Emit real ESM output and drop dead pnpm build config

package.json

@@ -9,7 +9,7 @@
   },
   "main": "lib/commonjs/index.js",
   "module": "lib/module/index.js",
-  "types": "lib/typescript/index.d.ts",
+  "types": "lib/typescript/commonjs/index.d.ts",
   "react-native": "src/index.ts",
   "source": "src/index.ts",
   "files": [
@@ -21,9 +21,14 @@
   ],
   "exports": {
     ".": {
-      "import": "./lib/module/index.js",
-      "require": "./lib/commonjs/index.js",
-      "types": "./lib/typescript/index.d.ts"
+      "import": {
+        "types": "./lib/typescript/module/index.d.ts",
+        "default": "./lib/module/index.js"
+      },
+      "require": {
+        "types": "./lib/typescript/commonjs/index.d.ts",
+        "default": "./lib/commonjs/index.js"
+      }
     }
   },
   "private": false,
@@ -115,8 +120,18 @@
     "source": "src",
     "output": "lib",
     "targets": [
-      "commonjs",
-      "module",
+      [
+        "commonjs",
+        {
+          "esm": true
+        }
+      ],
+      [
+        "module",
+        {
+          "esm": true
+        }
+      ],
       [
         "typescript",
         {

pnpm-workspace.yaml

@@ -2,12 +2,10 @@
 # See: https://pnpm.io/supply-chain-security
 
 # 1. Block lifecycle scripts by default
-# Only explicitly approved packages can run postinstall scripts.
+# pnpm runs no dependency's postinstall until it is listed here with an
+# explicit true/false verdict, and fails the install while any are unrecorded.
 # Use `pnpm approve-builds` to manage this list.
-onlyBuiltDependencies: []
-
-# Every dependency that wants a lifecycle script must get an explicit verdict
-# here; pnpm fails the install until one is recorded.
+#
 # unrs-resolver arrives via jest-resolve. Its postinstall only links a prebuilt
 # napi binary, and pnpm already installs the right platform binding as an
 # optional dep, so the test suite resolves fine with the script denied.