[codec][P0] Publish-blockers: Node-runnable artifact + networks barrel + release.yml + Rust coverage

[ignromanov]

Re-audit 2026-05-29 (PR #7). Must clear before the first non-yanked npm publish (Phase 3). Not merge blockers.

• B2 (P0) — published artifact is non-Node-runnable: build runs wasm-pack --target bundler; pkg/void_layer_codec.js + dist/index.js do import * as wasm from "./void_layer_codec_bg.wasm" → ERR_UNKNOWN_FILE_EXTENSION in plain Node ESM (the AC-9 Node-only target). A build:nodejs script exists but is unwired into the published flow.
• (P1) networks barrel: packages/networks/src/index.ts eagerly re-exports ./wagmi.js, which hard-imports viem (declared an OPTIONAL peerDep) → import { CHAINS } from '@void-layer/networks' crashes when viem is absent. Make the wagmi re-export lazy/subpath.
• (P1) release.yml: workflow_dispatch-only; runs pnpm changeset publish with no prior changeset version (so it ignores accumulated changesets) and no --locked; npm Trusted Publisher / auth (PF-4) unwired.
• (P1) Rust coverage gate: Constitution X 80% gate (vitest.config.ts) measures only the 328-LOC TS shim; the 4283-LOC Rust crate has no coverage measurement or gate.

Source: 43-agent audit + completeness critic.

[ignromanov]

Status after PR #7 merge (15ad9cf, 2026-05-29). All P0/P1 sub-items verified still open on main — not resolved by merge: build still uses wasm-pack --target bundler (build:nodejs exists but unwired); packages/networks/src/index.ts still eagerly re-exports ./wagmi.js → viem (optional peer); release.yml still runs pnpm changeset publish with no prior changeset version and no --locked; Rust crate still has no coverage gate. This is the active Phase-3 publish-blocker set.

[ignromanov]

Session 2026-05-30 (kai-cto) — B2 done; 3 sub-items remain.

• B2 (P0) Node-runnable artifact — DONE (local branch 056-phase3-b2-node-artifact, 913e241+d652420, not yet pushed). build:nodejs wired into published build+files+exports via a node export condition (Node-target pkg-node); bundler pkg/ retained on import for future vl/app cutover. Shared wire logic extracted to src/wire.ts (single source — eliminates DoS-guard drift between entries). Acceptance: pnpm test:pack packs the tarball + imports it in plain Node ESM, round-trips. Iris PASS, gzip 79,264/81,920.
• networks barrel (P1) — pending (A3): make ./wagmi.js re-export lazy/subpath so importing @void-layer/networks doesn't hard-import viem.
• release.yml (P1) — pending (A4): changeset version before publish, --frozen-lockfile, Trusted Publisher (PF-4) auth.
• Rust coverage gate (P1) — pending (A5): cargo-llvm-cov + Constitution X 80% + codecov flags.

Plan: ops/specs/056-void-layer-codec-extraction/plan-phase3.md.