The image build keeps an `npm audit --audit-level=moderate` gate. New
advisories (19, 2 critical) made every node that builds GitWorkshop fail
and retry on each reconcile pass, holding the lifecycle lock and blocking
installs (seen on archy-x250-pa3 since at least 2026-10-24).
- window.nostrdb.js 0.7.0 drops @contextvm/sdk and its zod 3 / MCP SDK
chain; its filters() is now query() (src/services/cache.ts).
- The unused direct zod dependency moves to 4.6.7.
- postcss-selector-parser is overridden to 7.1.x under Tailwind 3; the
generated CSS is byte-identical.
- npm audit fix for the rest.
A clean install audits at zero; tsc, eslint, 152 unit tests, the subpath
build and the full image build pass, and the image serves the app.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
ssmithxandClaude Opus 5.5
fb67039203