fix: resolve remaining advisory, derive version from package.json, te…

.github/workflows/typecheck.yml

@@ -44,3 +44,7 @@ jobs:
         env:
           DATABASE_URL: postgresql://ci:ci@localhost:5432/ci
       - run: npx tsc --noEmit
+      # No database required — the suite covers the chain encoding, the /api/*
+      # perimeter, the schema invariants, and the write-conflict classifier,
+      # all of which are pure or exercised through Hono's request handler.
+      - run: npm test

package.json

@@ -80,5 +80,10 @@
     "vite": "^8.2.0",
     "vite-plugin-singlefile": "^2.3.3",
     "vitest": "^4.1.10"
+  },
+  "pnpm": {
+    "overrides": {
+      "@babel/core": "^7.29.7"
+    }
   }
 }

src/lib/__tests__/version.test.ts

@@ -0,0 +1,19 @@
+// Guards the wiring, not the number. STELE_VERSION is injected by vite's
+// `define` from package.json; if that block is removed or renamed the constant
+// silently becomes undefined and every narrative export ships without
+// provenance. package.json is authoritative because it is what `git tag v*`
+// and release.yml publish against.
+import { describe, expect, it } from 'vitest'
+import { STELE_VERSION } from '../version'
+import pkg from '../../../package.json'
+
+describe('STELE_VERSION', () => {
+	it('is injected, not undefined', () => {
+		expect(STELE_VERSION).toBeTypeOf('string')
+		expect(STELE_VERSION).toMatch(/^\d+\.\d+\.\d+/)
+	})
+
+	it('matches the version release.yml actually publishes', () => {
+		expect(STELE_VERSION).toBe(pkg.version)
+	})
+})

src/lib/version.ts

@@ -1 +1,8 @@
-export const STELE_VERSION = '1.0.0'
+// Injected by vite from package.json — see the `define` block in vite.config.ts.
+// Do not replace this with a literal. The previous hand-maintained constant
+// missed the 1.1.0 release and stamped stale provenance into every narrative
+// export, which is the one artifact where a wrong version actively misleads
+// rather than merely being cosmetic.
+declare const __STELE_VERSION__: string
+
+export const STELE_VERSION = __STELE_VERSION__

stele-core/package.json

@@ -6,7 +6,7 @@
   "scripts": {
     "dev": "tsx watch index.ts",
     "start": "node --import tsx/esm index.ts",
-    "test": "echo \"Error: no test specified\" && exit 1"
+    "test": "node --import tsx/esm --test \"test/*.test.ts\""
   },
   "keywords": [],
   "author": "Mazze LeCzzare",