chore: migrate panll off npm onto Deno (standards#253 step)

Eliminate package.json + package-lock.json. All build orchestration
now flows through deno.json tasks using npm: specifiers cached by
`deno install`.

Resolves the lockfile-drift root cause that band-aided in panll#62
(workflow switched npm ci -> npm install --no-audit --no-fund). With
package.json removed, the drift class disappears entirely.

Changes:
- deno.json: add nodeModulesDir=auto; tailwindcss + rescript +
  @rescript/core + @rescript/runtime promoted to deno imports; tasks
  invoke them via deno run -A --allow-scripts=npm:<pkg> npm:<pkg>@ver.
  Pinned-version trailing-slash forms (npm:/pkg@VER/) keep the
  res.js subpath imports URL-resolvable.
- .github/workflows/build-validation.yml: drop actions/setup-node;
  npm ci/npm run res:build replaced with deno install + deno task
  res:build; drop stale src-tauri/ manifest-path (Gossamer migration
  completed previously); rust gate now cargo check / cargo test --lib
  at workspace root. Linux deps step renamed Tauri -> Gossamer.
- .github/workflows/e2e.yml: replace `npx rescript build` with
  `deno task res:build` (3 jobs).
- Delete package.json + package-lock.json (no .npmrc was present).
- deno.lock auto-tidies: packageJson block removed, workspace.
  dependencies absorbs the four formerly-package.json deps.

Verified locally:
- `deno install`           OK (77 npm packages resolved)
- `deno task res:build`    OK (.res.js outputs produced, warnings only)
- `deno task bundle`       OK (public/app.bundle.js 5.6MB)
- `deno task css:build`    OK (public/styles.css 81KB)
- `deno task test`         2545 passed / 21 failed — IDENTICAL to main
                           (failures are pre-existing, unrelated)
- `cargo check --lib`      OK
- `deno cache scripts/bundle.ts` OK

Tailwind decision: kept via `npm:tailwindcss@^3.4.19` specifier as a
transitional choice. No fully deno-native drop-in worth the swap right
now (windicss/unocss have semantic divergences from the existing
classes). Worth a follow-up issue under standards#253 for a future
tailwind -> deno-native swap.

Refs:
- standards#253 (estate npm->Deno umbrella)
- panll#62 (band-aid superseded — `npm install --no-audit --no-fund`
  no longer needed)
- session_2026_05_30_snifs_build_mode_arc (lockfile drift origin)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/build-validation.yml

@@ -20,17 +20,12 @@ jobs:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - name: Setup Node.js
-        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v4.4.0
-        with:
-          node-version: "20"
-
       - name: Setup Deno
         uses: denoland/setup-deno@667a34cdef165d8d2b2e98dde39547c9daac7282 # v2
         with:
           deno-version: "2.x"
 
-      - name: Install Linux dependencies for Tauri
+      - name: Install Linux dependencies for Gossamer
         run: |
           sudo apt-get update
           sudo apt-get install -y \
@@ -40,29 +35,20 @@ jobs:
             librsvg2-dev \
             patchelf
 
-      - name: Install npm dependencies
-        # `npm ci` requires package-lock.json to be a complete resolution
-        # of package.json. The committed lockfile is incomplete: tailwindcss's
-        # nested deps (chokidar wants picomatch@^2.3.1 at the top level)
-        # are missing entries, so `npm ci` refuses with "Missing: picomatch@2.3.2
-        # from lock file". `npm install` is non-strict and regenerates the
-        # missing entries in-place during CI, unblocking the gate without
-        # committing a touched lockfile. The real fix is the npm→Deno
-        # migration tracked in hyperpolymath/standards#253; this is a
-        # band-aid to keep CI green until then.
-        run: npm install --no-audit --no-fund
+      - name: Warm Deno cache (npm + jsr specifiers)
+        run: deno install
 
       - name: ReScript build gate
-        run: npx --no-install rescript build
+        run: deno task res:build
 
       - name: Deno test gate
         run: deno task test
 
       - name: Rust cargo check gate
-        run: cargo check --manifest-path src-tauri/Cargo.toml
+        run: cargo check
 
       - name: Rust test gate
-        run: cargo test --manifest-path src-tauri/Cargo.toml -- --test-threads=1
+        run: cargo test --lib -- --test-threads=1
 
       - name: Setup Rust toolchain for PCC
         uses: dtolnay/rust-toolchain@4be9e76fd7c4901c61fb841f559994984270fce7 # stable
@@ -74,4 +60,3 @@ jobs:
 
       - name: Panel wiring verification gate
         run: ./tools/pcc/target/release/panll panel verify --repo-root .
-

.github/workflows/e2e.yml

@@ -46,10 +46,10 @@ jobs:
           deno-version: v2.x
 
       - name: Install dependencies
-        run: deno install --node-modules-dir=auto
+        run: deno install
 
       - name: Build ReScript
-        run: npx rescript build || echo "ReScript build attempted"
+        run: deno task res:build || echo "ReScript build attempted"
 
       - name: Run E2E tests
         run: deno test tests/e2e_*.js tests/cross_panel_integration_test.js tests/update_integration_test.js --allow-read --allow-env
@@ -69,10 +69,10 @@ jobs:
           deno-version: v2.x
 
       - name: Install dependencies
-        run: deno install --node-modules-dir=auto
+        run: deno install
 
       - name: Build ReScript
-        run: npx rescript build || echo "ReScript build attempted"
+        run: deno task res:build || echo "ReScript build attempted"
 
       - name: Run crosscutting aspect tests
         run: deno test tests/*_crosscutting_test.js tests/panelbus_propagation_test.js --allow-read --allow-env
@@ -92,10 +92,10 @@ jobs:
           deno-version: v2.x
 
       - name: Install dependencies
-        run: deno install --node-modules-dir=auto
+        run: deno install
 
       - name: Build ReScript
-        run: npx rescript build || echo "ReScript build attempted"
+        run: deno task res:build || echo "ReScript build attempted"
 
       - name: Run benchmarks
         run: deno test tests/*_bench_test.js --allow-read --allow-env 2>&1 | tee /tmp/bench-results.txt

deno.json

@@ -4,16 +4,17 @@
   "license": "AGPL-3.0-or-later",
   "description": "Panel workspace framework — TEA (The Elm Architecture) for ReScript with tiling layout, smart routing, keyboard navigation, undo engine, and security-hardened DOM. Build panel-based UIs for desktop and web.",
   "exports": "./mod.js",
+  "nodeModulesDir": "auto",
   "tasks": {
     "dev": "cargo build && cargo run --bin panll-gossamer & deno task bundle && deno task serve:dev",
     "build": "cargo build --release && deno task bundle && deno task css:build",
     "gossamer:dev": "cargo build && cargo run --bin panll-gossamer & deno task bundle && deno task serve:dev",
     "gossamer:build": "cargo build --release && deno task bundle && deno task css:build",
     "gossamer:run": "cargo run --bin panll-gossamer",
-    "bundle": "DENO_NO_PACKAGE_JSON=1 deno run -A scripts/bundle.ts",
-    "bundle:watch": "DENO_NO_PACKAGE_JSON=1 deno run -A scripts/bundle.ts --watch",
-    "css:build": "deno run -A npm:tailwindcss -i ./src/styles/input.css -o ./public/styles.css --minify",
-    "css:watch": "deno run -A npm:tailwindcss -i ./src/styles/input.css -o ./public/styles.css --watch",
+    "bundle": "deno run -A scripts/bundle.ts",
+    "bundle:watch": "deno run -A scripts/bundle.ts --watch",
+    "css:build": "deno run -A --allow-scripts=npm:tailwindcss npm:tailwindcss@^3.4.19 -i ./src/styles/input.css -o ./public/styles.css --minify",
+    "css:watch": "deno run -A --allow-scripts=npm:tailwindcss npm:tailwindcss@^3.4.19 -i ./src/styles/input.css -o ./public/styles.css --watch",
     "serve:dev": "deno run --allow-net=127.0.0.1:8000 --allow-read=. scripts/dev-server.ts",
     "test": "deno test --no-check --allow-read --allow-env tests/",
     "test:watch": "deno test --no-check --watch --allow-read --allow-env tests/",
@@ -23,16 +24,19 @@
     "lint": "deno lint scripts/",
     "fmt": "deno fmt scripts/",
     "mock:echidna": "deno run --allow-net=127.0.0.1:9000 scripts/mock-echidna.ts",
-    "res:build": "deno run -A npm:rescript build",
-    "res:clean": "deno run -A npm:rescript clean",
-    "res:watch": "deno run -A npm:rescript watch"
+    "res:build": "deno run -A --allow-scripts=npm:rescript npm:rescript@^12.0.0 build",
+    "res:clean": "deno run -A --allow-scripts=npm:rescript npm:rescript@^12.0.0 clean",
+    "res:watch": "deno run -A --allow-scripts=npm:rescript npm:rescript@^12.0.0 watch"
   },
   "imports": {
     "@std/": "jsr:@std/",
     "@gossamer/api": "./src-gossamer/bindings/rescript/src/Gossamer.res.js",
     "rescript": "npm:rescript@^12.0.0",
-    "@rescript/core/": "npm:@rescript/core@1.6.1/",
-    "@rescript/runtime/": "npm:@rescript/runtime@12.2.0/"
+    "@rescript/core": "npm:@rescript/core@^1.6.1",
+    "@rescript/core/": "npm:/@rescript/core@1.6.1/",
+    "@rescript/runtime": "npm:@rescript/runtime@^12.2.0",
+    "@rescript/runtime/": "npm:/@rescript/runtime@12.2.0/",
+    "tailwindcss": "npm:tailwindcss@^3.4.19"
   },
   "publish": {
     "include": [