fix(pkg): drop sideEffects:false, it broke the published bundle

Bun's bundler applies the package's own `sideEffects: false` while
building the package itself; since src/index.ts only re-exports, every
module looked removable and the 0.1.10 dist was tree-shaken to an export
stub naming bindings it never declared — every consumer crashed on
import. Same root cause as ts-collect 0.4.1/0.4.2.

prepublishOnly now also runs scripts/smoke-dist.ts, which imports the
built dist and round-trips a PNG, so an unimportable dist fails the
publish instead of reaching npm.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: glennmichael123

packages/ts-images/package.json

@@ -1,7 +1,6 @@
 {
   "name": "ts-images",
   "type": "module",
-  "sideEffects": false,
   "version": "0.1.10",
   "description": "Modern image optimizations & manipulations.",
   "author": "Chris Breuer <chris@stacksjs.org>",
@@ -61,7 +60,8 @@
     "lint:fix": "bunx --bun pickier . --fix",
     "fresh": "bunx rimraf node_modules/ bun.lock && bun i",
     "changelog": "bunx changelogen --output CHANGELOG.md",
-    "prepublishOnly": "bun --bun run build && bun run compile:all && bun run zip:all",
+    "prepublishOnly": "bun --bun run build && bun run smoke && bun run compile:all && bun run zip:all",
+    "smoke": "bun --bun scripts/smoke-dist.ts",
     "release": "bun run changelog && bunx bumpp package.json --all",
     "release:patch": "bun --bun run changelog && bunx --bun bumpx patch --recursive --yes",
     "test": "bun test",

packages/ts-images/scripts/smoke-dist.ts

@@ -0,0 +1,37 @@
+// Guards against publishing a broken bundle: ts-images 0.1.10 shipped a dist
+// that Bun's bundler tree-shook down to an export stub with no declarations
+// (the package's own `sideEffects: false` made every re-exporting module look
+// removable), so any consumer crashed on import — the same failure that hit
+// ts-collect 0.4.1/0.4.2. This imports the built dist entry and checks the
+// public API; prepublishOnly runs it so an unimportable dist can't be published.
+function fail(message: string): never {
+  console.error(`smoke-dist: ${message}`)
+  process.exit(1)
+}
+
+const distEntry = new URL('../dist/src/index.js', import.meta.url).href
+
+let mod: Record<string, unknown>
+try {
+  mod = await import(distEntry)
+}
+catch (error) {
+  fail(`dist/src/index.js failed to import: ${error instanceof Error ? error.message : error}`)
+}
+
+for (const name of ['decode', 'encode', 'getMetadata', 'resize', 'processImage', 'process', 'createImageData']) {
+  if (typeof mod[name] !== 'function')
+    fail(`expected dist entry to export function \`${name}\`, got ${typeof mod[name]}`)
+}
+
+const { createImageData, encode, decode } = mod as unknown as typeof import('../src/index')
+const img = createImageData(4, 4)
+img.data.fill(128)
+const png = await encode(img, 'png', {})
+if (!(png instanceof Uint8Array) || png.byteLength === 0)
+  fail('encode(png) returned no bytes')
+const roundTrip = await decode(png)
+if (roundTrip.width !== 4 || roundTrip.height !== 4)
+  fail(`decode(encode(img)) returned ${roundTrip.width}x${roundTrip.height}, expected 4x4`)
+
+console.log('smoke-dist: dist imports and png round-trips')