feat: add @parity/product-sdk-react-renderer ported from @novasamatech/product-react-renderer

[eugypalu]

Dependencies. The three novasama packages are gone:

• @novasamatech/host-api → widget and style types (CustomRendererNode, ColorToken,
  Modifier, …) now come from @parity/truapi
• @novasamatech/host-api-wrapper → the two chat callback types it provided
  (ChatCustomMessageRenderer, ChatCustomMessageRendererParams) are now defined in this
  package, with the same shape — no transport dependency left
• scale-ts → the single runtime use (str.dec) now comes from @parity/truapi/scale

What remains: @parity/truapi (catalog) + react-reconciler as dependencies, react ^19.2
as peer.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​types/​react-reconciler@​0.33.0
	@​types/​react@​19.2.18
	react@​19.2.8
	react-reconciler@​0.33.0

View full report

[github-actions]

📦 Bundle size impact

Comparing 2026-08-05T11:58:43.236Z → 2026-08-05T11:59:44.182Z

	Package	Entry	Bundled before	Bundled after	Δ	Ship gzip Δ	Shake ratio
🟢	@parity/product-sdk-react-renderer	—	—	—	new package	—	—

Thresholds — warn: ≥10% or ≥5.0 KB · fail: ≥20% or ≥15.0 KB (bundled). Percentage only applies once the baseline is ≥ 10 KB.