[cowboyd]

What does this PR do?

Add framework integrations, demos, and acceptance tests on top of the @bomb.sh/dom core layer. All framework dependencies and support code live in separate example packages, with JSX configuration local to the examples.

• Exercise actual Preact 11 rendering, asynchronous updates across documents, keyed identity, refs, events, cross-document portals, and cleanup.
• Add React reconciler, Solid universal-renderer, and Crank generic-renderer adapters over the same DOM tree.
• Add real Lit/custom-element and Svelte compiler/client-runtime fixtures using persistent document-specific Node VM contexts.
• Add framework documentation, capability coverage, and workspace test commands and lockfile entries.

This layer changes no DOM implementation or core tests. The combined stack preserves the original PR's complete file tree.

Scope and limitations

These are tested example integrations rather than a claim of complete browser-renderer compatibility. Lit and Svelte load separately bundled browser runtimes inside persistent Node VM contexts; ordinary fully typed browser imports remain unproven. The context keeps asynchronous work associated with its document without swapping process globals.

Hydration, broader framework APIs, and richer namespace/property support remain unfinished. Framework code is not exported by @bomb.sh/dom.

Validation

• Frozen-lockfile installation succeeded.
• pnpm test: 248 tests passed, including 21 framework tests, 216 DOM tests, and 11 existing workspace tests.
• All seven framework/support example packages passed TypeScript checking; the core build passed.
• pnpm format:check passed.
• pnpm lint passed with 78 existing workspace warnings.

Type of change

• Bug fix
• Feature
• Refactor (no behavior change)
• Documentation
• Performance improvement
• Tests
• Chore (dependencies, CI, tooling)

Checklist

• All tests pass (pnpm test)
• Files are formatted (pnpm format)
• I have added/updated tests for my changes (if applicable)
• I have added a changeset

AI-generated code disclosure

• This PR includes AI-generated code

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​esbuild@​0.27.7
	npm/​@​types/​react-reconciler@​0.34.1
	npm/​@​types/​react@​19.3.0
	npm/​@​b9g/​crank@​0.7.12
	npm/​react@​19.3.1
	npm/​lit@​3.3.3
	npm/​svelte@​5.57.2
	npm/​solid-js@​1.9.17
	npm/​preact@​11.0.1
	npm/​react-reconciler@​0.34.0

View full report