Umbrella for workstream B of encryption4all/postguard#247.
The July 2026 audit's dominant bug class is SDK↔client drift: the Outlook addon is a full pg-js major behind (#125 there), the examples that feed docs.postguard.eu teach the v1 API, and envelope handling is duplicated with asymmetries across clients. A workspace monorepo makes this class impossible by construction: internal consumers depend on workspace:*, so any pg-js change type-checks and tests every client in the same PR.
Target layout: packages/pg-js (published to npm unchanged) + apps/website + apps/outlook-addon + apps/tb-addon + examples/. Imports are history-preserving; open issues transfer here; source repos archive with a pointer README. Children attached as sub-issues, in dependency order.
Umbrella for workstream B of encryption4all/postguard#247.
The July 2026 audit's dominant bug class is SDK↔client drift: the Outlook addon is a full pg-js major behind (#125 there), the examples that feed docs.postguard.eu teach the v1 API, and envelope handling is duplicated with asymmetries across clients. A workspace monorepo makes this class impossible by construction: internal consumers depend on
workspace:*, so any pg-js change type-checks and tests every client in the same PR.Target layout:
packages/pg-js(published to npm unchanged) +apps/website+apps/outlook-addon+apps/tb-addon+examples/. Imports are history-preserving; open issues transfer here; source repos archive with a pointer README. Children attached as sub-issues, in dependency order.