[goastler]

What changed: each kind of build output now gets its own folder under dist/, its own npm script and its own turbo task. Before, everything was written straight into dist/.

folder	made by	script / turbo task
dist/esm	vite, ESM	build:esm
dist/cjs	vite, CommonJS	build:cjs
dist/types	tsc, .d.ts only	build:types (was typecheck)
dist/tsc	tsc --build	build:tsc
dist/bundle, dist/bundle-webpack	vite / webpack bundles	bundle, bundle:iife, bundle:webpack
dist/native	napi (Rust)	build:native

• build is now just a turbo task that runs build:esm, build:types and build:native.
• Each task caches only its own folder, so running one variant no longer overwrites or invalidates another. Adding a new variant later means one more script, one more turbo task and one more folder.
• main / types / exports in every package point at the new folders.
• The native .node files are no longer committed. build:native makes them: a debug build normally, the fully optimised LTO build when NODE_ENV=production. Building the native packages now needs a Rust toolchain.

Effect: imports work as before, because they go through package exports. Anything that hard-coded a dist/... path has been updated: Dockerfiles, the CLI bundle's native-file copying, locale catalogue lookup, the client-bundle-example deploy path and the locales workflow. Deep imports into dist/ from outside the repo would need updating.

Code that found the repo root or the dev TLS certs by counting ../ from its own file (provider API, client example server, @prosopo/workspace, the self-hosted env script) now starts from its package folder, using a new packageDir helper in @prosopo/util/node. Otherwise it would have looked one folder too low now that builds sit in dist/esm.

Pairs with prosopo/fingerprintjs#12, which makes the same change in the fingerprintjs submodule.

Tests:

• Ran in a clean worktree:
  • turbo run build, all tasks green
  • a second run with every task cached
  • deleted dist/esm and dist/native folders restored from cache
  • build:tsc and build:cjs
  • the CLI, procaptcha and IIFE bundles, and the webpack bundle
  • unit tests for locale, config, user-access-policy, the native packages, procaptcha-bundle and cli
• New unit tests for packageDir; updated the cert-lookup test in client-example-server.
• Updated the i18n backend unit tests for the simpler catalogue path.