v5.40.1

Released 2026-10-29.

All 33 packages (@warlock.js/* and create-warlock) move to 5.40.1 together;
keep every family package on the same version. No breaking changes. This patch makes
create-warlock --stack=web work again and cleans up the design-system files it writes.

---

1. Breaking changes

• None.

---

2. New web projects install their features again (create-warlock, core)

• Since 5.35, create-warlock --stack=web (or any scaffold with web, tailwind, shadcn,
  design-system or sitemap) failed in the feature step: warlock add loads
  warlock.config.ts first, the web starter's config imports @warlock.js/web, and that
  package was only installed by the feature step itself. Every feature, even the database, was
  reported as failed and the project was left without them.
• A web scaffold now lists @warlock.js/web in package.json from the start, and
  warlock add continues with a warning when the project config cannot load yet, so
  npx warlock add web also works on a project in that state.
• CI now scaffolds and typechecks a web project as well as the API-only one.

---

3. Design-system files pass the app's lint (create-warlock, core)

• The controls and hooks that warlock add design-system writes into src/web/design-system/
  failed the scaffolded Oxlint config, so warlock dev reported 13 lint errors in a fresh web
  app. They now pass, and a spec keeps it that way.

---

4. Upgrade notes

1. Update the family. Run npx warlock update.
2. A web app scaffolded on 5.35–5.40.0 without its features: run
   npx warlock add web (then any other features you chose, such as tailwind,
   design-system or your database) after updating.
3. Lint errors in src/web/design-system/: rerun npx warlock add design-system to get the
   fixed files, or keep yours if you edited them.