsBuildOptions {
+            app_dir: "/nonexistent/path".to_string(),
+            entry: None,
+            css: None,
+            plugin: None,
+            components: None,
+        };
+
+        let result = build(options);
+        assert!(result.is_err());
+    }
+
+    #[test]
+    fn test_build_invalid_css() {
+        let dir = tempfile::TempDir::new().unwrap();
+        std::fs::write(dir.path().join("index.html"), "<h1>Hello</h1>").unwrap();
+
+        let options = JsBuildOptions {
+            app_dir: dir.path().to_string_lossy().to_string(),
+            entry: None,
+            css: Some("bogus".to_string()),
+            plugin: None,
+            components: None,
+        };
+
+        let result = build(options);
+        assert!(result.is_err());
+    }
+
+    #[test]
+    fn test_build_with_components_css() {
+        let dir = tempfile::TempDir::new().unwrap();
+        std::fs::write(dir.path().join("index.html"), "<my-card>Hello</my-card>").unwrap();
+        std::fs::write(dir.path().join("my-card.html"), "<div><slot></slot></div>").unwrap();
+        std::fs::write(dir.path().join("my-card.css"), ".card { color: red; }").unwrap();
+
+        let options = JsBuildOptions {
+            app_dir: dir.path().to_string_lossy().to_string(),
+            entry: None,
+            css: Some("link".to_string()),
+            plugin: None,
+            components: None,
+        };
+
+        let result = build(options).unwrap();
+        // css_files is flattened: [filename, content, filename, content, ...]
+        assert_eq!(result.css_files.len(), 2);
+        assert_eq!(result.css_files[0], "my-card.css");
+        assert!(result.css_files[1].contains("color: red"));
+        assert_eq!(result.stats.css_file_count, 1);
+    }
+
+    #[test]
+    fn test_inspect_valid_protocol() {
+        let proto = build_protocol("<h1>Hello {{name}}</h1>");
+        let json = inspect(napi::bindgen_prelude::Buffer::from(proto)).unwrap();
+        let parsed: serde_json::Value = serde_json::from_str(&json).unwrap();
+        assert!(parsed.get("fragments").is_some());
+    }
+
+    #[test]
+    fn test_inspect_invalid_protocol() {
+        let result = inspect(napi::bindgen_prelude::Buffer::from(vec![0xFF, 0xFF]));
+        assert!(result.is_err());
+    }
+}
diff --git a/crates/webui-parser/Cargo.toml b/crates/webui-parser/Cargo.toml
index eeaab07f..29bde08e 100644
--- a/crates/webui-parser/Cargo.toml
+++ b/crates/webui-parser/Cargo.toml
@@ -10,6 +10,7 @@ repository.workspace = true
 [features]
 default = ["fs"]
 fs = ["walkdir"]
+cli = ["clap"]
 
 [dependencies]
 webui-expressions = { path = "../webui-expressions" }
@@ -22,6 +23,7 @@ tree-sitter-language = { workspace = true }
 tree-sitter-html = { workspace = true }
 tree-sitter-css = { workspace = true }
 walkdir = { workspace = true, optional = true }
+clap = { workspace = true, optional = true }
 
 [dev-dependencies]
 mockall = { workspace = true }
diff --git a/crates/webui-parser/benches/parser_bench.rs b/crates/webui-parser/benches/parser_bench.rs
index af13f4c2..b53260db 100644
--- a/crates/webui-parser/benches/parser_bench.rs
+++ b/crates/webui-parser/benches/parser_bench.rs
@@ -340,7 +340,7 @@ fn parser_css_strategy_bench(c: &mut Criterion) {
 
     group.bench_function("external_css", |b| {
         let mut parser = HtmlParser::new();
-        parser.set_css_strategy(CssStrategy::External);
+        parser.set_css_strategy(CssStrategy::Link);
         b.iter(|| {
             parser
                 .parse("index.html", black_box(&input))
@@ -350,7 +350,7 @@ fn parser_css_strategy_bench(c: &mut Criterion) {
 
     group.bench_function("inline_css", |b| {
         let mut parser = HtmlParser::new();
-        parser.set_css_strategy(CssStrategy::Inline);
+        parser.set_css_strategy(CssStrategy::Style);
         b.iter(|| {
             parser
                 .parse("index.html", black_box(&input))
diff --git a/crates/webui-parser/src/lib.rs b/crates/webui-parser/src/lib.rs
index 7dfe4fc2..5dbffca2 100644
--- a/crates/webui-parser/src/lib.rs
+++ b/crates/webui-parser/src/lib.rs
@@ -25,12 +25,13 @@ use webui_protocol::{
 
 /// Strategy for how component CSS is delivered in rendered output.
 #[derive(Debug, Clone, Copy, PartialEq, Eq, Default)]
+#[cfg_attr(feature = "cli", derive(clap::ValueEnum))]
 pub enum CssStrategy {
     /// Emit `<link rel="stylesheet" href="./component.css">` tags (default).
     #[default]
-    External,
-    /// Embed CSS content inline in `<style>` tags within the shadow DOM template.
-    Inline,
+    Link,
+    /// Embed CSS content in `<style>` tags within the shadow DOM template.
+    Style,
 }
 
 /// Counter for generating unique fragment IDs.
@@ -1106,7 +1107,7 @@ impl HtmlParser {
             }
 
             let css_injection = match self.css_strategy {
-                CssStrategy::External => {
+                CssStrategy::Link => {
                     if css_content.is_some() {
                         Some(format!(
                             "<link rel=\"stylesheet\" href=\"./{}.css\">",
@@ -1116,7 +1117,7 @@ impl HtmlParser {
                         None
                     }
                 }
-                CssStrategy::Inline => css_content
+                CssStrategy::Style => css_content
                     .as_ref()
                     .map(|css| format!("<style>{}</style>", css.trim())),
             };
@@ -2455,7 +2456,7 @@ mod tests {
     #[test]
     fn test_css_strategy_inline_emits_style_tag() {
         let mut parser = HtmlParser::new();
-        parser.set_css_strategy(CssStrategy::Inline);
+        parser.set_css_strategy(CssStrategy::Style);
         parser
             .component_registry_mut()
             .register_component("my-card", "<p><slot></slot></p>", Some("p { color: red; }"))
diff --git a/crates/webui-wasm/src/lib.rs b/crates/webui-wasm/src/lib.rs
index a1c0f17b..884dff53 100644
--- a/crates/webui-wasm/src/lib.rs
+++ b/crates/webui-wasm/src/lib.rs
@@ -164,7 +164,7 @@ fn parse_to_protocol(
         .ok_or_else(|| BuildError::MissingEntry(entry.to_string()))?;
 
     let mut parser = HtmlParser::new();
-    parser.set_css_strategy(CssStrategy::Inline);
+    parser.set_css_strategy(CssStrategy::Style);
 
     // Register components from virtual files (no filesystem needed)
     for (filename, content) in files {
@@ -316,7 +316,7 @@ mod tests {
         let result = build_and_render_inner(&files, "{}", "index.html");
         assert!(result.is_ok(), "Render failed: {:?}", result);
         let html = result.as_deref().unwrap_or("");
-        // WASM uses CssStrategy::Inline, so CSS should be in <style> tags, not <link>
+        // WASM uses CssStrategy::Style, so CSS should be in <style> tags, not <link>
         assert!(
             html.contains("<style>p { color: red; }</style>"),
             "Expected inline <style> tag in: {}",
diff --git a/crates/webui/Cargo.toml b/crates/webui/Cargo.toml
new file mode 100644
index 00000000..b0d91451
--- /dev/null
+++ b/crates/webui/Cargo.toml
@@ -0,0 +1,22 @@
+[package]
+name = "webui"
+description = "Programmatic API for the WebUI build-time rendering framework"
+version.workspace = true
+edition.workspace = true
+authors.workspace = true
+license.workspace = true
+repository.workspace = true
+
+[features]
+cli = ["webui-parser/cli"]
+
+[dependencies]
+webui-parser = { path = "../webui-parser" }
+webui-protocol = { path = "../webui-protocol" }
+webui-handler = { path = "../webui-handler" }
+webui-discovery = { path = "../webui-discovery" }
+thiserror = { workspace = true }
+serde_json = { workspace = true }
+
+[dev-dependencies]
+tempfile = { workspace = true }
diff --git a/crates/webui/src/error.rs b/crates/webui/src/error.rs
new file mode 100644
index 00000000..6002b73e
--- /dev/null
+++ b/crates/webui/src/error.rs
@@ -0,0 +1,39 @@
+//! Error types for the WebUI library.
+
+use thiserror::Error;
+
+/// Errors that can occur during WebUI build, render, or inspection operations.
+#[derive(Debug, Error)]
+pub enum WebUIError {
+    /// I/O error (file read/write failures).
+    #[error("I/O error: {0}")]
+    Io(String),
+
+    /// Invalid or unknown parser plugin.
+    #[error("Unknown plugin: {0}")]
+    InvalidPlugin(String),
+
+    /// Component registration failure.
+    #[error("Component registration error: {0}")]
+    ComponentRegistration(String),
+
+    /// Component discovery failure (npm packages or local paths).
+    #[error("Component discovery error: {0}")]
+    ComponentDiscovery(String),
+
+    /// HTML/CSS parsing failure.
+    #[error("Parse error: {0}")]
+    Parse(String),
+
+    /// Protocol serialization or deserialization failure.
+    #[error("Protocol error: {0}")]
+    Protocol(String),
+
+    /// JSON serialization failure.
+    #[error("Serialization error: {0}")]
+    Serialization(String),
+
+    /// Handler rendering error.
+    #[error("Rendering error: {0}")]
+    Rendering(String),
+}
diff --git a/crates/webui/src/lib.rs b/crates/webui/src/lib.rs
new file mode 100644
index 00000000..e876f76d
--- /dev/null
+++ b/crates/webui/src/lib.rs
@@ -0,0 +1,719 @@
+//! Programmatic API for the WebUI build-time rendering framework.
+//!
+//! This crate provides the core build, render, and inspection APIs
+//! that power the `webui` CLI, Node.js bindings, and WASM module.
+//!
+//! # Example
+//!
+//! ```rust,no_run
+//! use webui::{build, BuildOptions, CssStrategy};
+//! use std::path::PathBuf;
+//!
+//! let result = build(BuildOptions {
+//!     app_dir: PathBuf::from("./src"),
+//!     entry: "index.html".to_string(),
+//!     css: CssStrategy::Link,
+//!     plugin: None,
+//!     components: Vec::new(),
+//! }).unwrap();
+//!
+//! println!("Built {} fragments in {:?}", result.stats.fragment_count, result.stats.duration);
+//! ```
+
+mod error;
+
+pub use error::WebUIError;
+
+// Re-export core types from downstream crates
+pub use webui_handler::{plugin::HandlerPlugin, HandlerError, ResponseWriter, WebUIHandler};
+pub use webui_parser::CssStrategy;
+pub use webui_protocol::WebUIProtocol;
+
+use std::fs;
+use std::path::Path;
+use std::time::Instant;
+use webui_parser::plugin::FastParserPlugin;
+use webui_parser::HtmlParser;
+
+/// Options for building a WebUI application.
+#[derive(Debug, Clone)]
+pub struct BuildOptions {
+    /// Path to the application folder containing templates.
+    pub app_dir: std::path::PathBuf,
+    /// Entry HTML file name (e.g., `"index.html"`).
+    pub entry: String,
+    /// CSS delivery strategy for component stylesheets.
+    pub css: CssStrategy,
+    /// Parser plugin to load (e.g., `"fast"` for FAST-HTML hydration support).
+    pub plugin: Option<String>,
+    /// Additional component sources (npm packages or local paths).
+    pub components: Vec<String>,
+}
+
+/// Statistics about a completed build.
+#[derive(Debug, Clone)]
+pub struct BuildStats {
+    /// Total wall-clock build time.
+    pub duration: std::time::Duration,
+    /// Total number of protocol fragments.
+    pub fragment_count: usize,
+    /// Number of registered components.
+    pub component_count: usize,
+    /// Number of CSS files produced.
+    pub css_file_count: usize,
+    /// Size of the serialized protocol in bytes.
+    pub protocol_size_bytes: usize,
+    /// Number of unique CSS tokens discovered.
+    pub token_count: usize,
+}
+
+/// Result of a successful build.
+#[derive(Debug)]
+pub struct BuildResult {
+    /// The compiled WebUI protocol.
+    pub protocol: WebUIProtocol,
+    /// Serialized protocol bytes (protobuf binary).
+    pub protocol_bytes: Vec<u8>,
+    /// Component CSS files: `(filename, content)` — only components referenced in the protocol.
+    pub css_files: Vec<(String, String)>,
+    /// Build statistics.
+    pub stats: BuildStats,
+}
+
+/// Build a WebUI application from an app directory.
+///
+/// Parses templates, discovers components, and produces a compiled protocol
+/// with build statistics.
+///
+/// # Errors
+///
+/// Returns [`WebUIError`] if the app directory is invalid, templates fail
+/// to parse, or the protocol cannot be serialized.
+#[must_use = "BuildResult contains the compiled protocol and statistics"]
+pub fn build(options: BuildOptions) -> Result<BuildResult, WebUIError> {
+    let started = Instant::now();
+
+    let raw = build_protocol_inner(&options)?;
+
+    let protocol_bytes = raw
+        .protocol
+        .to_protobuf()
+        .map_err(|e| WebUIError::Serialization(e.to_string()))?;
+
+    let stats = BuildStats {
+        duration: started.elapsed(),
+        fragment_count: raw.fragment_count,
+        component_count: raw.component_count,
+        css_file_count: raw.css_files.len(),
+        protocol_size_bytes: protocol_bytes.len(),
+        token_count: raw.token_count,
+    };
+
+    Ok(BuildResult {
+        protocol: raw.protocol,
+        protocol_bytes,
+        css_files: raw.css_files,
+        stats,
+    })
+}
+
+/// Build a WebUI application and write output files to disk.
+///
+/// Writes `protocol.bin` and any external CSS files to `out_dir`.
+/// Creates `out_dir` if it does not exist.
+///
+/// # Errors
+///
+/// Returns [`WebUIError`] on build failure or if output files cannot be written.
+pub fn build_to_disk(options: BuildOptions, out_dir: &Path) -> Result<BuildStats, WebUIError> {
+    let result = build(options)?;
+
+    fs::create_dir_all(out_dir)
+        .map_err(|e| WebUIError::Io(format!("Failed to create output dir: {e}")))?;
+
+    let protocol_path = out_dir.join("protocol.bin");
+    fs::write(&protocol_path, &result.protocol_bytes)
+        .map_err(|e| WebUIError::Io(format!("Failed to write protocol.bin: {e}")))?;
+
+    for (filename, css_content) in &result.css_files {
+        // Sanitize: use only the file-name component to prevent path traversal
+        let safe_name = Path::new(filename)
+            .file_name()
+            .ok_or_else(|| WebUIError::Io(format!("Invalid CSS filename: {filename}")))?;
+        let css_path = out_dir.join(safe_name);
+        fs::write(&css_path, css_content)
+            .map_err(|e| WebUIError::Io(format!("Failed to write {filename}: {e}")))?;
+    }
+
+    Ok(result.stats)
+}
+
+/// Inspect a protocol binary file and return its JSON representation.
+///
+/// # Errors
+///
+/// Returns [`WebUIError`] if the file cannot be read or is not valid protobuf.
+pub fn inspect(protocol_path: &Path) -> Result<String, WebUIError> {
+    let bytes = fs::read(protocol_path)
+        .map_err(|e| WebUIError::Io(format!("Failed to read {}: {e}", protocol_path.display())))?;
+    inspect_bytes(&bytes)
+}
+
+/// Inspect raw protocol bytes and return their JSON representation.
+///
+/// # Errors
+///
+/// Returns [`WebUIError`] if the bytes are not valid protobuf.
+pub fn inspect_bytes(protocol_bytes: &[u8]) -> Result<String, WebUIError> {
+    let protocol = WebUIProtocol::from_protobuf(protocol_bytes)
+        .map_err(|e| WebUIError::Protocol(e.to_string()))?;
+    protocol
+        .to_json_pretty()
+        .map_err(|e| WebUIError::Serialization(e.to_string()))
+}
+
+/// Internal intermediate build output before stats are computed.
+struct RawBuildOutput {
+    protocol: WebUIProtocol,
+    css_files: Vec<(String, String)>,
+    fragment_count: usize,
+    component_count: usize,
+    token_count: usize,
+}
+
+/// Internal build logic shared by `build()` and `build_to_disk()`.
+fn build_protocol_inner(options: &BuildOptions) -> Result<RawBuildOutput, WebUIError> {
+    let mut parser = match options.plugin.as_deref() {
+        Some("fast") => HtmlParser::with_plugin(Box::new(FastParserPlugin::new())),
+        Some(unknown) => return Err(WebUIError::InvalidPlugin(unknown.to_string())),
+        None => HtmlParser::new(),
+    };
+    parser.set_css_strategy(options.css);
+
+    // Register app directory components
+    parser
+        .component_registry_mut()
+        .register_from_paths(&[&options.app_dir])
+        .map_err(|e| {
+            WebUIError::ComponentRegistration(format!(
+                "Failed to register components from {}: {e}",
+                options.app_dir.display()
+            ))
+        })?;
+
+    // Discover and register external component sources
+    for source in &options.components {
+        let result = webui_discovery::discover_source(source, &options.app_dir).map_err(|e| {
+            WebUIError::ComponentDiscovery(format!(
+                "Failed to discover components from {source}: {e}"
+            ))
+        })?;
+        for comp in &result.components {
+            parser
+                .component_registry_mut()
+                .register_component(
+                    &comp.tag_name,
+                    &comp.html_content,
+                    comp.css_content.as_deref(),
+                )
+                .map_err(|e| {
+                    WebUIError::ComponentRegistration(format!(
+                        "Failed to register component '{}' from {}: {e}",
+                        comp.tag_name, comp.source
+                    ))
+                })?;
+        }
+    }
+
+    let component_count = parser.component_registry_mut().len();
+
+    // Parse entry HTML
+    let entry_path = options.app_dir.join(&options.entry);
+    let html_content = fs::read_to_string(&entry_path)
+        .map_err(|e| WebUIError::Io(format!("Failed to read {}: {e}", entry_path.display())))?;
+    parser
+        .parse(&options.entry, &html_content)
+        .map_err(|e| WebUIError::Parse(format!("Failed to parse {}: {e}", options.entry)))?;
+
+    // Snapshot CSS before consuming the parser
+    let css_snapshot: Vec<(String, String)> = parser
+        .component_registry_mut()
+        .get_all()
+        .filter_map(|c| {
+            c.css_content
+                .as_ref()
+                .map(|css| (c.tag_name.clone(), css.clone()))
+        })
+        .collect();
+
+    // Collect CSS tokens before consuming the parser
+    let tokens = parser.take_tokens();
+    let token_count = tokens.len();
+
+    // Build protocol (consumes parser)
+    let fragment_records = parser.into_fragment_records();
+    let fragment_count: usize = fragment_records.values().map(|v| v.fragments.len()).sum();
+
+    // Filter CSS to only protocol-referenced components.
+    // In Inline mode, CSS is embedded in <style> tags by the parser,
+    // so no external CSS files are produced.
+    // Sanitize filenames: strip path separators to prevent traversal.
+    let css_files: Vec<(String, String)> = if options.css == CssStrategy::Style {
+        Vec::new()
+    } else {
+        css_snapshot
+            .into_iter()
+            .filter(|(tag, _)| fragment_records.contains_key(tag))
+            .map(|(tag, css)| {
+                let safe_tag = tag.replace(['/', '\\'], "-");
+                (format!("{safe_tag}.css"), css)
+            })
+            .collect()
+    };
+
+    let protocol = WebUIProtocol::with_tokens(fragment_records, tokens);
+
+    Ok(RawBuildOutput {
+        protocol,
+        css_files,
+        fragment_count,
+        component_count,
+        token_count,
+    })
+}
+
+#[cfg(test)]
+#[allow(clippy::disallowed_methods)]
+mod tests {
+    use super::*;
+    use std::path::PathBuf;
+    use tempfile::TempDir;
+    use webui_protocol::web_ui_fragment::Fragment;
+
+    fn create_app_dir(files: &[(&str, &str)]) -> TempDir {
+        let dir = TempDir::new().unwrap();
+        for (name, content) in files {
+            let path = dir.path().join(name);
+            if let Some(parent) = path.parent() {
+                fs::create_dir_all(parent).unwrap();
+            }
+            fs::write(&path, content).unwrap();
+        }
+        dir
+    }
+
+    fn default_options(app_dir: &Path) -> BuildOptions {
+        BuildOptions {
+            app_dir: app_dir.to_path_buf(),
+            entry: "index.html".to_string(),
+            css: CssStrategy::Link,
+            plugin: None,
+            components: Vec::new(),
+        }
+    }
+
+    #[test]
+    fn test_build_simple_html() {
+        let app = create_app_dir(&[("index.html", "<h1>Hello</h1>")]);
+        let result = build(default_options(app.path())).unwrap();
+
+        assert!(result.protocol.fragments.contains_key("index.html"));
+        assert!(result.stats.fragment_count > 0);
+        assert!(result.stats.protocol_size_bytes > 0);
+        assert!(!result.stats.duration.is_zero());
+    }
+
+    #[test]
+    fn test_build_with_directives() {
+        let html = r#"<h1>Hello</h1>
+<for each="item in items">
+    <p>{{item.name}}</p>
+</for>
+<if condition="show">
+    <p>Visible</p>
+</if>"#;
+        let app = create_app_dir(&[("index.html", html)]);
+        let result = build(default_options(app.path())).unwrap();
+
+        let index = &result.protocol.fragments["index.html"].fragments;
+        assert!(index
+            .iter()
+            .any(|f| matches!(f.fragment.as_ref(), Some(Fragment::ForLoop(_)))));
+        assert!(index
+            .iter()
+            .any(|f| matches!(f.fragment.as_ref(), Some(Fragment::IfCond(_)))));
+    }
+
+    #[test]
+    fn test_build_with_component_css() {
+        let app = create_app_dir(&[
+            ("index.html", "<my-card>Hello</my-card>"),
+            ("my-card.html", "<div><slot></slot></div>"),
+            ("my-card.css", ".card { color: red; }"),
+        ]);
+        let result = build(default_options(app.path())).unwrap();
+
+        assert_eq!(result.css_files.len(), 1);
+        assert_eq!(result.css_files[0].0, "my-card.css");
+        assert!(result.css_files[0].1.contains("color: red"));
+        assert_eq!(result.stats.css_file_count, 1);
+    }
+
+    #[test]
+    fn test_build_to_disk_writes_files() {
+        let app = create_app_dir(&[
+            ("index.html", "<my-card>Hello</my-card>"),
+            ("my-card.html", "<div><slot></slot></div>"),
+            ("my-card.css", ".card { color: red; }"),
+        ]);
+        let out = TempDir::new().unwrap();
+
+        let stats = build_to_disk(default_options(app.path()), out.path()).unwrap();
+
+        assert!(out.path().join("protocol.bin").exists());
+        assert!(out.path().join("my-card.css").exists());
+        assert_eq!(stats.css_file_count, 1);
+        assert!(stats.fragment_count > 0);
+    }
+
+    #[test]
+    fn test_build_to_disk_creates_nested_output_dir() {
+        let app = create_app_dir(&[("index.html", "<h1>Hello</h1>")]);
+        let out = TempDir::new().unwrap();
+        let nested = out.path().join("nested").join("output");
+
+        let stats = build_to_disk(default_options(app.path()), &nested).unwrap();
+        assert!(nested.join("protocol.bin").exists());
+        assert!(stats.fragment_count > 0);
+    }
+
+    #[test]
+    fn test_build_missing_entry() {
+        let app = create_app_dir(&[("other.html", "<h1>Not index</h1>")]);
+        let result = build(default_options(app.path()));
+
+        assert!(result.is_err());
+        let err = result.unwrap_err();
+        assert!(matches!(err, WebUIError::Io(_)));
+    }
+
+    #[test]
+    fn test_build_invalid_plugin() {
+        let app = create_app_dir(&[("index.html", "<h1>Hello</h1>")]);
+        let mut options = default_options(app.path());
+        options.plugin = Some("nonexistent".to_string());
+
+        let result = build(options);
+        assert!(result.is_err());
+        assert!(matches!(result.unwrap_err(), WebUIError::InvalidPlugin(_)));
+    }
+
+    #[test]
+    fn test_build_stats_populated() {
+        let app = create_app_dir(&[("index.html", "<h1>{{title}}</h1>")]);
+        let result = build(default_options(app.path())).unwrap();
+
+        assert!(result.stats.fragment_count > 0);
+        assert!(result.stats.protocol_size_bytes > 0);
+        assert_eq!(result.stats.css_file_count, 0);
+    }
+
+    #[test]
+    fn test_build_inline_css() {
+        let app = create_app_dir(&[
+            ("index.html", "<my-card>Hello</my-card>"),
+            ("my-card.html", "<div><slot></slot></div>"),
+            ("my-card.css", ".card { color: red; }"),
+        ]);
+        let mut options = default_options(app.path());
+        options.css = CssStrategy::Style;
+
+        let result = build(options).unwrap();
+        // Inline mode embeds CSS in <style> tags — no external CSS files
+        assert!(result.css_files.is_empty());
+        assert_eq!(result.stats.css_file_count, 0);
+        assert!(result.stats.fragment_count > 0);
+    }
+
+    #[test]
+    fn test_build_custom_entry() {
+        let app = create_app_dir(&[("page.html", "<h1>Custom</h1>")]);
+        let mut options = default_options(app.path());
+        options.entry = "page.html".to_string();
+
+        let result = build(options).unwrap();
+        assert!(result.protocol.fragments.contains_key("page.html"));
+        assert!(!result.protocol.fragments.contains_key("index.html"));
+    }
+
+    #[test]
+    fn test_build_protocol_roundtrip() {
+        let app = create_app_dir(&[("index.html", "<h1>{{title}}</h1>")]);
+        let result = build(default_options(app.path())).unwrap();
+
+        let restored = WebUIProtocol::from_protobuf(&result.protocol_bytes).unwrap();
+        assert!(restored.fragments.contains_key("index.html"));
+    }
+
+    #[test]
+    fn test_inspect_bytes_valid() {
+        let app = create_app_dir(&[("index.html", "<h1>Hello</h1>")]);
+        let result = build(default_options(app.path())).unwrap();
+
+        let json_str = inspect_bytes(&result.protocol_bytes).unwrap();
+        let parsed: serde_json::Value = serde_json::from_str(&json_str).unwrap();
+        assert!(parsed.get("fragments").is_some());
+    }
+
+    #[test]
+    fn test_inspect_bytes_invalid() {
+        let result = inspect_bytes(b"not a protobuf");
+        assert!(result.is_err());
+        assert!(matches!(result.unwrap_err(), WebUIError::Protocol(_)));
+    }
+
+    #[test]
+    fn test_inspect_file() {
+        let app = create_app_dir(&[("index.html", "<h1>Hello</h1>")]);
+        let out = TempDir::new().unwrap();
+        build_to_disk(default_options(app.path()), out.path()).unwrap();
+
+        let json_str = inspect(&out.path().join("protocol.bin")).unwrap();
+        let parsed: serde_json::Value = serde_json::from_str(&json_str).unwrap();
+        assert!(parsed["fragments"]["index.html"]["fragments"].is_array());
+    }
+
+    #[test]
+    fn test_inspect_missing_file() {
+        let result = inspect(Path::new("/nonexistent/protocol.bin"));
+        assert!(result.is_err());
+        assert!(matches!(result.unwrap_err(), WebUIError::Io(_)));
+    }
+
+    #[test]
+    fn test_build_with_components_local_path() {
+        let app = create_app_dir(&[("index.html", "<ext-card>Hello</ext-card>")]);
+        let ext_dir = TempDir::new().unwrap();
+        fs::write(
+            ext_dir.path().join("ext-card.html"),
+            "<div class=\"card\"><slot></slot></div>",
+        )
+        .unwrap();
+        fs::write(
+            ext_dir.path().join("ext-card.css"),
+            ".card { border: 1px solid #ccc; }",
+        )
+        .unwrap();
+
+        let mut options = default_options(app.path());
+        options.components = vec![ext_dir.path().to_string_lossy().to_string()];
+
+        let result = build(options).unwrap();
+        assert!(result.protocol.fragments.contains_key("index.html"));
+        assert_eq!(result.css_files.len(), 1);
+        assert!(result.css_files[0].1.contains("border"));
+    }
+
+    #[test]
+    fn test_build_hello_world_example() {
+        let manifest_dir = PathBuf::from(env!("CARGO_MANIFEST_DIR"));
+        let app_dir = manifest_dir.join("../../examples/app/hello-world/src");
+
+        let result = build(BuildOptions {
+            app_dir,
+            entry: "index.html".to_string(),
+            css: CssStrategy::Link,
+            plugin: None,
+            components: Vec::new(),
+        })
+        .unwrap();
+
+        let index = &result.protocol.fragments["index.html"].fragments;
+        assert!(index.iter().any(
+            |f| matches!(f.fragment.as_ref(), Some(Fragment::ForLoop(fl)) if fl.collection == "people")
+        ));
+        assert!(index
+            .iter()
+            .any(|f| matches!(f.fragment.as_ref(), Some(Fragment::IfCond(_)))));
+    }
+
+    // ── Security tests ───────────────────────────────────────────────
+
+    #[test]
+    fn test_css_filename_sanitizes_path_separators() {
+        // Even if a component tag somehow contains path separators,
+        // the filename should be sanitized to prevent directory traversal.
+        let app = create_app_dir(&[("index.html", "<h1>Hello</h1>")]);
+        let result = build(default_options(app.path())).unwrap();
+
+        // Verify all CSS filenames are plain file names (no path separators)
+        for (filename, _) in &result.css_files {
+            assert!(
+                !filename.contains('/') && !filename.contains('\\'),
+                "CSS filename contains path separator: {filename}"
+            );
+        }
+    }
+
+    #[test]
+    fn test_build_to_disk_css_stays_in_output_dir() {
+        let app = create_app_dir(&[
+            ("index.html", "<my-card>Hello</my-card>"),
+            ("my-card.html", "<div><slot></slot></div>"),
+            ("my-card.css", ".card { color: red; }"),
+        ]);
+        let out = TempDir::new().unwrap();
+
+        build_to_disk(default_options(app.path()), out.path()).unwrap();
+
+        // Verify CSS file is written inside out_dir
+        let css_path = out.path().join("my-card.css");
+        assert!(css_path.exists());
+        let canonical = css_path.canonicalize().unwrap();
+        let out_canonical = out.path().canonicalize().unwrap();
+        assert!(
+            canonical.starts_with(&out_canonical),
+            "CSS file escaped output directory"
+        );
+    }
+
+    // ── Performance / edge case tests ────────────────────────────────
+
+    #[test]
+    fn test_build_empty_html() {
+        let app = create_app_dir(&[("index.html", "")]);
+        let result = build(default_options(app.path())).unwrap();
+
+        assert!(result.protocol.fragments.contains_key("index.html"));
+        assert_eq!(result.stats.fragment_count, 0);
+        assert!(result.stats.protocol_size_bytes > 0);
+    }
+
+    #[test]
+    fn test_build_large_fragment_count() {
+        // Verify stats are accurate with many fragments
+        let mut html = String::with_capacity(2000);
+        for i in 0..50 {
+            html.push_str(&format!("<p>Item {i}</p>\n"));
+        }
+        let app = create_app_dir(&[("index.html", &html)]);
+        let result = build(default_options(app.path())).unwrap();
+
+        assert!(result.stats.fragment_count > 0);
+        assert_eq!(result.stats.css_file_count, 0);
+    }
+
+    #[test]
+    fn test_build_with_fast_plugin() {
+        let app = create_app_dir(&[("index.html", "<h1>Hello</h1>")]);
+        let mut options = default_options(app.path());
+        options.plugin = Some("fast".to_string());
+
+        let result = build(options).unwrap();
+        assert!(result.protocol.fragments.contains_key("index.html"));
+    }
+
+    #[test]
+    fn test_build_to_disk_inline_mode_no_css_files() {
+        let app = create_app_dir(&[
+            ("index.html", "<my-card>Hello</my-card>"),
+            ("my-card.html", "<div><slot></slot></div>"),
+            ("my-card.css", ".card { color: red; }"),
+        ]);
+        let out = TempDir::new().unwrap();
+        let mut options = default_options(app.path());
+        options.css = CssStrategy::Style;
+
+        let stats = build_to_disk(options, out.path()).unwrap();
+
+        assert!(out.path().join("protocol.bin").exists());
+        assert!(!out.path().join("my-card.css").exists());
+        assert_eq!(stats.css_file_count, 0);
+    }
+
+    #[test]
+    fn test_build_stats_duration_is_nonzero() {
+        let app = create_app_dir(&[("index.html", "<h1>Hello {{name}}</h1>")]);
+        let result = build(default_options(app.path())).unwrap();
+
+        assert!(!result.stats.duration.is_zero());
+    }
+
+    #[test]
+    fn test_build_multiple_components_css() {
+        let app = create_app_dir(&[
+            ("index.html", "<card-a>A</card-a><card-b>B</card-b>"),
+            ("card-a.html", "<div><slot></slot></div>"),
+            ("card-a.css", ".a { color: red; }"),
+            ("card-b.html", "<span><slot></slot></span>"),
+            ("card-b.css", ".b { color: blue; }"),
+        ]);
+        let result = build(default_options(app.path())).unwrap();
+
+        assert_eq!(result.css_files.len(), 2);
+        assert_eq!(result.stats.css_file_count, 2);
+        let filenames: Vec<&str> = result.css_files.iter().map(|(n, _)| n.as_str()).collect();
+        assert!(filenames.contains(&"card-a.css"));
+        assert!(filenames.contains(&"card-b.css"));
+    }
+
+    #[test]
+    fn test_build_unused_component_css_not_emitted() {
+        // card-b is registered but not referenced in index.html
+        let app = create_app_dir(&[
+            ("index.html", "<card-a>A</card-a>"),
+            ("card-a.html", "<div><slot></slot></div>"),
+            ("card-a.css", ".a { color: red; }"),
+            ("card-b.html", "<span><slot></slot></span>"),
+            ("card-b.css", ".b { color: blue; }"),
+        ]);
+        let result = build(default_options(app.path())).unwrap();
+
+        assert_eq!(result.css_files.len(), 1);
+        assert_eq!(result.css_files[0].0, "card-a.css");
+    }
+
+    #[test]
+    fn test_inspect_roundtrip_preserves_content() {
+        let app = create_app_dir(&[("index.html", "<h1>{{title}}</h1>")]);
+        let result = build(default_options(app.path())).unwrap();
+
+        let json_str = inspect_bytes(&result.protocol_bytes).unwrap();
+        let parsed: serde_json::Value = serde_json::from_str(&json_str).unwrap();
+
+        let fragments = &parsed["fragments"]["index.html"]["fragments"];
+        assert!(fragments.is_array());
+        assert!(!fragments.as_array().unwrap().is_empty());
+    }
+
+    #[test]
+    fn test_build_nonexistent_app_dir() {
+        let options = BuildOptions {
+            app_dir: PathBuf::from("/nonexistent/path/that/does/not/exist"),
+            entry: "index.html".to_string(),
+            css: CssStrategy::Link,
+            plugin: None,
+            components: Vec::new(),
+        };
+        let result = build(options);
+        assert!(result.is_err());
+    }
+
+    #[test]
+    fn test_build_to_disk_returns_accurate_stats() {
+        let app = create_app_dir(&[
+            ("index.html", "<my-card>Hello</my-card><p>{{name}}</p>"),
+            ("my-card.html", "<div><slot></slot></div>"),
+            ("my-card.css", ".card { color: red; }"),
+        ]);
+        let out = TempDir::new().unwrap();
+
+        let stats = build_to_disk(default_options(app.path()), out.path()).unwrap();
+
+        assert!(stats.fragment_count > 0);
+        assert_eq!(stats.css_file_count, 1);
+        assert!(stats.component_count > 0);
+        assert!(stats.protocol_size_bytes > 0);
+        assert!(!stats.duration.is_zero());
+    }
+}
diff --git a/deny.toml b/deny.toml
index ede64b1c..f8346ec5 100644
--- a/deny.toml
+++ b/deny.toml
@@ -1,7 +1,5 @@
 [advisories]
-ignore = [
-    { id = "RUSTSEC-2026-0007", reason = "transitive dep via tokio; awaiting upstream bytes fix" },
-]
+ignore = []
 
 [licenses]
 allow = [
@@ -22,16 +20,9 @@ ignore = true
 multiple-versions = "deny"
 skip = [
     { name = "convert_case" },
+    { name = "getrandom" },
+    { name = "hashbrown" },
+    { name = "r-efi" },
     { name = "socket2" },
-    { name = "wasi" },
     { name = "windows-sys" },
-    { name = "windows-targets" },
-    { name = "windows_aarch64_gnullvm" },
-    { name = "windows_aarch64_msvc" },
-    { name = "windows_i686_gnu" },
-    { name = "windows_i686_gnullvm" },
-    { name = "windows_i686_msvc" },
-    { name = "windows_x86_64_gnu" },
-    { name = "windows_x86_64_gnullvm" },
-    { name = "windows_x86_64_msvc" },
 ]
diff --git a/docs/.vitepress/config.js b/docs/.vitepress/config.js
index 56c97cb6..39cf23d9 100644
--- a/docs/.vitepress/config.js
+++ b/docs/.vitepress/config.js
@@ -39,7 +39,11 @@ export default {
             { text: 'Introduction', link: '/guide/' },
             { text: 'Installation', link: '/guide/installation' },
             { text: 'Quick Start', link: '/tutorials/hello-world' },
-            { text: 'CLI Reference', link: '/guide/cli/' },
+            { text: 'CLI Reference', link: '/guide/cli/', items: [
+              { text: 'webui build', link: '/guide/cli/#webui-build' },
+              { text: 'webui inspect', link: '/guide/cli/#webui-inspect' },
+              { text: 'webui serve', link: '/guide/cli/#webui-serve' },
+            ]},
           ]
         },
         {
@@ -58,12 +62,20 @@ export default {
                 { text: 'Attribute Directives', link: '/guide/concepts/directives/attributes' },
               ]
             },
+            { text: 'Hydration & Interactivity', link: '/guide/concepts/hydration', items: [
+              { text: 'Class Definition', link: '/guide/concepts/hydration#class-definition' },
+              { text: 'Templating', link: '/guide/concepts/hydration#templating' },
+              { text: 'Observation', link: '/guide/concepts/hydration#observation' },
+              { text: 'Events', link: '/guide/concepts/hydration#events' },
+              { text: 'References', link: '/guide/concepts/hydration#references' },
+              { text: 'Initial State', link: '/guide/concepts/hydration#initial-state' },
+            ]},
             {
               text: 'Platform Handlers',
               items: [
                 { text: 'Overview', link: '/guide/concepts/handlers/' },
                 { text: 'Rust', link: '/guide/concepts/handlers/rust' },
-                { text: 'Node.js', link: '/guide/concepts/handlers/node' },
+                { text: 'Node', link: '/guide/concepts/handlers/node' },
                 { text: 'Electron', link: '/guide/concepts/handlers/electron' },
                 { text: 'WebAssembly', link: '/guide/concepts/handlers/wasm' },
                 { text: 'FFI (C API)', link: '/guide/concepts/handlers/ffi' }
diff --git a/docs/guide/cli/index.md b/docs/guide/cli/index.md
index 7e2d269a..97be265a 100644
--- a/docs/guide/cli/index.md
+++ b/docs/guide/cli/index.md
@@ -4,15 +4,17 @@ The `webui` command-line tool is the primary way to build WebUI applications. It
 
 ## Installation
 
-Build from source:
+Install via npm:
 
 ```bash
-git clone https://github.com/microsoft/webui.git
-cd webui
-cargo build --release
+npm install @microsoft/webui
 ```
 
-The `webui` binary will be available at `target/release/webui`.
+Or install via Cargo for standalone CLI use:
+
+```bash
+cargo install webui-cli
+```
 
 ## Commands
 
@@ -31,7 +33,7 @@ webui build [APP] --out <OUT> [--entry <FILE>] [--css <MODE>] [--plugin <NAME>]
 | `APP` | Path to the app folder | `.` (current directory) |
 | `--out <OUT>` | Output folder for protocol and assets | *(required)* |
 | `--entry <FILE>` | Entry HTML file name | `index.html` |
-| `--css <MODE>` | CSS delivery strategy: `external` or `inline` | `external` |
+| `--css <STRATEGY>` | CSS delivery strategy: `link` or `style` | `link` |
 | `--plugin <NAME>` | Load a parser plugin (e.g., `fast`) | *(none)* |
 | `--components <SOURCE>` | Additional component sources (npm packages or local paths). Repeatable. | *(none)* |
 
@@ -41,8 +43,8 @@ Path inputs for `APP`, `--state`, and `--servedir` support absolute paths, relat
 
 | Mode | Behavior |
 |------|----------|
-| `external` | Emits `<link>` tags referencing external `.css` files. CSS files are copied to the output folder. |
-| `inline` | Embeds CSS content directly in `<style>` tags inside shadow DOM templates. No separate CSS files are written. |
+| `link` | Emits `<link>` tags referencing external `.css` files. CSS files are copied to the output folder. |
+| `style` | Embeds CSS content directly in `<style>` tags inside shadow DOM templates. No separate CSS files are written. |
 
 **Examples:**
 
@@ -56,8 +58,8 @@ webui build ./my-app --out ./dist
 # Use a custom entry file
 webui build ./my-app --out ./dist --entry home.html
 
-# Build with inline CSS (no external CSS files)
-webui build ./my-app --out ./dist --css inline
+# Build with style CSS (no external CSS files)
+webui build ./my-app --out ./dist --css style
 
 # Build with the FAST plugin (hydration support)
 webui build ./my-app --out ./dist --plugin=fast
@@ -96,12 +98,12 @@ webui inspect dist/protocol.bin | jq '.fragments["index.html"]'
 webui inspect dist/protocol.bin | jq '.fragments | keys | length'
 ```
 
-### `webui start`
+### `webui serve`
 
 Start a development server that builds, renders, and serves a WebUI application. Enable live reload with `--watch`.
 
 ```bash
-webui-cli start [APP] --state <FILE> [--servedir <DIR>] [--watch] [--port <PORT>] [--entry <FILE>] [--css <MODE>] [--plugin <NAME>] [--components <SOURCE>]...
+webui serve [APP] --state <FILE> [--servedir <DIR>] [--watch] [--port <PORT>] [--entry <FILE>] [--css <MODE>] [--plugin <NAME>] [--components <SOURCE>]...
 ```
 
 **Arguments:**
@@ -114,7 +116,7 @@ webui-cli start [APP] --state <FILE> [--servedir <DIR>] [--watch] [--port <PORT>
 | `--watch` | Enable file watching + HMR | `false` |
 | `--port <PORT>` | Port to bind the development server | `3000` |
 | `--entry <FILE>` | Entry HTML file name | `index.html` |
-| `--css <MODE>` | CSS delivery strategy: `external` or `inline` | `external` |
+| `--css <MODE>` | CSS delivery strategy: `link` or `style` | `link` |
 | `--plugin <NAME>` | Load parser + handler plugins (e.g., `fast`) | *(none)* |
 | `--components <SOURCE>` | Additional component sources (npm packages or local paths). Repeatable. | *(none)* |
 
@@ -133,22 +135,22 @@ The `APP` directory should contain your entry HTML and component files.
 
 ```bash
 # Start serving the current directory
-webui-cli start . --state ./state.json --servedir ./assets
+webui serve . --state ./state.json --servedir ./assets
 
 # Start serving a specific templates directory
-webui-cli start ./examples/app/hello-world/templates --state ./examples/app/hello-world/data/state.json --servedir ./examples/app/hello-world/assets --watch
+webui serve ./examples/app/hello-world/templates --state ./examples/app/hello-world/data/state.json --servedir ./examples/app/hello-world/assets --watch
 
 # Use a custom port
-webui-cli start ./my-app --state ./state.json --servedir ./assets --port 9090 --watch
+webui serve ./my-app --state ./state.json --servedir ./assets --port 9090 --watch
 
-# Use inline CSS mode
-webui-cli start ./my-app --state ./state.json --servedir ./assets --css inline --watch
+# Use style CSS mode
+webui serve ./my-app --state ./state.json --servedir ./assets --css style --watch
 
 # Use the FAST plugin for hydration
-webui-cli start ./my-app --state ./state.json --plugin=fast --port 3001
+webui serve ./my-app --state ./state.json --plugin=fast --port 3001
 
 # Dev server with external components (--watch watches local paths)
-webui-cli start ./my-app --state ./state.json --components @reactive-ui --watch
+webui serve ./my-app --state ./state.json --components @reactive-ui --watch
 ```
 
 **Routes:**
@@ -215,11 +217,11 @@ The `--out` folder will contain:
 ```
 dist/
 ├── protocol.bin        # The WebUI protocol (protobuf binary)
-├── my-card.css         # Component CSS (--css external only)
-└── nav-bar.css         # Component CSS (--css external only)
+├── my-card.css         # Component CSS (--css link only)
+└── nav-bar.css         # Component CSS (--css link only)
 ```
 
-With `--css inline`, only `protocol.bin` is written — CSS is embedded directly in the protocol's template fragments.
+With `--css style`, only `protocol.bin` is written — CSS is embedded directly in the protocol's template fragments.
 
 ### protocol.bin
 
diff --git a/docs/guide/concepts/handlers/electron.md b/docs/guide/concepts/handlers/electron.md
index 8aed60f3..01672d77 100644
--- a/docs/guide/concepts/handlers/electron.md
+++ b/docs/guide/concepts/handlers/electron.md
@@ -51,7 +51,7 @@ This avoids the need for a local HTTP server and provides a clean, secure origin
 
 A complete working example is available at [`examples/integration/electron/`](https://github.com/user/webui/tree/main/examples/integration/electron).
 
-The [Contact Book Manager](https://github.com/user/webui/tree/main/examples/app/contact-book-manager) app demonstrates a full-featured WebUI application that works both in the browser (via `webui start`) and as an Electron desktop app.
+The [Contact Book Manager](https://github.com/user/webui/tree/main/examples/app/contact-book-manager) app demonstrates a full-featured WebUI application that works both in the browser (via `webui serve`) and as an Electron desktop app.
 
 ## Performance Notes
 
diff --git a/docs/guide/concepts/handlers/index.md b/docs/guide/concepts/handlers/index.md
index 3b1bf9f9..d454eaed 100644
--- a/docs/guide/concepts/handlers/index.md
+++ b/docs/guide/concepts/handlers/index.md
@@ -7,7 +7,7 @@ WebUI handlers are the bridge between the WebUI protocol and the final rendered
 WebUI provides official handlers for several popular programming languages (other languages coming soon):
 
 - [**Rust**](./rust) - High-performance native rendering with the Rust programming language
-- [**Node.js**](./node) - Streaming SSR via a native addon built with napi-rs
+- [**Node**](./node) - Streaming SSR via a native addon built with napi-rs for Node, Bun, and Deno.
 - [**Electron**](./electron) - Desktop apps via Electron with custom `webui://` protocol
 - [**WebAssembly**](./wasm) - In-browser rendering for playgrounds and client-side use
 - [**FFI (C API)**](./ffi) - Shared library for Go, C#, Python, and any language with C interop
diff --git a/docs/guide/concepts/handlers/node.md b/docs/guide/concepts/handlers/node.md
index 3567f9d0..08c9d92f 100644
--- a/docs/guide/concepts/handlers/node.md
+++ b/docs/guide/concepts/handlers/node.md
@@ -1,105 +1,27 @@
-# WebUI Node.js Handler
+# WebUI Native Node Module Handler
 
-The WebUI Node.js handler provides high-performance server-side rendering via a native addon built with [napi-rs](https://napi.rs). It compiles the Rust handler directly into a `.node` addon — no C ABI intermediary — and supports true streaming SSR by delivering rendered fragments through a callback.
+The `@microsoft/webui` npm package provides high-performance server-side rendering for Node.js / Bun / Deno. It uses a native addon with zero-copy Buffer access and streams rendered HTML fragments via callbacks for progressive rendering with minimal latency.
 
 ## Installation
 
-Build the native addon from the WebUI workspace:
-
 ```bash
-cargo build -p webui-node           # debug
-cargo build -p webui-node --release # release
-```
-
-This produces a native addon library:
-
-| Platform | Library file |
-|---|---|
-| macOS | `target/release/libwebui_node.dylib` |
-| Linux | `target/release/libwebui_node.so` |
-| Windows | `target/release/webui_node.dll` |
-
-## Basic Usage
-
-```js
-import { readFileSync } from 'fs';
-import { createRequire } from 'module';
-
-// Load the native addon
-const require = createRequire(import.meta.url);
-const { render } = require('./target/release/libwebui_node.dylib');
-
-// Read pre-compiled protocol (from `webui build`)
-const protocol = readFileSync('./dist/protocol.bin');
-const state = JSON.stringify({
-  title: "Hello World",
-  items: ["Milk", "Eggs", "Bread"]
-});
-
-// Render, streaming each fragment to stdout
-render(protocol, state, (chunk) => process.stdout.write(chunk));
-```
-
-## API Reference
-
-### `render(protocolData, stateJson, onChunk, plugin?)`
-
-Render a pre-compiled WebUI protocol with JSON state data. Each rendered HTML fragment is streamed to the `onChunk` callback as it is produced.
-
-**Parameters:**
-
-| Parameter | Type | Description |
-|-----------|------|-------------|
-| `protocolData` | `Buffer` | Protobuf binary from `webui build` (zero-copy) |
-| `stateJson` | `string` | JSON string with the render state |
-| `onChunk` | `(chunk: string) => void` | Called with each rendered HTML fragment |
-| `plugin` | `string \| undefined` | Optional plugin identifier (e.g., `"fast"`) |
-
-**Throws** on invalid protocol data, malformed JSON, or render errors.
-
-## Streaming to an HTTP Response
-
-The callback-based API enables true streaming SSR with any Node.js HTTP framework:
-
-### Express
-
-```js
-import express from 'express';
-import { readFileSync } from 'fs';
-import { createRequire } from 'module';
-
-const require = createRequire(import.meta.url);
-const { render } = require('./target/release/libwebui_node.dylib');
-const protocol = readFileSync('./dist/protocol.bin');
-
-const app = express();
-
-app.get('/', (req, res) => {
-  res.setHeader('Content-Type', 'text/html');
-  const state = JSON.stringify({ title: "My App", items: [] });
-  render(protocol, state, (chunk) => res.write(chunk));
-  res.end();
-});
-
-app.listen(3000);
+npm install @microsoft/webui
 ```
 
-### Node.js HTTP
+## Examples
 
-```js
-import { createServer } from 'http';
-import { readFileSync } from 'fs';
-import { createRequire } from 'module';
+::: code-group
+```js [Node.js]
+import { createServer } from 'node:http';
+import { readFileSync } from 'node:fs';
+import { renderStream } from '@microsoft/webui';
 
-const require = createRequire(import.meta.url);
-const { render } = require('./target/release/libwebui_node.dylib');
 const protocol = readFileSync('./dist/protocol.bin');
 
 const server = createServer((req, res) => {
   if (req.url === '/') {
     res.writeHead(200, { 'Content-Type': 'text/html' });
-    const state = JSON.stringify({ title: "Home" });
-    render(protocol, state, (chunk) => res.write(chunk));
+    renderStream(protocol, { title: "Home" }, (chunk) => res.write(chunk));
     res.end();
   }
 });
@@ -107,40 +29,67 @@ const server = createServer((req, res) => {
 server.listen(3000);
 ```
 
-## Using Plugins
-
-Pass a plugin name as the fourth argument to enable framework-specific rendering:
-
-```js
-// Render with FAST-HTML hydration markers
-render(protocol, state, (chunk) => res.write(chunk), 'fast');
+```ts [Bun]
+import { renderStream } from '@microsoft/webui';
+
+const protocol = Bun.file('./dist/protocol.bin');
+const protocolData = Buffer.from(await protocol.arrayBuffer());
+
+Bun.serve({
+  port: 3000,
+  fetch(req) {
+    const chunks: string[] = [];
+    renderStream(protocolData, { title: "Home" }, (chunk) => chunks.push(chunk));
+    return new Response(chunks.join(''), {
+      headers: { 'Content-Type': 'text/html' },
+    });
+  },
+});
 ```
 
-When `"fast"` is specified, the handler injects hydration comment markers that FAST-HTML's client-side runtime uses to locate and re-hydrate dynamic content. See [Plugins](/guide/concepts/plugins/) for details.
-
-## Example
-
-A complete working example is available at `examples/integration/node/`:
-
-```bash
-# 1. Build the native addon
-cargo build -p webui-node
-
-# 2. Build the hello-world protocol
-cargo run -p webui-cli -- build examples/app/hello-world/src \
-  --out examples/app/hello-world/dist
+```ts [Deno]
+import { renderStream } from '@microsoft/webui';
 
-# 3. Run the example
-cd examples/integration/node
-node index.js
+const protocol = Deno.readFileSync('./dist/protocol.bin');
+const protocolData = Buffer.from(protocol);
 
-# With FAST plugin
-node index.js ../../app/todo-fast/dist/protocol.bin \
-  ../../app/todo-fast/data/state.json --plugin=fast
+Deno.serve({ port: 3000 }, (_req) => {
+  const chunks: string[] = [];
+  renderStream(protocolData, { title: "Home" }, (chunk) => chunks.push(chunk));
+  return new Response(chunks.join(''), {
+    headers: { 'Content-Type': 'text/html' },
+  });
+});
 ```
+:::
+
+## API Reference
 
-## Performance Notes
+| Function | Description |
+|----------|-------------|
+| `build(options)` | Build templates into a protocol. Returns `{ protocol, cssFiles, stats }` |
+| `render(protocol, state)` | Render protocol to HTML string |
+| `renderStream(protocol, state, onChunk)` | Stream rendered HTML fragments via callback |
+| `inspect(protocol)` | Convert protocol to JSON for debugging |
+
+### BuildOptions
+
+| Field | Type | Default | Description |
+|-------|------|---------|-------------|
+| `appDir` | `string` | — | Path to app folder |
+| `entry` | `string` | `"index.html"` | Entry file |
+| `css` | `"link" \| "style"` | `"link"` | CSS delivery strategy |
+| `plugin` | `string` | — | Parser plugin (e.g. `"fast"`) |
+| `components` | `string[]` | — | External component sources |
+
+### BuildStats
+
+| Field | Type | Description |
+|-------|------|-------------|
+| `durationMs` | `number` | Build time in milliseconds |
+| `fragmentCount` | `number` | Total fragments |
+| `componentCount` | `number` | Components registered |
+| `cssFileCount` | `number` | CSS files produced |
+| `protocolSizeBytes` | `number` | Protocol binary size |
+| `tokenCount` | `number` | CSS tokens discovered |
 
-- The native addon uses **zero-copy Buffer** access — protocol data is read directly from the Node.js `Buffer` without copying into Rust.
-- Each `onChunk` call crosses the Rust→JS boundary, so fragment-level streaming gives you progressive rendering with minimal latency.
-- The addon is stateless per call — create a new `render` invocation per request. The protocol data can be loaded once and reused across all requests.
diff --git a/docs/guide/concepts/handlers/rust.md b/docs/guide/concepts/handlers/rust.md
index 590d9374..cca14d3f 100644
--- a/docs/guide/concepts/handlers/rust.md
+++ b/docs/guide/concepts/handlers/rust.md
@@ -1,194 +1,169 @@
 # WebUI Rust Handler
 
-The WebUI Rust handler provides high-performance rendering of WebUI protocols in Rust applications.
+The `webui` crate provides high-performance build and rendering of WebUI protocols in Rust. It streams rendered HTML fragments via the `ResponseWriter` trait for progressive rendering with zero unnecessary allocations.
 
 ## Installation
 
-Add the WebUI crates to your `Cargo.toml`:
-
 ```toml
 [dependencies]
-webui-protocol = "0.1.0"
-webui-handler = "0.1.0"
-webui-expressions = "0.1.0"
-webui-state = "0.1.0"
+webui = "*" # see https://crates.io/crates/webui for latest version
+serde_json = "1"
 ```
 
-## Basic Usage
+## Examples
 
-```rust
-use webui_protocol::WebUIProtocol;
-use serde_json::{json, Value};
-use webui_handler::{handle, ResponseWriter, Result};
-use webui_protocol::WebUIProtocol;
+::: code-group
+```rust [Actix Web]
+use actix_web::{web, App, HttpServer, HttpResponse};
+use webui::{WebUIHandler, ResponseWriter, WebUIProtocol};
+use serde_json::json;
+use std::fs;
 
-// Define a simple response writer
-struct StringWriter {
-    content: String,
-}
-
-impl StringWriter {
-    fn new() -> Self {
-        Self { content: String::new() }
-    }
-}
+struct StringWriter(String);
 
 impl ResponseWriter for StringWriter {
-    fn write(&mut self, content: &str) -> Result<()> {
-        self.content.push_str(content);
-        Ok(())
-    }
-    
-    fn end(&mut self) -> Result<()> {
-        // Nothing to do for string writer
+    fn write(&mut self, content: &str) -> webui_handler::Result<()> {
+        self.0.push_str(content);
         Ok(())
     }
+    fn end(&mut self) -> webui_handler::Result<()> { Ok(()) }
 }
 
-fn main() -> Result<()> {
-    // Load protocol from file
-    let protocol = WebUIProtocol::from_protobuf_file("template.bin")?;
-    
-    // Create state data
-    let state = json!({
-        "title": "WebUI Example",
-        "items": [
-            {"name": "Item 1", "description": "First item"},
-            {"name": "Item 2", "description": "Second item"},
-            {"name": "Item 3", "description": "Third item"}
-        ]
-    });
-    
-    // Create writer
-    let mut writer = StringWriter::new();
-    
-    // Render the protocol
-    handle(&protocol, &state, &mut writer)?;
-    
-    // Use the rendered HTML
-    println!("Rendered HTML: {}", writer.content);
-    
-    Ok(())
+#[actix_web::main]
+async fn main() -> std::io::Result<()> {
+    let protocol_bytes = fs::read("./dist/protocol.bin").unwrap();
+    let protocol = WebUIProtocol::from_protobuf(&protocol_bytes).unwrap();
+    let protocol = web::Data::new(protocol);
+
+    HttpServer::new(move || {
+        App::new()
+            .app_data(protocol.clone())
+            .route("/", web::get().to(|proto: web::Data<WebUIProtocol>| async move {
+                let state = json!({ "title": "Home" });
+                let mut writer = StringWriter(String::new());
+                let mut handler = WebUIHandler::new();
+                handler.handle(&proto, &state, &mut writer).unwrap();
+                HttpResponse::Ok().content_type("text/html").body(writer.0)
+            }))
+    })
+    .bind("127.0.0.1:3000")?
+    .run()
+    .await
 }
 ```
 
-## Stream-Based Writing
-
-For high-performance use cases, you can implement the `ResponseWriter` trait for streaming output:
-
-```rust
-use std::io::{self, Write};
-use webui_handler::{ResponseWriter, Result};
+```rust [Axum]
+use axum::{routing::get, Router, extract::State};
+use webui::{WebUIHandler, ResponseWriter, WebUIProtocol};
+use serde_json::json;
+use std::{fs, sync::Arc};
 
-struct StreamWriter<W: Write> {
-    writer: W,
-}
+struct StringWriter(String);
 
-impl<W: Write> StreamWriter<W> {
-    fn new(writer: W) -> Self {
-        Self { writer }
-    }
-}
-
-impl<W: Write> ResponseWriter for StreamWriter<W> {
-    fn write(&mut self, content: &str) -> Result<()> {
-        self.writer.write_all(content.as_bytes())?;
-        Ok(())
-    }
-    
-    fn end(&mut self) -> Result<()> {
-        self.writer.flush()?;
+impl ResponseWriter for StringWriter {
+    fn write(&mut self, content: &str) -> webui_handler::Result<()> {
+        self.0.push_str(content);
         Ok(())
     }
+    fn end(&mut self) -> webui_handler::Result<()> { Ok(()) }
 }
 
-// Usage with any Write implementation:
-let file = File::create("output.html")?;
-let mut writer = StreamWriter::new(file);
-handle(&protocol, &state, &mut writer)?;
-```
-
-## WebUI Handler API
-
-The main entry point is the `WebUIHandler` struct:
-
-```rust
-pub struct WebUIHandler {
-    plugin: Option<Box<dyn HandlerPlugin>>,
-}
-
-impl WebUIHandler {
-    /// Create a handler with no plugin (plain HTML rendering).
-    pub fn new() -> Self;
-
-    /// Create a handler with a plugin for framework-specific rendering.
-    pub fn with_plugin(plugin: Box<dyn HandlerPlugin>) -> Self;
-
-    /// Render the protocol with state data.
-    pub fn handle(
-        &mut self,
-        protocol: &WebUIProtocol,
-        state: &Value,
-        writer: &mut dyn ResponseWriter,
-    ) -> Result<()>;
+#[tokio::main]
+async fn main() {
+    let protocol_bytes = fs::read("./dist/protocol.bin").unwrap();
+    let protocol = Arc::new(WebUIProtocol::from_protobuf(&protocol_bytes).unwrap());
+
+    let app = Router::new()
+        .route("/", get(|State(proto): State<Arc<WebUIProtocol>>| async move {
+            let state = json!({ "title": "Home" });
+            let mut writer = StringWriter(String::new());
+            let mut handler = WebUIHandler::new();
+            handler.handle(&proto, &state, &mut writer).unwrap();
+            axum::response::Html(writer.0)
+        }))
+        .with_state(protocol);
+
+    let listener = tokio::net::TcpListener::bind("127.0.0.1:3000").await.unwrap();
+    axum::serve(listener, app).await.unwrap();
 }
 ```
 
-### Parameters
+```rust [Hyper]
+use hyper::{server::conn::http1, service::service_fn, body::Bytes, Request, Response};
+use hyper_util::rt::TokioIo;
+use http_body_util::Full;
+use webui::{WebUIHandler, ResponseWriter, WebUIProtocol};
+use serde_json::json;
+use std::{fs, sync::Arc};
 
-- `protocol`: The WebUI protocol to render
-- `state`: A JSON value containing the data for rendering
-- `writer`: An implementation of the `ResponseWriter` trait for output
+struct StringWriter(String);
 
-### ResponseWriter Trait
-
-```rust
-pub trait ResponseWriter {
-    fn write(&mut self, content: &str) -> Result<()>;
-    fn end(&mut self) -> Result<()>;
+impl ResponseWriter for StringWriter {
+    fn write(&mut self, content: &str) -> webui_handler::Result<()> {
+        self.0.push_str(content);
+        Ok(())
+    }
+    fn end(&mut self) -> webui_handler::Result<()> { Ok(()) }
 }
-```
 
-## Using Plugins
-
-The handler supports optional plugins that inject framework-specific content during rendering. Use `with_plugin` to create a handler with a plugin:
-
-```rust
-use webui_handler::{WebUIHandler, plugin::fast::FastHydrationPlugin};
-
-let mut handler = WebUIHandler::with_plugin(Box::new(FastHydrationPlugin::new()));
-handler.handle(&protocol, &state, &mut writer)?;
+#[tokio::main]
+async fn main() {
+    let protocol_bytes = fs::read("./dist/protocol.bin").unwrap();
+    let protocol = Arc::new(WebUIProtocol::from_protobuf(&protocol_bytes).unwrap());
+
+    let listener = tokio::net::TcpListener::bind("127.0.0.1:3000").await.unwrap();
+    loop {
+        let (stream, _) = listener.accept().await.unwrap();
+        let proto = protocol.clone();
+        tokio::spawn(async move {
+            http1::Builder::new()
+                .serve_connection(TokioIo::new(stream), service_fn(move |_: Request<_>| {
+                    let proto = proto.clone();
+                    async move {
+                        let state = json!({ "title": "Home" });
+                        let mut writer = StringWriter(String::new());
+                        let mut handler = WebUIHandler::new();
+                        handler.handle(&proto, &state, &mut writer).unwrap();
+                        Ok::<_, hyper::Error>(Response::new(Full::new(Bytes::from(writer.0))))
+                    }
+                }))
+                .await
+                .ok();
+        });
+    }
+}
 ```
+:::
 
-When a plugin is loaded, the handler calls plugin hooks at key rendering points:
-- Before/after signals, loops, and conditionals
-- Before/after each loop iteration
-- When entering/leaving component scopes
-- When processing `Plugin` protocol fragments
+## API Reference
 
-See [Plugins](/guide/concepts/plugins/) for the full plugin API and how to write custom plugins.
+### Build
 
-## Error Handling
+| Function | Description |
+|----------|-------------|
+| `build(options)` | Build templates into a protocol. Returns `BuildResult` |
+| `build_to_disk(options, out_dir)` | Build and write `protocol.bin` + CSS files to disk |
+| `inspect(path)` | Read a protocol file and return JSON |
+| `inspect_bytes(bytes)` | Convert protocol bytes to JSON |
 
-The WebUI handler provides detailed error types through the `HandlerError` enum:
+### BuildOptions
 
-```rust
-pub enum HandlerError {
-    Rendering(String),
-    MissingFragment(String),
-    MissingData(String),
-    TypeError(String),
-    Protocol(webui_protocol::ProtocolError),
-    Evaluation(String),
-    Io(std::io::Error),
-    Writer(String),
-}
-```
+| Field | Type | Default | Description |
+|-------|------|---------|-------------|
+| `app_dir` | `PathBuf` | — | Path to app folder |
+| `entry` | `String` | `"index.html"` | Entry file |
+| `css` | `CssStrategy` | `Link` | CSS delivery: `Link` or `Style` |
+| `plugin` | `Option<String>` | `None` | Parser plugin (e.g. `"fast"`) |
+| `components` | `Vec<String>` | `[]` | External component sources |
 
-You can handle these specific error cases to provide better error messages for different failure scenarios.
-
-## Examples
+### BuildStats
 
-Working integration examples are available in the repository:
+| Field | Type | Description |
+|-------|------|-------------|
+| `duration` | `Duration` | Build time |
+| `fragment_count` | `usize` | Total fragments |
+| `component_count` | `usize` | Components registered |
+| `css_file_count` | `usize` | CSS files produced |
+| `protocol_size_bytes` | `usize` | Protocol binary size |
+| `token_count` | `usize` | CSS tokens discovered |
 
-- [`examples/integration/rust/`](https://github.com/user/webui/tree/main/examples/integration/rust) — Rust HTTP server integrations (hyper, tiny_http)
diff --git a/docs/guide/concepts/handlers/wasm.md b/docs/guide/concepts/handlers/wasm.md
index 0a089f69..c2cb8a1f 100644
--- a/docs/guide/concepts/handlers/wasm.md
+++ b/docs/guide/concepts/handlers/wasm.md
@@ -129,7 +129,7 @@ This provides instant feedback with the exact same parser and handler used in pr
 | Aspect | Server (CLI / Rust / Node) | WASM (Browser) |
 |--------|---------------------------|----------------|
 | Protocol format | Protobuf binary | JSON |
-| CSS strategy | External (default) or inline | Always inline |
+| CSS strategy | Link (default) or style | Always inline |
 | File I/O | Filesystem | Virtual file map |
 | Streaming | Yes (callback-based) | No (returns full string) |
 | Plugin support | Yes | Yes |
diff --git a/docs/guide/concepts/hydration.md b/docs/guide/concepts/hydration.md
new file mode 100644
index 00000000..3b10dab7
--- /dev/null
+++ b/docs/guide/concepts/hydration.md
@@ -0,0 +1,134 @@
+# Hydration & Interactivity
+
+WebUI renders HTML at build time with zero JavaScript. To add client-side interactivity — event handlers, reactive state, dynamic updates — you use [FAST](https://fast.design/) custom elements that **hydrate** the pre-rendered HTML on the client. This is an islands architecture: most of the page is static HTML, and only interactive components ship JavaScript.
+
+```
+Build time          Server render          Client hydration
+─────────────       ───────────────        ─────────────────
+Parse HTML    →     Render with state  →   FAST reconnects
+with WebUI          + inject hydration     event handlers &
+directives          markers                reactive bindings
+```
+
+## Class Definition
+
+Define a custom element by extending `RenderableFASTElement(FASTElement)` and registering it with `defineAsync`:
+
+```typescript
+import { FASTElement, attr, observable } from '@microsoft/fast-element';
+import { RenderableFASTElement } from '@microsoft/fast-html';
+
+export class MyCounter extends RenderableFASTElement(FASTElement) {
+  @attr count = 0;
+  @observable label!: string;
+
+  onIncrement(): void {
+    this.count++;
+  }
+}
+
+MyCounter.defineAsync({
+  name: 'my-counter',
+  templateOptions: 'defer-and-hydrate',
+});
+```
+
+## Templating
+
+Each component has an HTML template with `shadowrootmode="open"`. Use `{{expr}}` for bindings:
+
+```html
+<template shadowrootmode="open">
+  <p>{{label}}: {{count}}</p>
+  <button @click="{onIncrement()}">+1</button>
+</template>
+```
+
+## Observation
+
+| Decorator | Purpose | Example |
+|-----------|---------|---------|
+| `@attr` | Two-way binding with HTML attribute | `@attr title = ''` |
+| `@observable` | Reactive property — triggers re-render on change | `@observable items!: Item[]` |
+
+```typescript
+export class TodoItem extends RenderableFASTElement(FASTElement) {
+  @attr title = '';           // <todo-item title="Buy milk">
+  @attr state = 'pending';   // <todo-item state="done">
+  @observable editing = false; // Internal reactive state
+}
+```
+
+## Events
+
+Bind events with `@eventname="{handler()}"`:
+
+| Syntax | Behavior |
+|--------|----------|
+| `@click="{onClick()}"` | Call handler, no event object |
+| `@click="{onClick(e)}"` | Call handler with the event object |
+| `@keydown="{onKey(e)}"` | Works with any DOM event |
+| `@custom-event="{onCustom(e)}"` | Works with `CustomEvent` (access `e.detail`) |
+
+```html
+<button @click="{onSave()}">Save</button>
+<input @keydown="{onKeydown(e)}" />
+<todo-item @toggle="{onToggle(e)}"></todo-item>
+```
+
+## References
+
+Use `f-ref` to store a DOM element reference on the component instance:
+
+```html
+<input f-ref="{nameInput}" @keydown="{onKeydown(e)}" />
+```
+
+```typescript
+export class MyForm extends RenderableFASTElement(FASTElement) {
+  nameInput!: HTMLInputElement;  // Populated by f-ref
+
+  onKeydown(e: KeyboardEvent): void {
+    if (e.key === 'Enter') {
+      console.log(this.nameInput.value);
+    }
+  }
+}
+```
+
+## Initial State
+
+`prepare()` is called **after hydration** — the DOM is already rendered, and FAST has reconnected bindings. Use it to restore component state from the pre-rendered shadow DOM:
+
+```typescript
+async prepare(): Promise<void> {
+  const items: Item[] = [];
+  for (const el of this.shadowRoot!.querySelectorAll('todo-item')) {
+    items.push({
+      id: el.getAttribute('id') || '',
+      title: el.getAttribute('title') || '',
+      state: el.getAttribute('state') || 'pending',
+    });
+  }
+  this.items = items;  // Setting @observable triggers reactivity
+}
+```
+
+No flash of content — HTML is already visible from SSR, and `prepare()` silently wires up the reactive state behind it.
+
+## Full Example
+
+See the [`todo-fast`](https://github.com/microsoft/webui/tree/main/examples/app/todo-fast) example for a complete app.
+
+```bash
+webui build examples/app/todo-fast/src --out dist --plugin=fast
+
+webui serve examples/app/todo-fast/src \
+  --state examples/app/todo-fast/data/state.json \
+  --plugin=fast --watch
+```
+
+## Learn More
+
+- [FAST documentation](https://fast.design/) — Full framework reference
+- [Plugins](/guide/concepts/plugins/) — How the `fast` build plugin works internally
diff --git a/docs/guide/concepts/plugins/index.md b/docs/guide/concepts/plugins/index.md
index d0da8e24..b1e1ba53 100644
--- a/docs/guide/concepts/plugins/index.md
+++ b/docs/guide/concepts/plugins/index.md
@@ -20,59 +20,42 @@ Parser plugins emit opaque binary data into `Plugin` protocol fragments. Handler
 
 ## Using Plugins via the CLI
 
-Pass `--plugin <NAME>` to `webui build` or `webui start`:
+Pass `--plugin <NAME>` to `webui build` or `webui serve`:
 
 ```bash
 # Build with the FAST plugin
 webui build ./my-app --out ./dist --plugin=fast
 
 # Dev server with the FAST plugin
-webui start ./my-app --state ./data/state.json --plugin=fast
+webui serve ./my-app --state ./data/state.json --plugin=fast
 ```
 
 When `--plugin=fast` is specified:
 - **Build**: The `FastParserPlugin` is loaded during parsing
 - **Start**: Both `FastParserPlugin` and `FastHydrationPlugin` are loaded
 
-## Using Plugins in Rust Code
+## Using Plugins with Handlers
 
-### Parser Plugin
-
-```rust
-use webui_parser::{HtmlParser, plugin::fast::FastParserPlugin};
-
-let mut parser = HtmlParser::with_plugin(Box::new(FastParserPlugin::new()));
-parser.parse("index.html", &html)?;
-let records = parser.into_fragment_records();
-```
-
-### Handler Plugin
-
-```rust
-use webui_handler::{WebUIHandler, plugin::fast::FastHydrationPlugin};
+::: code-group
+```rust [Rust]
+use webui_handler::plugin::FastHydrationPlugin;
+use webui::WebUIHandler;
 
 let mut handler = WebUIHandler::with_plugin(Box::new(FastHydrationPlugin::new()));
 handler.handle(&protocol, &state, &mut writer)?;
 ```
 
-### FFI (C API)
+```js [Node.js]
+import { renderStream } from '@microsoft/webui';
 
-```c
-// Create a handler with FAST plugin
-void *handler = webui_handler_create_with_plugin("fast");
-
-// Render as usual
-char *html = webui_handler_render(handler, protocol_data, protocol_len, state_json);
+renderStream(protocolData, state, (chunk) => res.write(chunk), 'fast');
 ```
 
-### Node.js
-
-```js
-const { render } = require('@aspect/webui');
-
-// Pass plugin name as the fourth argument
-render(protocolData, stateJson, onChunk, 'fast');
+```c [FFI (C API)]
+void *handler = webui_handler_create_with_plugin("fast");
+char *html = webui_handler_render(handler, protocol_data, protocol_len, state_json);
 ```
+:::
 
 ## Built-in Plugin: FAST-HTML
 
diff --git a/docs/guide/installation.md b/docs/guide/installation.md
index 5d29f646..51b50775 100644
--- a/docs/guide/installation.md
+++ b/docs/guide/installation.md
@@ -2,9 +2,13 @@
 
 WebUI Framework can be installed and used with various environments and languages. This guide covers the most common installation methods.
 
-## NPM Installation
+## npm (Recommended)
 
-Install the WebUI Framework package:
+The `@microsoft/webui` npm package is the primary way to use WebUI. It gives you:
+
+- **`npx webui build`** — the CLI for building templates into protocols
+- **`import { build, render } from '@microsoft/webui'`** — a programmatic API for Node.js
+- **Native performance** via platform-specific binaries (no compilation required)
 
 ::: code-group
 ```bash [npm]
@@ -22,33 +26,32 @@ pnpm add @microsoft/webui
 
 ### Configure package.json
 
-Add the following scripts to your package.json file:
+A typical project setup:
 
 ```json
 {
   "scripts": {
-    "start": "webui dev",
-    "build": "webui build"
+    "build": "webui build ./src --out ./dist",
+    "dev": "webui serve ./src --state ./data/state.json --watch"
+  },
+  "dependencies": {
+    "@microsoft/webui": "latest"
   }
 }
 ```
 
-This allows you to run the development server with `npm start` and build for production with `npm run build`.
+Run the development server with `npm run dev` and build for production with `npm run build`.
 
-## Rust Installation
+### Cross-Platform Support
 
-### Build the CLI from Source
+The npm package uses platform-specific optional dependencies to deliver native binaries. Supported platforms are installed automatically — no Rust toolchain required.
 
-```bash
-git clone https://github.com/microsoft/webui.git
-cd webui
-cargo build --release
-```
+## Rust CLI
 
-The `webui` binary will be at `target/release/webui`. You can copy it to a directory on your `PATH`:
+Rust users who only need the CLI can install it directly from crates.io:
 
 ```bash
-cp target/release/webui ~/.cargo/bin/
+cargo install webui-cli
 ```
 
 Then build your app:
@@ -59,50 +62,15 @@ webui build ./my-app --out ./dist
 
 See the [CLI Reference](/guide/cli/) for full usage details.
 
-### Add WebUI to your Cargo.toml
-
-```toml
-[dependencies]
-webui = { git = "https://github.com/microsoft/webui" }
-```
-
-### Create a WebUI Project
-
-Create a new Rust project with WebUI:
+## Rust Library
 
-```bash
-cargo new my-webui-project
-cd my-webui-project
-```
-
-### Configure Cargo.toml for Development
-
-Update your Cargo.toml to include development commands:
+For Rust applications that need programmatic build or render capabilities, add the `webui` crate:
 
 ```toml
-[package]
-name = "my-webui-project"
-version = "0.1.0"
-edition = "2021"
-
 [dependencies]
-webui = { git = "https://github.com/microsoft/webui" }
-
-[[bin]]
-name = "dev"
-path = "src/dev.rs"
-
-[[bin]]
-name = "build"
-path = "src/build.rs"
+webui = "*" # see https://crates.io/crates/webui for latest version
 ```
 
-This allows you to run:
-
-```bash
-# For development
-cargo run --bin dev
+This gives you access to `webui::build()`, `webui::BuildOptions`, `webui::BuildResult`, and `webui::inspect()` for build-time operations, as well as `webui::WebUIHandler` for rendering.
 
-# For production build
-cargo run --bin build
-```
\ No newline at end of file
+See the [Rust Handler](/guide/concepts/handlers/rust) guide for API details and examples.
\ No newline at end of file
diff --git a/docs/tutorials/hello-world.md b/docs/tutorials/hello-world.md
index 096c19bb..39b43a74 100644
--- a/docs/tutorials/hello-world.md
+++ b/docs/tutorials/hello-world.md
@@ -63,12 +63,12 @@ Create a `state.json` file with the data for rendering:
 }
 ```
 
-## Previewing with `webui start`
+## Previewing with `webui serve`
 
 The fastest way to preview your app during development is the built-in dev server:
 
 ```bash
-webui-cli start ./hello-world/templates --state ./hello-world/data/state.json --servedir ./hello-world/assets --watch
+webui serve ./hello-world/templates --state ./hello-world/data/state.json --servedir ./hello-world/assets --watch
 ```
 
 This will:
@@ -82,7 +82,7 @@ Open `http://127.0.0.1:3000/` in your browser to see the rendered output. With `
 You can also specify a custom port:
 
 ```bash
-webui-cli start ./hello-world/templates --state ./hello-world/data/state.json --servedir ./hello-world/assets --watch --port 9090
+webui serve ./hello-world/templates --state ./hello-world/data/state.json --servedir ./hello-world/assets --watch --port 9090
 ```
 
 ## Building for Production
@@ -133,7 +133,7 @@ fn main() -> anyhow::Result<()> {
 In this tutorial, we've:
 
 1. Created a WebUI app folder with templates, data, and assets
-2. Used `webui start` to preview the app with live reload
+2. Used `webui serve` to preview the app with live reload
 3. Built the protocol with `webui build` for production use
 4. Rendered the protocol programmatically with the Rust handler
 
diff --git a/docs/tutorials/todo-app.md b/docs/tutorials/todo-app.md
index 34d4b71a..11894739 100644
--- a/docs/tutorials/todo-app.md
+++ b/docs/tutorials/todo-app.md
@@ -248,7 +248,7 @@ For applications using [FAST-HTML](https://github.com/nicholasgasior/fast-html)
 webui build examples/app/todo-fast/src --out examples/app/todo-fast/dist --plugin=fast
 
 # Render with hydration markers
-webui start examples/app/todo-fast/src --state examples/app/todo-fast/data/state.json --plugin=fast
+webui serve examples/app/todo-fast/src --state examples/app/todo-fast/data/state.json --plugin=fast
 ```
 
 The `--plugin=fast` flag injects hydration comment markers into the rendered HTML, allowing FAST-HTML's client-side runtime to efficiently locate and re-attach to server-rendered dynamic content. See [Plugins](/guide/concepts/plugins/) for details.
diff --git a/packages/webui-darwin-arm64/README.md b/packages/webui-darwin-arm64/README.md
new file mode 100644
index 00000000..b6ae9d05
--- /dev/null
+++ b/packages/webui-darwin-arm64/README.md
@@ -0,0 +1,4 @@
+# @microsoft/webui-darwin-arm64
+
+Platform-specific binary package for WebUI. This package is installed automatically
+by `@microsoft/webui` — you should not need to install it directly.
diff --git a/packages/webui-darwin-arm64/package.json b/packages/webui-darwin-arm64/package.json
new file mode 100644
index 00000000..e8c15411
--- /dev/null
+++ b/packages/webui-darwin-arm64/package.json
@@ -0,0 +1,17 @@
+{
+  "cpu": [
+    "arm64"
+  ],
+  "description": "WebUI platform-specific binary for macOS ARM64",
+  "files": [
+    "bin/webui",
+    "webui.node"
+  ],
+  "license": "MIT",
+  "name": "@microsoft/webui-darwin-arm64",
+  "os": [
+    "darwin"
+  ],
+  "preferUnplugged": true,
+  "version": "0.0.1"
+}
diff --git a/packages/webui-darwin-x64/README.md b/packages/webui-darwin-x64/README.md
new file mode 100644
index 00000000..954d9239
--- /dev/null
+++ b/packages/webui-darwin-x64/README.md
@@ -0,0 +1,4 @@
+# @microsoft/webui-darwin-x64
+
+Platform-specific binary package for WebUI. This package is installed automatically
+by `@microsoft/webui` — you should not need to install it directly.
diff --git a/packages/webui-darwin-x64/package.json b/packages/webui-darwin-x64/package.json
new file mode 100644
index 00000000..4b3f178d
--- /dev/null
+++ b/packages/webui-darwin-x64/package.json
@@ -0,0 +1,17 @@
+{
+  "cpu": [
+    "x64"
+  ],
+  "description": "WebUI platform-specific binary for macOS x64",
+  "files": [
+    "bin/webui",
+    "webui.node"
+  ],
+  "license": "MIT",
+  "name": "@microsoft/webui-darwin-x64",
+  "os": [
+    "darwin"
+  ],
+  "preferUnplugged": true,
+  "version": "0.0.1"
+}
diff --git a/packages/webui-linux-arm64/README.md b/packages/webui-linux-arm64/README.md
new file mode 100644
index 00000000..5d8e95db
--- /dev/null
+++ b/packages/webui-linux-arm64/README.md
@@ -0,0 +1,4 @@
+# @microsoft/webui-linux-arm64
+
+Platform-specific binary package for WebUI. This package is installed automatically
+by `@microsoft/webui` — you should not need to install it directly.
diff --git a/packages/webui-linux-arm64/package.json b/packages/webui-linux-arm64/package.json
new file mode 100644
index 00000000..5db0cb69
--- /dev/null
+++ b/packages/webui-linux-arm64/package.json
@@ -0,0 +1,17 @@
+{
+  "cpu": [
+    "arm64"
+  ],
+  "description": "WebUI platform-specific binary for Linux ARM64",
+  "files": [
+    "bin/webui",
+    "webui.node"
+  ],
+  "license": "MIT",
+  "name": "@microsoft/webui-linux-arm64",
+  "os": [
+    "linux"
+  ],
+  "preferUnplugged": true,
+  "version": "0.0.1"
+}
diff --git a/packages/webui-linux-x64/README.md b/packages/webui-linux-x64/README.md
new file mode 100644
index 00000000..c8c86ea5
--- /dev/null
+++ b/packages/webui-linux-x64/README.md
@@ -0,0 +1,4 @@
+# @microsoft/webui-linux-x64
+
+Platform-specific binary package for WebUI. This package is installed automatically
+by `@microsoft/webui` — you should not need to install it directly.
diff --git a/packages/webui-linux-x64/package.json b/packages/webui-linux-x64/package.json
new file mode 100644
index 00000000..3ccc9d3a
--- /dev/null
+++ b/packages/webui-linux-x64/package.json
@@ -0,0 +1,17 @@
+{
+  "cpu": [
+    "x64"
+  ],
+  "description": "WebUI platform-specific binary for Linux x64",
+  "files": [
+    "bin/webui",
+    "webui.node"
+  ],
+  "license": "MIT",
+  "name": "@microsoft/webui-linux-x64",
+  "os": [
+    "linux"
+  ],
+  "preferUnplugged": true,
+  "version": "0.0.1"
+}
diff --git a/packages/webui-win32-arm64/README.md b/packages/webui-win32-arm64/README.md
new file mode 100644
index 00000000..a1da8283
--- /dev/null
+++ b/packages/webui-win32-arm64/README.md
@@ -0,0 +1,4 @@
+# @microsoft/webui-win32-arm64
+
+Platform-specific binary package for WebUI. This package is installed automatically
+by `@microsoft/webui` — you should not need to install it directly.
diff --git a/packages/webui-win32-arm64/package.json b/packages/webui-win32-arm64/package.json
new file mode 100644
index 00000000..187d5ab1
--- /dev/null
+++ b/packages/webui-win32-arm64/package.json
@@ -0,0 +1,17 @@
+{
+  "cpu": [
+    "arm64"
+  ],
+  "description": "WebUI platform-specific binary for Windows ARM64",
+  "files": [
+    "bin/webui.exe",
+    "webui.node"
+  ],
+  "license": "MIT",
+  "name": "@microsoft/webui-win32-arm64",
+  "os": [
+    "win32"
+  ],
+  "preferUnplugged": true,
+  "version": "0.0.1"
+}
diff --git a/packages/webui-win32-x64/README.md b/packages/webui-win32-x64/README.md
new file mode 100644
index 00000000..0b1be914
--- /dev/null
+++ b/packages/webui-win32-x64/README.md
@@ -0,0 +1,4 @@
+# @microsoft/webui-win32-x64
+
+Platform-specific binary package for WebUI. This package is installed automatically
+by `@microsoft/webui` — you should not need to install it directly.
diff --git a/packages/webui-win32-x64/package.json b/packages/webui-win32-x64/package.json
new file mode 100644
index 00000000..32df96ae
--- /dev/null
+++ b/packages/webui-win32-x64/package.json
@@ -0,0 +1,17 @@
+{
+  "cpu": [
+    "x64"
+  ],
+  "description": "WebUI platform-specific binary for Windows x64",
+  "files": [
+    "bin/webui.exe",
+    "webui.node"
+  ],
+  "license": "MIT",
+  "name": "@microsoft/webui-win32-x64",
+  "os": [
+    "win32"
+  ],
+  "preferUnplugged": true,
+  "version": "0.0.1"
+}
diff --git a/packages/webui/.gitignore b/packages/webui/.gitignore
new file mode 100644
index 00000000..6ce002df
--- /dev/null
+++ b/packages/webui/.gitignore
@@ -0,0 +1 @@
+test/integration.test.js
diff --git a/packages/webui/package.json b/packages/webui/package.json
new file mode 100644
index 00000000..33d40378
--- /dev/null
+++ b/packages/webui/package.json
@@ -0,0 +1,48 @@
+{
+  "bin": {
+    "webui": "bin/webui"
+  },
+  "description": "WebUI — high-performance server-side rendering framework. Build-time protocol compiler and streaming renderer.",
+  "devDependencies": {
+    "@types/node": "catalog:",
+    "esbuild": "catalog:",
+    "typescript": "catalog:"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "exports": {
+    ".": {
+      "import": {
+        "default": "./dist/index.js",
+        "types": "./dist/index.d.ts"
+      }
+    }
+  },
+  "files": [
+    "bin/",
+    "dist/",
+    "wasm/"
+  ],
+  "license": "MIT",
+  "name": "@microsoft/webui",
+  "optionalDependencies": {
+    "@microsoft/webui-darwin-arm64": "workspace:*",
+    "@microsoft/webui-darwin-x64": "workspace:*",
+    "@microsoft/webui-linux-arm64": "workspace:*",
+    "@microsoft/webui-linux-x64": "workspace:*",
+    "@microsoft/webui-win32-arm64": "workspace:*",
+    "@microsoft/webui-win32-x64": "workspace:*"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/nicolo-ribaudo/nicolo-nicolo.git"
+  },
+  "scripts": {
+    "build": "esbuild src/index.ts src/platform.ts src/install.ts --outdir=dist --format=esm --platform=node && tsc --emitDeclarationOnly",
+    "postinstall": "node --input-type=module -e \"try{await import('./dist/install.js')}catch{}\"",
+    "test": "esbuild test/integration.test.ts --outfile=test/integration.test.js --format=esm --platform=node && node --test test/integration.test.js"
+  },
+  "type": "module",
+  "version": "0.0.1"
+}
diff --git a/packages/webui/src/index.ts b/packages/webui/src/index.ts
new file mode 100644
index 00000000..f90f7bcc
--- /dev/null
+++ b/packages/webui/src/index.ts
@@ -0,0 +1,228 @@
+import { createRequire } from "node:module";
+import { execFileSync } from "node:child_process";
+import fs from "node:fs";
+import nodePath from "node:path";
+import { resolve, platformKey } from "./platform.js";
+
+const require = createRequire(import.meta.url);
+
+// ── Types ────────────────────────────────────────────────────────────
+
+/** Options for building a WebUI application. */
+export interface BuildOptions {
+  /** Path to the application folder containing templates. */
+  appDir: string;
+  /** Entry HTML file name (default: "index.html"). */
+  entry?: string;
+  /** CSS delivery strategy: "link" (default) or "style". */
+  css?: "link" | "style";
+  /** Parser plugin (e.g., "fast" for FAST-HTML hydration). */
+  plugin?: string;
+  /** Additional component sources (npm packages or local paths). */
+  components?: string[];
+  /** Output directory (used by CLI fallback for build-to-disk). */
+  outDir?: string;
+}
+
+/** Build statistics. */
+export interface BuildStats {
+  /** Build duration in milliseconds. */
+  durationMs: number;
+  /** Total number of protocol fragments. */
+  fragmentCount: number;
+  /** Number of registered components. */
+  componentCount: number;
+  /** Number of CSS files produced. */
+  cssFileCount: number;
+  /** Size of the serialized protocol in bytes. */
+  protocolSizeBytes: number;
+  /** Number of unique CSS tokens discovered. */
+  tokenCount: number;
+}
+
+/** Result of a successful build operation. */
+export interface BuildResult {
+  /** Serialized protocol (protobuf binary). */
+  protocol: Buffer;
+  /** CSS files as alternating [filename, content, ...]. */
+  cssFiles: string[];
+  /** Build statistics. */
+  stats: BuildStats;
+}
+
+// ── Internal: native addon loading ───────────────────────────────────
+
+interface NativeAddon {
+  render(
+    protocol: Buffer,
+    stateJson: string,
+    onChunk: (html: string) => void,
+    plugin?: string,
+  ): void;
+  build(options: {
+    appDir: string;
+    entry?: string;
+    css?: string;
+    plugin?: string;
+    components?: string[];
+  }): BuildResult;
+  inspect(protocolData: Buffer): string;
+}
+
+let addon: NativeAddon | null = null;
+let fallbackWarned = false;
+
+function loadAddon(): NativeAddon | null {
+  if (addon) return addon;
+
+  const addonPath = resolve("addon");
+  if (addonPath) {
+    try {
+      // .node files load via require(), native libs (.dylib/.so/.dll) via dlopen
+      if (addonPath.endsWith(".node")) {
+        addon = require(addonPath) as NativeAddon;
+      } else {
+        const m: { exports: NativeAddon } = { exports: {} as NativeAddon };
+        process.dlopen(m, addonPath);
+        addon = m.exports;
+      }
+      return addon;
+    } catch {
+      // Fall through to WASM.
+    }
+  }
+  return null;
+}
+
+function warnFallback(): void {
+  if (fallbackWarned) return;
+  fallbackWarned = true;
+  console.warn(
+    `[webui] Native addon not available for ${platformKey()}. ` +
+      `Using WASM fallback — performance may be degraded.\n` +
+      `Install the platform-specific package for optimal performance.`,
+  );
+}
+
+// ── Build API ────────────────────────────────────────────────────────
+
+/** Build a WebUI application from an app directory. */
+export function build(options: BuildOptions): BuildResult {
+  const native = loadAddon();
+  if (native?.build) {
+    return native.build(options);
+  }
+
+  // Fallback: shell out to CLI binary.
+  const binPath = resolve("bin");
+  if (!binPath) {
+    throw new Error(
+      "[webui] Cannot build: no native addon or CLI binary available.",
+    );
+  }
+
+  const args = ["build", options.appDir ?? "."];
+  if (options.entry) args.push("--entry", options.entry);
+  if (options.css) args.push("--css", options.css);
+  if (options.plugin) args.push("--plugin", options.plugin);
+  if (options.components) {
+    for (const c of options.components) {
+      args.push("--components", c);
+    }
+  }
+  if (options.outDir) args.push("--out", options.outDir);
+
+  execFileSync(binPath, args, { stdio: "inherit" });
+
+  // CLI fallback does not return in-memory protocol.
+  if (options.outDir) {
+    const protocol = fs.readFileSync(nodePath.join(options.outDir, "protocol.bin"));
+    return { protocol, cssFiles: [], stats: emptyStats() };
+  }
+
+  return { protocol: Buffer.alloc(0), cssFiles: [], stats: emptyStats() };
+}
+
+// ── Render API ───────────────────────────────────────────────────────
+
+/**
+ * Render a pre-compiled protocol with state data.
+ * Uses native addon when available, WASM fallback otherwise.
+ */
+export function render(
+  protocol: Buffer,
+  state: object | string,
+): string {
+  const native = loadAddon();
+  if (native) {
+    let result = "";
+    const stateStr = typeof state === "string" ? state : JSON.stringify(state);
+    native.render(protocol, stateStr, (chunk) => {
+      result += chunk;
+    });
+    return result;
+  }
+
+  warnFallback();
+  throw new Error(
+    "[webui] render() requires the native addon. WASM render fallback not yet wired.",
+  );
+}
+
+/**
+ * Render a protocol with streaming output.
+ * Each HTML fragment is passed to the onChunk callback as it is produced.
+ */
+export function renderStream(
+  protocol: Buffer,
+  state: object | string,
+  onChunk: (html: string) => void,
+): void {
+  const native = loadAddon();
+  if (native) {
+    const stateStr = typeof state === "string" ? state : JSON.stringify(state);
+    native.render(protocol, stateStr, onChunk);
+    return;
+  }
+
+  warnFallback();
+  throw new Error(
+    "[webui] renderStream() requires the native addon. WASM render fallback not yet wired.",
+  );
+}
+
+// ── Convenience ──────────────────────────────────────────────────────
+
+/** Build and render in a single call. */
+export function buildAndRender(
+  options: BuildOptions,
+  state: object | string,
+): string {
+  const result = build(options);
+  if (!result.protocol || result.protocol.length === 0) {
+    throw new Error("[webui] Build did not return protocol data.");
+  }
+  return render(result.protocol, state);
+}
+
+/** Inspect protocol bytes and return JSON representation. */
+export function inspect(protocolData: Buffer): string {
+  const native = loadAddon();
+  if (native?.inspect) {
+    return native.inspect(protocolData);
+  }
+  throw new Error("[webui] inspect() requires the native addon.");
+}
+
+// ── Helpers ──────────────────────────────────────────────────────────
+
+function emptyStats(): BuildStats {
+  return {
+    durationMs: 0,
+    fragmentCount: 0,
+    componentCount: 0,
+    cssFileCount: 0,
+    protocolSizeBytes: 0,
+    tokenCount: 0,
+  };
+}
diff --git a/packages/webui/src/install.ts b/packages/webui/src/install.ts
new file mode 100644
index 00000000..cf0a6d93
--- /dev/null
+++ b/packages/webui/src/install.ts
@@ -0,0 +1,33 @@
+import fs from "node:fs";
+import { resolve, platformKey, packageName } from "./platform.js";
+
+// Validate that the platform binary exists after install.
+try {
+  const binPath = resolve("bin");
+  if (binPath && fs.existsSync(binPath)) {
+    // Success — binary is available.
+    process.exit(0);
+  }
+} catch {
+  // Fall through to warning.
+}
+
+const key = platformKey();
+let pkg: string | undefined;
+try {
+  pkg = packageName();
+} catch {
+  console.warn(
+    `[webui] Warning: Unsupported platform ${key}. ` +
+      `The webui CLI will not be available. ` +
+      `Set WEBUI_BINARY_PATH to use a custom binary.`,
+  );
+  process.exit(0);
+}
+
+console.warn(
+  `[webui] Warning: Platform package ${pkg!} was not installed. ` +
+    `This usually means your package manager was run with --no-optional. ` +
+    `The webui CLI and native addon will not be available.\n` +
+    `To fix: reinstall without --no-optional, or set WEBUI_BINARY_PATH.`,
+);
diff --git a/packages/webui/src/platform.ts b/packages/webui/src/platform.ts
new file mode 100644
index 00000000..a092bd77
--- /dev/null
+++ b/packages/webui/src/platform.ts
@@ -0,0 +1,95 @@
+import { createRequire } from "node:module";
+import { existsSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const require = createRequire(import.meta.url);
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+
+const PLATFORMS: Record<string, string> = {
+  "darwin-arm64": "@microsoft/webui-darwin-arm64",
+  "darwin-x64": "@microsoft/webui-darwin-x64",
+  "linux-x64": "@microsoft/webui-linux-x64",
+  "linux-arm64": "@microsoft/webui-linux-arm64",
+  "win32-x64": "@microsoft/webui-win32-x64",
+  "win32-arm64": "@microsoft/webui-win32-arm64",
+};
+
+const ADDON_NAMES: Record<string, string> = {
+  darwin: "libwebui_node.dylib",
+  linux: "libwebui_node.so",
+  win32: "webui_node.dll",
+};
+
+export function platformKey(): string {
+  return `${process.platform}-${os.arch()}`;
+}
+
+export function packageName(): string {
+  const key = platformKey();
+  const name = PLATFORMS[key];
+  if (!name) {
+    throw new Error(
+      `[webui] Unsupported platform: ${key}. ` +
+        `Supported: ${Object.keys(PLATFORMS).join(", ")}`,
+    );
+  }
+  return name;
+}
+
+/**
+ * Resolve a file from the platform-specific package, with fallback to
+ * local cargo build output for workspace development.
+ *
+ * @param kind — "bin" for CLI binary, "addon" for .node file
+ * @returns Absolute path, or null if not found.
+ */
+export function resolve(kind: "bin" | "addon"): string | null {
+  // Environment variable overrides
+  if (kind === "bin" && process.env["WEBUI_BINARY_PATH"]) {
+    return process.env["WEBUI_BINARY_PATH"];
+  }
+  if (kind === "addon" && process.env["WEBUI_ADDON_PATH"]) {
+    return process.env["WEBUI_ADDON_PATH"];
+  }
+
+  // Try platform-specific npm package
+  try {
+    const pkg = packageName();
+    const pkgDir = path.dirname(require.resolve(`${pkg}/package.json`));
+    if (kind === "bin") {
+      const binName = process.platform === "win32" ? "webui.exe" : "webui";
+      const binPath = path.join(pkgDir, "bin", binName);
+      if (existsSync(binPath)) return binPath;
+    } else {
+      const addonPath = path.join(pkgDir, "webui.node");
+      if (existsSync(addonPath)) return addonPath;
+    }
+  } catch {
+    // Fall through to workspace fallback
+  }
+
+  // Workspace fallback: look for cargo build output.
+  // __dirname is packages/webui/dist (compiled) or packages/webui/src (source)
+  // so ../../.. reaches the workspace root.
+  const workspaceRoot = path.resolve(__dirname, "..", "..", "..");
+  const releasePath = path.join(workspaceRoot, "target", "release");
+
+  if (kind === "bin") {
+    const binName = process.platform === "win32" ? "webui.exe" : "webui";
+    const binPath = path.join(releasePath, binName);
+    if (existsSync(binPath)) return binPath;
+    // Also check debug
+    const debugPath = path.join(workspaceRoot, "target", "debug", binName);
+    if (existsSync(debugPath)) return debugPath;
+  } else {
+    const addonName = ADDON_NAMES[process.platform] ?? "libwebui_node.so";
+    const addonPath = path.join(releasePath, addonName);
+    if (existsSync(addonPath)) return addonPath;
+    const debugPath = path.join(workspaceRoot, "target", "debug", addonName);
+    if (existsSync(debugPath)) return debugPath;
+  }
+
+  return null;
+}
diff --git a/packages/webui/test/integration.test.ts b/packages/webui/test/integration.test.ts
new file mode 100644
index 00000000..4eed5b93
--- /dev/null
+++ b/packages/webui/test/integration.test.ts
@@ -0,0 +1,115 @@
+/**
+ * Integration test for the @microsoft/webui npm package.
+ * Uses the built-in Node.js test runner.
+ */
+
+import { describe, test, before, after } from 'node:test';
+import { strict as assert } from 'node:assert';
+import { build, render, renderStream, inspect } from '../dist/index.js';
+import { writeFileSync, mkdtempSync, rmSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+
+let appDir: string;
+
+before(() => {
+  appDir = mkdtempSync(join(tmpdir(), 'webui-test-'));
+
+  writeFileSync(join(appDir, 'index.html'), `
+<!DOCTYPE html>
+<html>
+<body>
+  <h1>Hello, {{name}}!</h1>
+  <for each="item in items">
+    <p>{{item}}</p>
+  </for>
+  <if condition="show">
+    <footer>Visible</footer>
+  </if>
+</body>
+</html>
+`);
+
+  writeFileSync(join(appDir, 'my-card.html'), '<div class="card"><slot></slot></div>');
+  writeFileSync(join(appDir, 'my-card.css'), '.card { border: 1px solid #ccc; }');
+  writeFileSync(join(appDir, 'index2.html'), '<my-card>Hello</my-card>');
+});
+
+after(() => {
+  rmSync(appDir, { recursive: true, force: true });
+});
+
+describe('build', () => {
+  test('returns protocol and stats', () => {
+    const result = build({ appDir });
+    assert.ok(result.protocol.length > 0);
+    assert.ok(result.stats.fragmentCount > 0);
+    assert.ok(result.stats.durationMs >= 0);
+    assert.ok(result.stats.protocolSizeBytes > 0);
+    assert.ok(result.stats.componentCount >= 0);
+  });
+
+  test('emits CSS files for used components', () => {
+    const result = build({ appDir, entry: 'index2.html', css: 'link' });
+    assert.ok(result.stats.componentCount > 0);
+    assert.equal(result.cssFiles.length, 2); // [filename, content]
+    assert.equal(result.stats.cssFileCount, 1);
+  });
+
+  test('throws on missing appDir', () => {
+    assert.throws(() => build({ appDir: '/nonexistent' }));
+  });
+
+  test('throws on invalid css mode', () => {
+    assert.throws(() => build({ appDir, css: 'bogus' as 'link' }));
+  });
+});
+
+describe('inspect', () => {
+  test('returns valid JSON with fragments', () => {
+    const result = build({ appDir });
+    const json = inspect(result.protocol);
+    const parsed = JSON.parse(json);
+    assert.ok(parsed.fragments);
+    assert.ok(parsed.fragments['index.html']);
+  });
+});
+
+describe('render', () => {
+  test('substitutes signals', () => {
+    const result = build({ appDir });
+    const html = render(result.protocol, { name: 'WebUI', items: ['a', 'b'], show: true });
+    assert.ok(html.includes('Hello, WebUI!'));
+  });
+
+  test('expands for-loop', () => {
+    const result = build({ appDir });
+    const html = render(result.protocol, { name: 'X', items: ['a', 'b'], show: false });
+    assert.ok(html.includes('<p>a</p>'));
+    assert.ok(html.includes('<p>b</p>'));
+  });
+
+  test('includes if-true block', () => {
+    const result = build({ appDir });
+    const html = render(result.protocol, { name: 'X', items: [], show: true });
+    assert.ok(html.includes('<footer>Visible</footer>'));
+  });
+
+  test('excludes if-false block', () => {
+    const result = build({ appDir });
+    const html = render(result.protocol, { name: 'X', items: [], show: false });
+    assert.ok(!html.includes('<footer>'));
+  });
+});
+
+describe('renderStream', () => {
+  test('streams chunks via callback', () => {
+    const result = build({ appDir });
+    const chunks: string[] = [];
+    renderStream(result.protocol, { name: 'Stream', items: ['x'], show: false }, (chunk) => {
+      chunks.push(chunk);
+    });
+    assert.ok(chunks.length > 0);
+    assert.ok(chunks.join('').includes('Hello, Stream!'));
+  });
+});
diff --git a/packages/webui/tsconfig.json b/packages/webui/tsconfig.json
new file mode 100644
index 00000000..efed6d6f
--- /dev/null
+++ b/packages/webui/tsconfig.json
@@ -0,0 +1,18 @@
+{
+  "compilerOptions": {
+    "target": "ESNext",
+    "module": "ESNext",
+    "moduleResolution": "bundler",
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true,
+    "outDir": "dist",
+    "rootDir": "src",
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "forceConsistentCasingInFileNames": true,
+    "verbatimModuleSyntax": true
+  },
+  "include": ["src"]
+}
diff --git a/packages/webui/wasm/.gitkeep b/packages/webui/wasm/.gitkeep
new file mode 100644
index 00000000..e69de29b
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 68b701fa..5c729683 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -36,12 +36,15 @@ catalogs:
     '@microsoft/fast-html':
       specifier: 1.0.0-alpha.38
       version: 1.0.0-alpha.38
+    '@types/node':
+      specifier: ^25.3.5
+      version: 25.3.5
     electron:
-      specifier: ^36.3.1
-      version: 36.9.5
+      specifier: ^40.8.0
+      version: 40.8.0
     esbuild:
-      specifier: ^0.25.0
-      version: 0.25.12
+      specifier: ^0.27.3
+      version: 0.27.3
     tslib:
       specifier: ^2.8.0
       version: 2.8.1
@@ -87,7 +90,7 @@ importers:
         version: 6.39.15
       vitepress:
         specifier: 'catalog:'
-        version: 1.6.4(@algolia/client-search@5.21.0)(@types/node@22.19.13)(postcss@8.5.6)(search-insights@2.17.3)(typescript@5.9.3)
+        version: 1.6.4(@algolia/client-search@5.21.0)(@types/node@25.3.5)(postcss@8.5.6)(search-insights@2.17.3)(typescript@5.9.3)
       vue:
         specifier: 'catalog:'
         version: 3.5.29(typescript@5.9.3)
@@ -102,7 +105,7 @@ importers:
         version: 1.0.0-alpha.38(@microsoft/fast-element@2.10.1)
       esbuild:
         specifier: 'catalog:'
-        version: 0.25.12
+        version: 0.27.3
       tslib:
         specifier: 'catalog:'
         version: 2.8.1
@@ -114,7 +117,7 @@ importers:
     devDependencies:
       esbuild:
         specifier: 'catalog:'
-        version: 0.25.12
+        version: 0.27.3
       typescript:
         specifier: 'catalog:'
         version: 5.9.3
@@ -129,7 +132,7 @@ importers:
         version: 1.0.0-alpha.38(@microsoft/fast-element@2.10.1)
       esbuild:
         specifier: 'catalog:'
-        version: 0.25.12
+        version: 0.27.3
       tslib:
         specifier: 'catalog:'
         version: 2.8.1
@@ -141,16 +144,59 @@ importers:
     devDependencies:
       electron:
         specifier: 'catalog:'
-        version: 36.9.5
+        version: 40.8.0
       esbuild:
         specifier: 'catalog:'
-        version: 0.25.12
+        version: 0.27.3
       typescript:
         specifier: 'catalog:'
         version: 5.9.3
 
   examples/integration/node: {}
 
+  packages/webui:
+    devDependencies:
+      '@types/node':
+        specifier: 'catalog:'
+        version: 25.3.5
+      esbuild:
+        specifier: 'catalog:'
+        version: 0.27.3
+      typescript:
+        specifier: 'catalog:'
+        version: 5.9.3
+    optionalDependencies:
+      '@microsoft/webui-darwin-arm64':
+        specifier: workspace:*
+        version: link:../webui-darwin-arm64
+      '@microsoft/webui-darwin-x64':
+        specifier: workspace:*
+        version: link:../webui-darwin-x64
+      '@microsoft/webui-linux-arm64':
+        specifier: workspace:*
+        version: link:../webui-linux-arm64
+      '@microsoft/webui-linux-x64':
+        specifier: workspace:*
+        version: link:../webui-linux-x64
+      '@microsoft/webui-win32-arm64':
+        specifier: workspace:*
+        version: link:../webui-win32-arm64
+      '@microsoft/webui-win32-x64':
+        specifier: workspace:*
+        version: link:../webui-win32-x64
+
+  packages/webui-darwin-arm64: {}
+
+  packages/webui-darwin-x64: {}
+
+  packages/webui-linux-arm64: {}
+
+  packages/webui-linux-x64: {}
+
+  packages/webui-win32-arm64: {}
+
+  packages/webui-win32-x64: {}
+
 packages:
 
   '@algolia/autocomplete-core@1.17.7':
@@ -308,8 +354,8 @@ packages:
     cpu: [ppc64]
     os: [aix]
 
-  '@esbuild/aix-ppc64@0.25.12':
-    resolution: {integrity: sha512-Hhmwd6CInZ3dwpuGTF8fJG6yoWmsToE+vYgD4nytZVxcu1ulHpUQRAB1UJ8+N1Am3Mz4+xOByoQoSZf4D+CpkA==}
+  '@esbuild/aix-ppc64@0.27.3':
+    resolution: {integrity: sha512-9fJMTNFTWZMh5qwrBItuziu834eOCUcEqymSH7pY+zoMVEZg3gcPuBNxH1EvfVYe9h0x/Ptw8KBzv7qxb7l8dg==}
     engines: {node: '>=18'}
     cpu: [ppc64]
     os: [aix]
@@ -320,8 +366,8 @@ packages:
     cpu: [arm64]
     os: [android]
 
-  '@esbuild/android-arm64@0.25.12':
-    resolution: {integrity: sha512-6AAmLG7zwD1Z159jCKPvAxZd4y/VTO0VkprYy+3N2FtJ8+BQWFXU+OxARIwA46c5tdD9SsKGZ/1ocqBS/gAKHg==}
+  '@esbuild/android-arm64@0.27.3':
+    resolution: {integrity: sha512-YdghPYUmj/FX2SYKJ0OZxf+iaKgMsKHVPF1MAq/P8WirnSpCStzKJFjOjzsW0QQ7oIAiccHdcqjbHmJxRb/dmg==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [android]
@@ -332,8 +378,8 @@ packages:
     cpu: [arm]
     os: [android]
 
-  '@esbuild/android-arm@0.25.12':
-    resolution: {integrity: sha512-VJ+sKvNA/GE7Ccacc9Cha7bpS8nyzVv0jdVgwNDaR4gDMC/2TTRc33Ip8qrNYUcpkOHUT5OZ0bUcNNVZQ9RLlg==}
+  '@esbuild/android-arm@0.27.3':
+    resolution: {integrity: sha512-i5D1hPY7GIQmXlXhs2w8AWHhenb00+GxjxRncS2ZM7YNVGNfaMxgzSGuO8o8SJzRc/oZwU2bcScvVERk03QhzA==}
     engines: {node: '>=18'}
     cpu: [arm]
     os: [android]
@@ -344,8 +390,8 @@ packages:
     cpu: [x64]
     os: [android]
 
-  '@esbuild/android-x64@0.25.12':
-    resolution: {integrity: sha512-5jbb+2hhDHx5phYR2By8GTWEzn6I9UqR11Kwf22iKbNpYrsmRB18aX/9ivc5cabcUiAT/wM+YIZ6SG9QO6a8kg==}
+  '@esbuild/android-x64@0.27.3':
+    resolution: {integrity: sha512-IN/0BNTkHtk8lkOM8JWAYFg4ORxBkZQf9zXiEOfERX/CzxW3Vg1ewAhU7QSWQpVIzTW+b8Xy+lGzdYXV6UZObQ==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [android]
@@ -356,8 +402,8 @@ packages:
     cpu: [arm64]
     os: [darwin]
 
-  '@esbuild/darwin-arm64@0.25.12':
-    resolution: {integrity: sha512-N3zl+lxHCifgIlcMUP5016ESkeQjLj/959RxxNYIthIg+CQHInujFuXeWbWMgnTo4cp5XVHqFPmpyu9J65C1Yg==}
+  '@esbuild/darwin-arm64@0.27.3':
+    resolution: {integrity: sha512-Re491k7ByTVRy0t3EKWajdLIr0gz2kKKfzafkth4Q8A5n1xTHrkqZgLLjFEHVD+AXdUGgQMq+Godfq45mGpCKg==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [darwin]
@@ -368,8 +414,8 @@ packages:
     cpu: [x64]
     os: [darwin]
 
-  '@esbuild/darwin-x64@0.25.12':
-    resolution: {integrity: sha512-HQ9ka4Kx21qHXwtlTUVbKJOAnmG1ipXhdWTmNXiPzPfWKpXqASVcWdnf2bnL73wgjNrFXAa3yYvBSd9pzfEIpA==}
+  '@esbuild/darwin-x64@0.27.3':
+    resolution: {integrity: sha512-vHk/hA7/1AckjGzRqi6wbo+jaShzRowYip6rt6q7VYEDX4LEy1pZfDpdxCBnGtl+A5zq8iXDcyuxwtv3hNtHFg==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [darwin]
@@ -380,8 +426,8 @@ packages:
     cpu: [arm64]
     os: [freebsd]
 
-  '@esbuild/freebsd-arm64@0.25.12':
-    resolution: {integrity: sha512-gA0Bx759+7Jve03K1S0vkOu5Lg/85dou3EseOGUes8flVOGxbhDDh/iZaoek11Y8mtyKPGF3vP8XhnkDEAmzeg==}
+  '@esbuild/freebsd-arm64@0.27.3':
+    resolution: {integrity: sha512-ipTYM2fjt3kQAYOvo6vcxJx3nBYAzPjgTCk7QEgZG8AUO3ydUhvelmhrbOheMnGOlaSFUoHXB6un+A7q4ygY9w==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [freebsd]
@@ -392,8 +438,8 @@ packages:
     cpu: [x64]
     os: [freebsd]
 
-  '@esbuild/freebsd-x64@0.25.12':
-    resolution: {integrity: sha512-TGbO26Yw2xsHzxtbVFGEXBFH0FRAP7gtcPE7P5yP7wGy7cXK2oO7RyOhL5NLiqTlBh47XhmIUXuGciXEqYFfBQ==}
+  '@esbuild/freebsd-x64@0.27.3':
+    resolution: {integrity: sha512-dDk0X87T7mI6U3K9VjWtHOXqwAMJBNN2r7bejDsc+j03SEjtD9HrOl8gVFByeM0aJksoUuUVU9TBaZa2rgj0oA==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [freebsd]
@@ -404,8 +450,8 @@ packages:
     cpu: [arm64]
     os: [linux]
 
-  '@esbuild/linux-arm64@0.25.12':
-    resolution: {integrity: sha512-8bwX7a8FghIgrupcxb4aUmYDLp8pX06rGh5HqDT7bB+8Rdells6mHvrFHHW2JAOPZUbnjUpKTLg6ECyzvas2AQ==}
+  '@esbuild/linux-arm64@0.27.3':
+    resolution: {integrity: sha512-sZOuFz/xWnZ4KH3YfFrKCf1WyPZHakVzTiqji3WDc0BCl2kBwiJLCXpzLzUBLgmp4veFZdvN5ChW4Eq/8Fc2Fg==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [linux]
@@ -416,8 +462,8 @@ packages:
     cpu: [arm]
     os: [linux]
 
-  '@esbuild/linux-arm@0.25.12':
-    resolution: {integrity: sha512-lPDGyC1JPDou8kGcywY0YILzWlhhnRjdof3UlcoqYmS9El818LLfJJc3PXXgZHrHCAKs/Z2SeZtDJr5MrkxtOw==}
+  '@esbuild/linux-arm@0.27.3':
+    resolution: {integrity: sha512-s6nPv2QkSupJwLYyfS+gwdirm0ukyTFNl3KTgZEAiJDd+iHZcbTPPcWCcRYH+WlNbwChgH2QkE9NSlNrMT8Gfw==}
     engines: {node: '>=18'}
     cpu: [arm]
     os: [linux]
@@ -428,8 +474,8 @@ packages:
     cpu: [ia32]
     os: [linux]
 
-  '@esbuild/linux-ia32@0.25.12':
-    resolution: {integrity: sha512-0y9KrdVnbMM2/vG8KfU0byhUN+EFCny9+8g202gYqSSVMonbsCfLjUO+rCci7pM0WBEtz+oK/PIwHkzxkyharA==}
+  '@esbuild/linux-ia32@0.27.3':
+    resolution: {integrity: sha512-yGlQYjdxtLdh0a3jHjuwOrxQjOZYD/C9PfdbgJJF3TIZWnm/tMd/RcNiLngiu4iwcBAOezdnSLAwQDPqTmtTYg==}
     engines: {node: '>=18'}
     cpu: [ia32]
     os: [linux]
@@ -440,8 +486,8 @@ packages:
     cpu: [loong64]
     os: [linux]
 
-  '@esbuild/linux-loong64@0.25.12':
-    resolution: {integrity: sha512-h///Lr5a9rib/v1GGqXVGzjL4TMvVTv+s1DPoxQdz7l/AYv6LDSxdIwzxkrPW438oUXiDtwM10o9PmwS/6Z0Ng==}
+  '@esbuild/linux-loong64@0.27.3':
+    resolution: {integrity: sha512-WO60Sn8ly3gtzhyjATDgieJNet/KqsDlX5nRC5Y3oTFcS1l0KWba+SEa9Ja1GfDqSF1z6hif/SkpQJbL63cgOA==}
     engines: {node: '>=18'}
     cpu: [loong64]
     os: [linux]
@@ -452,8 +498,8 @@ packages:
     cpu: [mips64el]
     os: [linux]
 
-  '@esbuild/linux-mips64el@0.25.12':
-    resolution: {integrity: sha512-iyRrM1Pzy9GFMDLsXn1iHUm18nhKnNMWscjmp4+hpafcZjrr2WbT//d20xaGljXDBYHqRcl8HnxbX6uaA/eGVw==}
+  '@esbuild/linux-mips64el@0.27.3':
+    resolution: {integrity: sha512-APsymYA6sGcZ4pD6k+UxbDjOFSvPWyZhjaiPyl/f79xKxwTnrn5QUnXR5prvetuaSMsb4jgeHewIDCIWljrSxw==}
     engines: {node: '>=18'}
     cpu: [mips64el]
     os: [linux]
@@ -464,8 +510,8 @@ packages:
     cpu: [ppc64]
     os: [linux]
 
-  '@esbuild/linux-ppc64@0.25.12':
-    resolution: {integrity: sha512-9meM/lRXxMi5PSUqEXRCtVjEZBGwB7P/D4yT8UG/mwIdze2aV4Vo6U5gD3+RsoHXKkHCfSxZKzmDssVlRj1QQA==}
+  '@esbuild/linux-ppc64@0.27.3':
+    resolution: {integrity: sha512-eizBnTeBefojtDb9nSh4vvVQ3V9Qf9Df01PfawPcRzJH4gFSgrObw+LveUyDoKU3kxi5+9RJTCWlj4FjYXVPEA==}
     engines: {node: '>=18'}
     cpu: [ppc64]
     os: [linux]
@@ -476,8 +522,8 @@ packages:
     cpu: [riscv64]
     os: [linux]
 
-  '@esbuild/linux-riscv64@0.25.12':
-    resolution: {integrity: sha512-Zr7KR4hgKUpWAwb1f3o5ygT04MzqVrGEGXGLnj15YQDJErYu/BGg+wmFlIDOdJp0PmB0lLvxFIOXZgFRrdjR0w==}
+  '@esbuild/linux-riscv64@0.27.3':
+    resolution: {integrity: sha512-3Emwh0r5wmfm3ssTWRQSyVhbOHvqegUDRd0WhmXKX2mkHJe1SFCMJhagUleMq+Uci34wLSipf8Lagt4LlpRFWQ==}
     engines: {node: '>=18'}
     cpu: [riscv64]
     os: [linux]
@@ -488,8 +534,8 @@ packages:
     cpu: [s390x]
     os: [linux]
 
-  '@esbuild/linux-s390x@0.25.12':
-    resolution: {integrity: sha512-MsKncOcgTNvdtiISc/jZs/Zf8d0cl/t3gYWX8J9ubBnVOwlk65UIEEvgBORTiljloIWnBzLs4qhzPkJcitIzIg==}
+  '@esbuild/linux-s390x@0.27.3':
+    resolution: {integrity: sha512-pBHUx9LzXWBc7MFIEEL0yD/ZVtNgLytvx60gES28GcWMqil8ElCYR4kvbV2BDqsHOvVDRrOxGySBM9Fcv744hw==}
     engines: {node: '>=18'}
     cpu: [s390x]
     os: [linux]
@@ -500,14 +546,14 @@ packages:
     cpu: [x64]
     os: [linux]
 
-  '@esbuild/linux-x64@0.25.12':
-    resolution: {integrity: sha512-uqZMTLr/zR/ed4jIGnwSLkaHmPjOjJvnm6TVVitAa08SLS9Z0VM8wIRx7gWbJB5/J54YuIMInDquWyYvQLZkgw==}
+  '@esbuild/linux-x64@0.27.3':
+    resolution: {integrity: sha512-Czi8yzXUWIQYAtL/2y6vogER8pvcsOsk5cpwL4Gk5nJqH5UZiVByIY8Eorm5R13gq+DQKYg0+JyQoytLQas4dA==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [linux]
 
-  '@esbuild/netbsd-arm64@0.25.12':
-    resolution: {integrity: sha512-xXwcTq4GhRM7J9A8Gv5boanHhRa/Q9KLVmcyXHCTaM4wKfIpWkdXiMog/KsnxzJ0A1+nD+zoecuzqPmCRyBGjg==}
+  '@esbuild/netbsd-arm64@0.27.3':
+    resolution: {integrity: sha512-sDpk0RgmTCR/5HguIZa9n9u+HVKf40fbEUt+iTzSnCaGvY9kFP0YKBWZtJaraonFnqef5SlJ8/TiPAxzyS+UoA==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [netbsd]
@@ -518,14 +564,14 @@ packages:
     cpu: [x64]
     os: [netbsd]
 
-  '@esbuild/netbsd-x64@0.25.12':
-    resolution: {integrity: sha512-Ld5pTlzPy3YwGec4OuHh1aCVCRvOXdH8DgRjfDy/oumVovmuSzWfnSJg+VtakB9Cm0gxNO9BzWkj6mtO1FMXkQ==}
+  '@esbuild/netbsd-x64@0.27.3':
+    resolution: {integrity: sha512-P14lFKJl/DdaE00LItAukUdZO5iqNH7+PjoBm+fLQjtxfcfFE20Xf5CrLsmZdq5LFFZzb5JMZ9grUwvtVYzjiA==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [netbsd]
 
-  '@esbuild/openbsd-arm64@0.25.12':
-    resolution: {integrity: sha512-fF96T6KsBo/pkQI950FARU9apGNTSlZGsv1jZBAlcLL1MLjLNIWPBkj5NlSz8aAzYKg+eNqknrUJ24QBybeR5A==}
+  '@esbuild/openbsd-arm64@0.27.3':
+    resolution: {integrity: sha512-AIcMP77AvirGbRl/UZFTq5hjXK+2wC7qFRGoHSDrZ5v5b8DK/GYpXW3CPRL53NkvDqb9D+alBiC/dV0Fb7eJcw==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [openbsd]
@@ -536,14 +582,14 @@ packages:
     cpu: [x64]
     os: [openbsd]
 
-  '@esbuild/openbsd-x64@0.25.12':
-    resolution: {integrity: sha512-MZyXUkZHjQxUvzK7rN8DJ3SRmrVrke8ZyRusHlP+kuwqTcfWLyqMOE3sScPPyeIXN/mDJIfGXvcMqCgYKekoQw==}
+  '@esbuild/openbsd-x64@0.27.3':
+    resolution: {integrity: sha512-DnW2sRrBzA+YnE70LKqnM3P+z8vehfJWHXECbwBmH/CU51z6FiqTQTHFenPlHmo3a8UgpLyH3PT+87OViOh1AQ==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [openbsd]
 
-  '@esbuild/openharmony-arm64@0.25.12':
-    resolution: {integrity: sha512-rm0YWsqUSRrjncSXGA7Zv78Nbnw4XL6/dzr20cyrQf7ZmRcsovpcRBdhD43Nuk3y7XIoW2OxMVvwuRvk9XdASg==}
+  '@esbuild/openharmony-arm64@0.27.3':
+    resolution: {integrity: sha512-NinAEgr/etERPTsZJ7aEZQvvg/A6IsZG/LgZy+81wON2huV7SrK3e63dU0XhyZP4RKGyTm7aOgmQk0bGp0fy2g==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [openharmony]
@@ -554,8 +600,8 @@ packages:
     cpu: [x64]
     os: [sunos]
 
-  '@esbuild/sunos-x64@0.25.12':
-    resolution: {integrity: sha512-3wGSCDyuTHQUzt0nV7bocDy72r2lI33QL3gkDNGkod22EsYl04sMf0qLb8luNKTOmgF/eDEDP5BFNwoBKH441w==}
+  '@esbuild/sunos-x64@0.27.3':
+    resolution: {integrity: sha512-PanZ+nEz+eWoBJ8/f8HKxTTD172SKwdXebZ0ndd953gt1HRBbhMsaNqjTyYLGLPdoWHy4zLU7bDVJztF5f3BHA==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [sunos]
@@ -566,8 +612,8 @@ packages:
     cpu: [arm64]
     os: [win32]
 
-  '@esbuild/win32-arm64@0.25.12':
-    resolution: {integrity: sha512-rMmLrur64A7+DKlnSuwqUdRKyd3UE7oPJZmnljqEptesKM8wx9J8gx5u0+9Pq0fQQW8vqeKebwNXdfOyP+8Bsg==}
+  '@esbuild/win32-arm64@0.27.3':
+    resolution: {integrity: sha512-B2t59lWWYrbRDw/tjiWOuzSsFh1Y/E95ofKz7rIVYSQkUYBjfSgf6oeYPNWHToFRr2zx52JKApIcAS/D5TUBnA==}
     engines: {node: '>=18'}
     cpu: [arm64]
     os: [win32]
@@ -578,8 +624,8 @@ packages:
     cpu: [ia32]
     os: [win32]
 
-  '@esbuild/win32-ia32@0.25.12':
-    resolution: {integrity: sha512-HkqnmmBoCbCwxUKKNPBixiWDGCpQGVsrQfJoVGYLPT41XWF8lHuE5N6WhVia2n4o5QK5M4tYr21827fNhi4byQ==}
+  '@esbuild/win32-ia32@0.27.3':
+    resolution: {integrity: sha512-QLKSFeXNS8+tHW7tZpMtjlNb7HKau0QDpwm49u0vUp9y1WOF+PEzkU84y9GqYaAVW8aH8f3GcBck26jh54cX4Q==}
     engines: {node: '>=18'}
     cpu: [ia32]
     os: [win32]
@@ -590,8 +636,8 @@ packages:
     cpu: [x64]
     os: [win32]
 
-  '@esbuild/win32-x64@0.25.12':
-    resolution: {integrity: sha512-alJC0uCZpTFrSL0CCDjcgleBXPnCrEAhTBILpeAp7M/OFgoqtAetfBzX0xM00MUsVVPpVjlPuMbREqnZCXaTnA==}
+  '@esbuild/win32-x64@0.27.3':
+    resolution: {integrity: sha512-4uJGhsxuptu3OcpVAzli+/gWusVGwZZHTlS63hh++ehExkVT8SgiEf7/uC/PclrPPkLhZqGgCTjd0VWLo6xMqA==}
     engines: {node: '>=18'}
     cpu: [x64]
     os: [win32]
@@ -801,8 +847,11 @@ packages:
   '@types/mdurl@2.0.0':
     resolution: {integrity: sha512-RGdgjQUZba5p6QEFAVx2OGb8rQDL/cPRG7GiedRzMcJ1tYnUANBncjbSB1NRGwbvjcPeikRABz2nshyPk1bhWg==}
 
-  '@types/node@22.19.13':
-    resolution: {integrity: sha512-akNQMv0wW5uyRpD2v2IEyRSZiR+BeGuoB6L310EgGObO44HSMNT8z1xzio28V8qOrgYaopIDNA18YgdXd+qTiw==}
+  '@types/node@24.12.0':
+    resolution: {integrity: sha512-GYDxsZi3ChgmckRT9HPU0WEhKLP08ev/Yfcq2AstjrDASOYCSXeyjDsHg4v5t4jOj7cyDX3vmprafKlWIG9MXQ==}
+
+  '@types/node@25.3.5':
+    resolution: {integrity: sha512-oX8xrhvpiyRCQkG1MFchB09f+cXftgIXb3a7UUa4Y3wpmZPw5tyZGTLWhlESOLq1Rq6oDlc8npVU2/9xiCuXMA==}
 
   '@types/responselike@1.0.3':
     resolution: {integrity: sha512-H/+L+UkTV33uf49PH5pCAUBVPNj2nDBXTN+qS1dOwyyg24l3CcicicCA7ca+HMvJBZcFgl5r8e+RR6elsb4Lyw==}
@@ -996,8 +1045,8 @@ packages:
   devlop@1.1.0:
     resolution: {integrity: sha512-RWmIqhcFf1lRYBvNmr7qTNuyCt/7/ns2jbpp1+PalgE/rDQcBT0fioSMUpJ93irlUhC5hrg4cYqe6U+0ImW0rA==}
 
-  electron@36.9.5:
-    resolution: {integrity: sha512-1UCss2IqxqujSzg/2jkRjuiT3G+EEXgd6UKB5kUekwQW1LJ6d4QCr8YItfC3Rr9VIGRDJ29eOERmnRNO1Eh+NA==}
+  electron@40.8.0:
+    resolution: {integrity: sha512-WoPq0Nr9Yx3g7T6VnJXdwa/rr2+VRyH3a+K+ezfMKBlf6WjxE/LmhMQabKbb6yjm9RbZhJBRcYyoLph421O2mQ==}
     engines: {node: '>= 12.20.55'}
     hasBin: true
 
@@ -1031,8 +1080,8 @@ packages:
     engines: {node: '>=12'}
     hasBin: true
 
-  esbuild@0.25.12:
-    resolution: {integrity: sha512-bbPBYYrtZbkt6Os6FiTLCTFxvq4tt3JKall1vRwshA3fdVztsLAatFaZobhkBC8/BrPetoa0oksYoKXoG4ryJg==}
+  esbuild@0.27.3:
+    resolution: {integrity: sha512-8VwMnyGCONIs6cWue2IdpHxHnAjzxnw2Zr7MkVxB2vjmQ2ivqGFb4LEG3SMnv0Gb2F/G/2yA8zUaiL1gywDCCg==}
     engines: {node: '>=18'}
     hasBin: true
 
@@ -1321,8 +1370,11 @@ packages:
     engines: {node: '>=14.17'}
     hasBin: true
 
-  undici-types@6.21.0:
-    resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==}
+  undici-types@7.16.0:
+    resolution: {integrity: sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==}
+
+  undici-types@7.18.2:
+    resolution: {integrity: sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w==}
 
   unist-util-is@6.0.0:
     resolution: {integrity: sha512-2qCTHimwdxLfz+YzdGfkqNlH0tLi9xjTnHddPmJwtIG9MGsdbutfTc4P+haPD7l7Cjxf/WZj+we5qfVPvvxfYw==}
@@ -1655,148 +1707,148 @@ snapshots:
   '@esbuild/aix-ppc64@0.21.5':
     optional: true
 
-  '@esbuild/aix-ppc64@0.25.12':
+  '@esbuild/aix-ppc64@0.27.3':
     optional: true
 
   '@esbuild/android-arm64@0.21.5':
     optional: true
 
-  '@esbuild/android-arm64@0.25.12':
+  '@esbuild/android-arm64@0.27.3':
     optional: true
 
   '@esbuild/android-arm@0.21.5':
     optional: true
 
-  '@esbuild/android-arm@0.25.12':
+  '@esbuild/android-arm@0.27.3':
     optional: true
 
   '@esbuild/android-x64@0.21.5':
     optional: true
 
-  '@esbuild/android-x64@0.25.12':
+  '@esbuild/android-x64@0.27.3':
     optional: true
 
   '@esbuild/darwin-arm64@0.21.5':
     optional: true
 
-  '@esbuild/darwin-arm64@0.25.12':
+  '@esbuild/darwin-arm64@0.27.3':
     optional: true
 
   '@esbuild/darwin-x64@0.21.5':
     optional: true
 
-  '@esbuild/darwin-x64@0.25.12':
+  '@esbuild/darwin-x64@0.27.3':
     optional: true
 
   '@esbuild/freebsd-arm64@0.21.5':
     optional: true
 
-  '@esbuild/freebsd-arm64@0.25.12':
+  '@esbuild/freebsd-arm64@0.27.3':
     optional: true
 
   '@esbuild/freebsd-x64@0.21.5':
     optional: true
 
-  '@esbuild/freebsd-x64@0.25.12':
+  '@esbuild/freebsd-x64@0.27.3':
     optional: true
 
   '@esbuild/linux-arm64@0.21.5':
     optional: true
 
-  '@esbuild/linux-arm64@0.25.12':
+  '@esbuild/linux-arm64@0.27.3':
     optional: true
 
   '@esbuild/linux-arm@0.21.5':
     optional: true
 
-  '@esbuild/linux-arm@0.25.12':
+  '@esbuild/linux-arm@0.27.3':
     optional: true
 
   '@esbuild/linux-ia32@0.21.5':
     optional: true
 
-  '@esbuild/linux-ia32@0.25.12':
+  '@esbuild/linux-ia32@0.27.3':
     optional: true
 
   '@esbuild/linux-loong64@0.21.5':
     optional: true
 
-  '@esbuild/linux-loong64@0.25.12':
+  '@esbuild/linux-loong64@0.27.3':
     optional: true
 
   '@esbuild/linux-mips64el@0.21.5':
     optional: true
 
-  '@esbuild/linux-mips64el@0.25.12':
+  '@esbuild/linux-mips64el@0.27.3':
     optional: true
 
   '@esbuild/linux-ppc64@0.21.5':
     optional: true
 
-  '@esbuild/linux-ppc64@0.25.12':
+  '@esbuild/linux-ppc64@0.27.3':
     optional: true
 
   '@esbuild/linux-riscv64@0.21.5':
     optional: true
 
-  '@esbuild/linux-riscv64@0.25.12':
+  '@esbuild/linux-riscv64@0.27.3':
     optional: true
 
   '@esbuild/linux-s390x@0.21.5':
     optional: true
 
-  '@esbuild/linux-s390x@0.25.12':
+  '@esbuild/linux-s390x@0.27.3':
     optional: true
 
   '@esbuild/linux-x64@0.21.5':
     optional: true
 
-  '@esbuild/linux-x64@0.25.12':
+  '@esbuild/linux-x64@0.27.3':
     optional: true
 
-  '@esbuild/netbsd-arm64@0.25.12':
+  '@esbuild/netbsd-arm64@0.27.3':
     optional: true
 
   '@esbuild/netbsd-x64@0.21.5':
     optional: true
 
-  '@esbuild/netbsd-x64@0.25.12':
+  '@esbuild/netbsd-x64@0.27.3':
     optional: true
 
-  '@esbuild/openbsd-arm64@0.25.12':
+  '@esbuild/openbsd-arm64@0.27.3':
     optional: true
 
   '@esbuild/openbsd-x64@0.21.5':
     optional: true
 
-  '@esbuild/openbsd-x64@0.25.12':
+  '@esbuild/openbsd-x64@0.27.3':
     optional: true
 
-  '@esbuild/openharmony-arm64@0.25.12':
+  '@esbuild/openharmony-arm64@0.27.3':
     optional: true
 
   '@esbuild/sunos-x64@0.21.5':
     optional: true
 
-  '@esbuild/sunos-x64@0.25.12':
+  '@esbuild/sunos-x64@0.27.3':
     optional: true
 
   '@esbuild/win32-arm64@0.21.5':
     optional: true
 
-  '@esbuild/win32-arm64@0.25.12':
+  '@esbuild/win32-arm64@0.27.3':
     optional: true
 
   '@esbuild/win32-ia32@0.21.5':
     optional: true
 
-  '@esbuild/win32-ia32@0.25.12':
+  '@esbuild/win32-ia32@0.27.3':
     optional: true
 
   '@esbuild/win32-x64@0.21.5':
     optional: true
 
-  '@esbuild/win32-x64@0.25.12':
+  '@esbuild/win32-x64@0.27.3':
     optional: true
 
   '@iconify-json/simple-icons@1.2.29':
@@ -1956,7 +2008,7 @@ snapshots:
     dependencies:
       '@types/http-cache-semantics': 4.2.0
       '@types/keyv': 3.1.4
-      '@types/node': 22.19.13
+      '@types/node': 25.3.5
       '@types/responselike': 1.0.3
 
   '@types/estree@1.0.6': {}
@@ -1969,7 +2021,7 @@ snapshots:
 
   '@types/keyv@3.1.4':
     dependencies:
-      '@types/node': 22.19.13
+      '@types/node': 25.3.5
 
   '@types/linkify-it@5.0.0': {}
 
@@ -1984,13 +2036,17 @@ snapshots:
 
   '@types/mdurl@2.0.0': {}
 
-  '@types/node@22.19.13':
+  '@types/node@24.12.0':
     dependencies:
-      undici-types: 6.21.0
+      undici-types: 7.16.0
+
+  '@types/node@25.3.5':
+    dependencies:
+      undici-types: 7.18.2
 
   '@types/responselike@1.0.3':
     dependencies:
-      '@types/node': 22.19.13
+      '@types/node': 25.3.5
 
   '@types/unist@3.0.3': {}
 
@@ -1998,14 +2054,14 @@ snapshots:
 
   '@types/yauzl@2.10.3':
     dependencies:
-      '@types/node': 22.19.13
+      '@types/node': 25.3.5
     optional: true
 
   '@ungap/structured-clone@1.3.0': {}
 
-  '@vitejs/plugin-vue@5.2.3(vite@5.4.14(@types/node@22.19.13))(vue@3.5.29(typescript@5.9.3))':
+  '@vitejs/plugin-vue@5.2.3(vite@5.4.14(@types/node@25.3.5))(vue@3.5.29(typescript@5.9.3))':
     dependencies:
-      vite: 5.4.14(@types/node@22.19.13)
+      vite: 5.4.14(@types/node@25.3.5)
       vue: 3.5.29(typescript@5.9.3)
 
   '@vue/compiler-core@3.5.29':
@@ -2195,10 +2251,10 @@ snapshots:
     dependencies:
       dequal: 2.0.3
 
-  electron@36.9.5:
+  electron@40.8.0:
     dependencies:
       '@electron/get': 2.0.3
-      '@types/node': 22.19.13
+      '@types/node': 24.12.0
       extract-zip: 2.0.1
     transitivePeerDependencies:
       - supports-color
@@ -2248,34 +2304,34 @@ snapshots:
       '@esbuild/win32-ia32': 0.21.5
       '@esbuild/win32-x64': 0.21.5
 
-  esbuild@0.25.12:
+  esbuild@0.27.3:
     optionalDependencies:
-      '@esbuild/aix-ppc64': 0.25.12
-      '@esbuild/android-arm': 0.25.12
-      '@esbuild/android-arm64': 0.25.12
-      '@esbuild/android-x64': 0.25.12
-      '@esbuild/darwin-arm64': 0.25.12
-      '@esbuild/darwin-x64': 0.25.12
-      '@esbuild/freebsd-arm64': 0.25.12
-      '@esbuild/freebsd-x64': 0.25.12
-      '@esbuild/linux-arm': 0.25.12
-      '@esbuild/linux-arm64': 0.25.12
-      '@esbuild/linux-ia32': 0.25.12
-      '@esbuild/linux-loong64': 0.25.12
-      '@esbuild/linux-mips64el': 0.25.12
-      '@esbuild/linux-ppc64': 0.25.12
-      '@esbuild/linux-riscv64': 0.25.12
-      '@esbuild/linux-s390x': 0.25.12
-      '@esbuild/linux-x64': 0.25.12
-      '@esbuild/netbsd-arm64': 0.25.12
-      '@esbuild/netbsd-x64': 0.25.12
-      '@esbuild/openbsd-arm64': 0.25.12
-      '@esbuild/openbsd-x64': 0.25.12
-      '@esbuild/openharmony-arm64': 0.25.12
-      '@esbuild/sunos-x64': 0.25.12
-      '@esbuild/win32-arm64': 0.25.12
-      '@esbuild/win32-ia32': 0.25.12
-      '@esbuild/win32-x64': 0.25.12
+      '@esbuild/aix-ppc64': 0.27.3
+      '@esbuild/android-arm': 0.27.3
+      '@esbuild/android-arm64': 0.27.3
+      '@esbuild/android-x64': 0.27.3
+      '@esbuild/darwin-arm64': 0.27.3
+      '@esbuild/darwin-x64': 0.27.3
+      '@esbuild/freebsd-arm64': 0.27.3
+      '@esbuild/freebsd-x64': 0.27.3
+      '@esbuild/linux-arm': 0.27.3
+      '@esbuild/linux-arm64': 0.27.3
+      '@esbuild/linux-ia32': 0.27.3
+      '@esbuild/linux-loong64': 0.27.3
+      '@esbuild/linux-mips64el': 0.27.3
+      '@esbuild/linux-ppc64': 0.27.3
+      '@esbuild/linux-riscv64': 0.27.3
+      '@esbuild/linux-s390x': 0.27.3
+      '@esbuild/linux-x64': 0.27.3
+      '@esbuild/netbsd-arm64': 0.27.3
+      '@esbuild/netbsd-x64': 0.27.3
+      '@esbuild/openbsd-arm64': 0.27.3
+      '@esbuild/openbsd-x64': 0.27.3
+      '@esbuild/openharmony-arm64': 0.27.3
+      '@esbuild/sunos-x64': 0.27.3
+      '@esbuild/win32-arm64': 0.27.3
+      '@esbuild/win32-ia32': 0.27.3
+      '@esbuild/win32-x64': 0.27.3
 
   escape-string-regexp@4.0.0:
     optional: true
@@ -2609,7 +2665,9 @@ snapshots:
 
   typescript@5.9.3: {}
 
-  undici-types@6.21.0: {}
+  undici-types@7.16.0: {}
+
+  undici-types@7.18.2: {}
 
   unist-util-is@6.0.0:
     dependencies:
@@ -2646,16 +2704,16 @@ snapshots:
       '@types/unist': 3.0.3
       vfile-message: 4.0.2
 
-  vite@5.4.14(@types/node@22.19.13):
+  vite@5.4.14(@types/node@25.3.5):
     dependencies:
       esbuild: 0.21.5
       postcss: 8.5.6
       rollup: 4.36.0
     optionalDependencies:
-      '@types/node': 22.19.13
+      '@types/node': 25.3.5
       fsevents: 2.3.3
 
-  vitepress@1.6.4(@algolia/client-search@5.21.0)(@types/node@22.19.13)(postcss@8.5.6)(search-insights@2.17.3)(typescript@5.9.3):
+  vitepress@1.6.4(@algolia/client-search@5.21.0)(@types/node@25.3.5)(postcss@8.5.6)(search-insights@2.17.3)(typescript@5.9.3):
     dependencies:
       '@docsearch/css': 3.8.2
       '@docsearch/js': 3.8.2(@algolia/client-search@5.21.0)(search-insights@2.17.3)
@@ -2664,7 +2722,7 @@ snapshots:
       '@shikijs/transformers': 2.5.0
       '@shikijs/types': 2.5.0
       '@types/markdown-it': 14.1.2
-      '@vitejs/plugin-vue': 5.2.3(vite@5.4.14(@types/node@22.19.13))(vue@3.5.29(typescript@5.9.3))
+      '@vitejs/plugin-vue': 5.2.3(vite@5.4.14(@types/node@25.3.5))(vue@3.5.29(typescript@5.9.3))
       '@vue/devtools-api': 7.7.2
       '@vue/shared': 3.5.29
       '@vueuse/core': 12.8.2(typescript@5.9.3)
@@ -2673,7 +2731,7 @@ snapshots:
       mark.js: 8.11.1
       minisearch: 7.1.2
       shiki: 2.5.0
-      vite: 5.4.14(@types/node@22.19.13)
+      vite: 5.4.14(@types/node@25.3.5)
       vue: 3.5.29(typescript@5.9.3)
     optionalDependencies:
       postcss: 8.5.6
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 457ac3bc..48d0d009 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -1,6 +1,7 @@
 packages:
   - docs
   - examples/**
+  - packages/*
   - '!**/test/**'
 
 catalog:
@@ -14,8 +15,9 @@ catalog:
   '@codemirror/view': ^6.39.15
   '@microsoft/fast-element': ^2.0.1
   '@microsoft/fast-html': 1.0.0-alpha.38
-  electron: ^36.3.1
-  esbuild: ^0.25.0
+  '@types/node': ^25.3.5
+  electron: ^40.8.0
+  esbuild: ^0.27.3
   tslib: ^2.8.0
   typescript: ^5.9.3
   vitepress: ^1.6.4
diff --git a/xtask/Cargo.toml b/xtask/Cargo.toml
index dbc28f15..3254a7ea 100644
--- a/xtask/Cargo.toml
+++ b/xtask/Cargo.toml
@@ -7,6 +7,10 @@ publish = false
 [dependencies]
 console = { workspace = true }
 ctrlc = { workspace = true }
+serde_json = { workspace = true }
+
+[dev-dependencies]
+tempfile = { workspace = true }
 
 [target.'cfg(unix)'.dependencies]
 libc = { workspace = true }
diff --git a/xtask/src/main.rs b/xtask/src/main.rs
index 933123bb..47d07789 100644
--- a/xtask/src/main.rs
+++ b/xtask/src/main.rs
@@ -3,6 +3,7 @@ mod build_wasm;
 mod dev;
 mod process;
 mod util;
+mod version;
 
 use std::process::ExitCode;
 use util::{ensure_cargo_install, ensure_rustup_component, run_command, workspace_root};
@@ -52,6 +53,10 @@ fn main() -> ExitCode {
             let app = args.get(2).map(|s| s.as_str());
             dev::run(app)
         }
+        Some("version") => {
+            let ver = args.get(2).map(|s| s.as_str());
+            version::run(ver)
+        }
         _ => usage(),
     }
 }
@@ -70,7 +75,8 @@ fn usage() -> ExitCode {
            build-wasm  Build WASM playground module\n  \
            docs    Build the documentation site\n  \
            bench <name> [-- <criterion args>]  Run benchmarks for a target crate (parser, handler, protocol, expressions, state, all)\n  \
-           dev <app>  Run example app in dev mode (server + client watch concurrently)"
+           dev <app>  Run example app in dev mode (server + client watch concurrently)\n  \
+           version <semver>  Update version across all Cargo.toml and package.json files"
     );
     ExitCode::SUCCESS
 }
diff --git a/xtask/src/version.rs b/xtask/src/version.rs
new file mode 100644
index 00000000..46b0f070
--- /dev/null
+++ b/xtask/src/version.rs
@@ -0,0 +1,271 @@
+//! Atomic version bumping across all Cargo.toml and package.json files.
+
+use std::fs;
+use std::path::{Path, PathBuf};
+use std::process::ExitCode;
+
+/// Validate a semver string (basic check: major.minor.patch).
+fn is_valid_semver(version: &str) -> bool {
+    let parts: Vec<&str> = version.split('.').collect();
+    if parts.len() != 3 {
+        return false;
+    }
+    parts.iter().all(|p| p.parse::<u64>().is_ok())
+}
+
+/// Update `version = "..."` in workspace.package section of root Cargo.toml.
+fn update_cargo_workspace_version(root: &Path, version: &str) -> Result<(), String> {
+    let cargo_path = root.join("Cargo.toml");
+    let content =
+        fs::read_to_string(&cargo_path).map_err(|e| format!("Failed to read Cargo.toml: {e}"))?;
+
+    let mut result = String::with_capacity(content.len());
+    let mut in_workspace_package = false;
+    let mut updated = false;
+
+    for line in content.lines() {
+        let trimmed = line.trim();
+
+        if trimmed == "[workspace.package]" {
+            in_workspace_package = true;
+        } else if trimmed.starts_with('[') {
+            in_workspace_package = false;
+        }
+
+        if in_workspace_package && trimmed.starts_with("version") && trimmed.contains('=') {
+            result.push_str(&format!("version = \"{version}\"\n"));
+            updated = true;
+        } else {
+            result.push_str(line);
+            result.push('\n');
+        }
+    }
+
+    if !updated {
+        return Err("Could not find version in [workspace.package]".to_string());
+    }
+
+    fs::write(&cargo_path, result).map_err(|e| format!("Failed to write Cargo.toml: {e}"))?;
+    Ok(())
+}
+
+/// Update version in a package.json file. Also updates optionalDependencies
+/// that reference @microsoft/webui-* packages.
+fn update_package_json(path: &Path, version: &str) -> Result<bool, String> {
+    let content = match fs::read_to_string(path) {
+        Ok(c) => c,
+        Err(_) => return Ok(false),
+    };
+
+    let mut value: serde_json::Value = serde_json::from_str(&content)
+        .map_err(|e| format!("Invalid JSON in {}: {e}", path.display()))?;
+
+    let obj = value
+        .as_object_mut()
+        .ok_or_else(|| format!("{} is not a JSON object", path.display()))?;
+
+    // Update top-level version
+    if obj.contains_key("version") {
+        obj.insert(
+            "version".to_string(),
+            serde_json::Value::String(version.to_string()),
+        );
+    }
+
+    // Update optionalDependencies for @microsoft/webui-* packages
+    // Skip workspace: protocol values (pnpm resolves them at publish time)
+    if let Some(deps) = obj.get_mut("optionalDependencies") {
+        if let Some(deps_obj) = deps.as_object_mut() {
+            for (key, val) in deps_obj.iter_mut() {
+                if key.starts_with("@microsoft/webui") {
+                    let current = val.as_str().unwrap_or_default();
+                    if !current.starts_with("workspace:") {
+                        *val = serde_json::Value::String(version.to_string());
+                    }
+                }
+            }
+        }
+    }
+
+    let updated = serde_json::to_string_pretty(&value)
+        .map_err(|e| format!("Failed to serialize {}: {e}", path.display()))?;
+
+    fs::write(path, format!("{updated}\n"))
+        .map_err(|e| format!("Failed to write {}: {e}", path.display()))?;
+
+    Ok(true)
+}
+
+/// Find all package.json files under `packages/`.
+fn find_package_jsons(root: &Path) -> Vec<PathBuf> {
+    let packages_dir = root.join("packages");
+    let mut results = Vec::new();
+
+    if !packages_dir.exists() {
+        return results;
+    }
+
+    let mut stack = vec![packages_dir];
+    while let Some(dir) = stack.pop() {
+        let entries = match fs::read_dir(&dir) {
+            Ok(e) => e,
+            Err(_) => continue,
+        };
+        for entry in entries.flatten() {
+            let path = entry.path();
+            if path.is_dir() {
+                let name = entry.file_name();
+                if name == "node_modules" || name == ".git" {
+                    continue;
+                }
+                stack.push(path);
+            } else if path.file_name().is_some_and(|n| n == "package.json") {
+                results.push(path);
+            }
+        }
+    }
+
+    results
+}
+
+pub fn run(version: Option<&str>) -> ExitCode {
+    let Some(version) = version else {
+        eprintln!(
+            "  {} Usage: cargo xtask version <semver>",
+            console::style("✘").red().bold()
+        );
+        eprintln!("  Example: cargo xtask version 0.2.0");
+        return ExitCode::FAILURE;
+    };
+
+    if !is_valid_semver(version) {
+        eprintln!(
+            "  {} Invalid semver: {version}. Expected format: major.minor.patch",
+            console::style("✘").red().bold()
+        );
+        return ExitCode::FAILURE;
+    }
+
+    eprintln!(
+        "\n  {} Updating all versions to {}\n",
+        console::style("⚡").cyan().bold(),
+        console::style(version).bold()
+    );
+
+    // 1. Update workspace Cargo.toml
+    let root = std::env::current_dir().unwrap_or_default();
+
+    if let Err(e) = update_cargo_workspace_version(&root, version) {
+        eprintln!("  {} {e}", console::style("✘").red().bold());
+        return ExitCode::FAILURE;
+    }
+    eprintln!("  {} Cargo.toml (workspace)", console::style("✔").green());
+
+    // 2. Update all package.json files under packages/
+    let package_jsons = find_package_jsons(&root);
+    let mut count = 0;
+    for pkg_path in &package_jsons {
+        match update_package_json(pkg_path, version) {
+            Ok(true) => {
+                let relative = pkg_path.strip_prefix(&root).unwrap_or(pkg_path).display();
+                eprintln!("  {} {relative}", console::style("✔").green());
+                count += 1;
+            }
+            Ok(false) => {}
+            Err(e) => {
+                eprintln!("  {} {e}", console::style("✘").red().bold());
+                return ExitCode::FAILURE;
+            }
+        }
+    }
+
+    eprintln!(
+        "\n  {} Updated {} file{}\n",
+        console::style("✨").green(),
+        console::style(1 + count).bold(),
+        if count == 0 { "" } else { "s" }
+    );
+
+    ExitCode::SUCCESS
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn test_valid_semver() {
+        assert!(is_valid_semver("0.1.0"));
+        assert!(is_valid_semver("1.0.0"));
+        assert!(is_valid_semver("12.34.56"));
+    }
+
+    #[test]
+    fn test_invalid_semver() {
+        assert!(!is_valid_semver(""));
+        assert!(!is_valid_semver("1.0"));
+        assert!(!is_valid_semver("1.0.0.0"));
+        assert!(!is_valid_semver("abc"));
+        assert!(!is_valid_semver("1.0.beta"));
+        assert!(!is_valid_semver("v1.0.0"));
+    }
+
+    #[test]
+    fn test_update_package_json_version() {
+        let dir = tempfile::TempDir::new().unwrap();
+        let pkg = dir.path().join("package.json");
+        fs::write(&pkg, r#"{"name":"test","version":"0.0.1"}"#).unwrap();
+
+        update_package_json(&pkg, "1.2.3").unwrap();
+
+        let content = fs::read_to_string(&pkg).unwrap();
+        let val: serde_json::Value = serde_json::from_str(&content).unwrap();
+        assert_eq!(val["version"], "1.2.3");
+    }
+
+    #[test]
+    fn test_update_package_json_optional_deps() {
+        let dir = tempfile::TempDir::new().unwrap();
+        let pkg = dir.path().join("package.json");
+        fs::write(
+            &pkg,
+            r#"{"name":"test","version":"0.0.1","optionalDependencies":{"@microsoft/webui-darwin-arm64":"0.0.1","unrelated-pkg":"3.0.0"}}"#,
+        )
+        .unwrap();
+
+        update_package_json(&pkg, "2.0.0").unwrap();
+
+        let content = fs::read_to_string(&pkg).unwrap();
+        let val: serde_json::Value = serde_json::from_str(&content).unwrap();
+        assert_eq!(val["version"], "2.0.0");
+        assert_eq!(
+            val["optionalDependencies"]["@microsoft/webui-darwin-arm64"],
+            "2.0.0"
+        );
+        // Non-webui deps should be untouched
+        assert_eq!(val["optionalDependencies"]["unrelated-pkg"], "3.0.0");
+    }
+
+    #[test]
+    fn test_update_package_json_missing_file() {
+        let dir = tempfile::TempDir::new().unwrap();
+        let result = update_package_json(&dir.path().join("nope.json"), "1.0.0");
+        assert!(matches!(result, Ok(false)));
+    }
+
+    #[test]
+    fn test_update_cargo_workspace_version() {
+        let dir = tempfile::TempDir::new().unwrap();
+        fs::write(
+            dir.path().join("Cargo.toml"),
+            "[workspace]\nmembers = []\n\n[workspace.package]\nversion = \"0.1.0\"\nedition = \"2021\"\n",
+        )
+        .unwrap();
+
+        update_cargo_workspace_version(dir.path(), "3.0.0").unwrap();
+
+        let content = fs::read_to_string(dir.path().join("Cargo.toml")).unwrap();
+        assert!(content.contains("version = \"3.0.0\""));
+        assert!(content.contains("edition = \"2021\""));
+    }
+}