[jackmisner]

Version bump to 0.3.3. The tag v0.3.3 is already pushed, so the npm publish runs from the tag rather than from this merge.

What 0.3.3 ships to consumers

Compared against the 0.3.2 tarball on npm:

• Smaller bundles. The module-scope defaults are now provably pure, so a bundler can drop them. One imported function from the root entry costs ~300 bytes instead of ~1,350 on esbuild, ~302 instead of ~994 on Rolldown, and a webpack require consumer drops from 1,109 to 516 bytes (perf: make the module-scope defaults provably pure (1,347 → 303 bytes for one import) #42).
• "sideEffects": false is declared, guarded by an import-purity probe in CI (chore: declare sideEffects: false and guard the claim in CI #40). Measured, it saves a consumer nothing today — it is there to be true.
• README guidance on what a CommonJS consumer of the root entry pays and that only a static import fixes it; await import() does not (docs: what a CommonJS consumer pays for the root entry, and what fixes it #41).
• Build moved to tsup 9 (chore(deps-dev): bump tsup from 8.5.1 to 9.0.0 #38) — runtime output was byte-identical, declarations reshuffled cosmetically.

No public API change: 73 exports, none added or removed, no type changes, DEFAULT_CONFIG JSON and key order identical to 0.3.2, hence a patch.

Published files grow 268 bytes at the root and shrink 13 at /server.

Not shipped to consumers

The CI additions behind this — the package-export check (#39), the import-side-effect probe and the bundle-size budget — are all in scripts/ and workflows, which files excludes from the tarball.