@wenathlan/devthink 2.0.2 → 2.0.9

package/CHANGELOG.md

@@ -1,5 +1,91 @@
 # DevThink release notes
 
+## 2.0.9 — the web workbench lock answers the mirror, the frozen install rides the ladder
+
+### Fixed
+
+| Area | Change |
+| --- | --- |
+| The web workbench lockfile | The dependency commit of 2.0.8 moved the root manifest, the web mirror and the root lockfile but left the web workbench's own pnpm lockfile answering the old specifiers — the security lane's pnpm audit and the ladder's frozen install (pnpm --dir web install --frozen-lockfile) refused the mismatch between web/pnpm-lock.yaml (^2.5.12, ^8.2.2) and the web manifest (^2.5.13, ^8.3.0) and the 2.0.8 ladder died at the install step. The lockfile regenerates under the pinned pnpm of the web manifest with both resolutions (@biomejs/biome 2.5.13 with its platform binaries, vite 8.3.0), the frozen install answers clean again, and the web typecheck rides green over the refreshed tree. |
+
+## 2.0.8 — the dependency gate rides the ladder, the registry freshness answers the release
+
+### Changed
+
+| Area | Change |
+| --- | --- |
+| The dependency gate recovery | The release ladder refused the 2.0.7 source at the dependency gate (a registry check the ladder runs on every release: two non-breaking updates were waiting) and the tag the auto-tag step had already cut stood over a source the ladder refused — the dependency ladder answers with the direct-commit flow the doctrine prescribes for pure dependency motion (no product version for a dependency bump) and the release recovery rides the version the failed tag obliges. The non-breaking updates land first: @biomejs/biome answers 2.5.13 across the root, the web mirror and the schema reference, and vite answers 8.3.0 across the root and the mirror with the frozen lockfile resolving both; vitest 5.0.0 waits behind the breaking boundary the ladder skips without an explicit allow. |
+| The loop record | The 2.0.4 through 2.0.7 waves each closed one ladder gap the merge left open — the restamp protocol (the gate artifact family the candidate chain records), the engine silent scratch (the static site scan of the bridge suite walks web/ and refuses every non static residue), the lint scope (the biome gate reads the ignore file and lints the product tree, not the runner residue of the maven, nuget and smoke lanes) and now the dependency freshness — every gap diagnosed from the failed run's log, fixed at the root, and validated by the local battery before the next push. |
+
+## 2.0.7 — the lint gate reads the product tree, the runner residue answers the ignore family
+
+### Fixed
+
+| Area | Change |
+| --- | --- |
+| The lint gate scope | The runner residue of the release ladder and the publish lanes joins the ignore family: target/ (the maven package lane copies the nine dist bundles into target/classes beside the jar), obj/ and validation/ (the nuget pack lane's dotnet output), smokeprofile/ (the native messaging smoke install), mavenrelease/ and nuget/ (the publish lanes' staging directories) never enter the repository — the biome gate reads the ignore file and lints the product tree only. The 2.0.6 ladder died at the lint step on exactly that residue: the biome run checked 372 files (the 361 product sources beside the eleven generated workspace files) and answered two errors and four hundred warnings the dist bundle copies and the dotnet assets carried — the gate now sees the 361 sources with zero errors the local battery always answered, and the gitignore entries keep every runner workspace clean whatever the lanes materialize beside the checkout. |
+
+## 2.0.6 — the silent scratch leaves the tree, the static scan stays honest
+
+### Fixed
+
+| Area | Change |
+| --- | --- |
+| The engine silent scratch | The engine suite of the server battery points its tableless persistence scratch OUTSIDE the repository tree: the lazy prisma client resolves a mkdtemp scratch under the system temp directory (the same pattern the persistence, the cli and the e2e suites already wore) instead of web/prisma/engine-test-silent.db, and the afterAll sweep removes it — the bridge suite's static site scan walks web/ during the parallel battery and refuses every non static file type it finds, so the sqlite scratch the engine wrote into the prisma home raced the scan and failed the container smoke of the release ladder (the 2.0.5 build died at the builder's npm test on exactly that file); the working tree now stays clean whatever the battery leaves behind, and the 2.0.2-era docker failures that carried the same signature answer the same root cause. |
+
+## 2.0.5 — the restamp the ladder demanded, the release candidate protocol closed
+
+### Fixed
+
+| Area | Change |
+| --- | --- |
+| The release metadata restamp | Every version bump now restamps the gate artifact family the candidate chain records before the commit rides: the api freeze pins (the caps and schema hashes the freeze gate verifies against the fresh build), the permission baseline (the versioned set the diff gate trusts without git history), the pool coverage record, the matrix verification (every gate cell re-runs green), the readiness review (the go decision the release stamps), and the soak and wcag sweeps — the 2.0.3 and 2.0.4 ladders failed on the drift the unstamped artifacts carried (the vitest battery compares the recorded release against the package version and refuses the mismatch, the matrix gate re-runs the freeze and the diff against the fresh dist and refuses the stale pins). The restamp is the candidate protocol the validate chain always prescribed; the release lane now rides it. |
+| The metadata sync family | The release sync propagates the version into the java and csharp envelope carriers and the dockerfile stamps (the 2.0.4 wiring), and the zero-drift gate of the publishing pipeline watches them — this release rides the same family with every artifact restamped in the same pass, so the ladder the CI runs reads a tree where no recorded release disagrees with the package version. |
+
+## 2.0.4 — the ladder completes its gates, the consumer rides the ci, the envelopes answer the lowercase name
+
+### Changed
+
+| Area | Change |
+| --- | --- |
+| The gate ladder | The verify lane returns the five gates the validate:candidate chain always defined but the ci never ran: the soak sweep of the retention window (no drift across the sweep), the wcag accessibility sweep over every ui surface, the release metadata lockstep check of the version catalog, the root typecheck (tsc over the sources and the test suite) and the biome lint gate — the ladder now exercises the whole local contract on every push, not only at candidate time. |
+| The consumer smoke | The ci gains the consumer lane the regra 59 doctrine demands (the gateway lineage consumer job): pack the distpackage into a tarball, install it inside a fresh npm project, run the consumer smoke against the installed surface (the server subpath, the http spine, the persistence path behind the flag) and clean the temporary home whatever the verdict — the lane exists to catch exactly the defect the staged manifest carried. |
+| The container best practices | The publishghcr lane answers dockle beside trivy: the image the scan build loads goes through the cis-di checks (exit-level fatal, a real gate, nothing skipped) before the multi-arch push, with the accept-key list derived from the actual runtime surface of the dockerfile (the env family, the build args, the smoke boot and the oci labels) — trivy answers what lives inside the image, dockle answers how the image was built. |
+| The registry guards and assets | The maven lane carries the conclusion guard the incident of 2.0.3 exposed (a release that fails the ladder never fires a publish — the guard the nuget lane already wore, now byte-identical in the maven source detector), and the maven and nuget lanes attach the registry artifacts to the github release with the canonical catalog names (the pom, the jar, the two zips, the nupkg) so the release page mirrors what the registries actually host. |
+| The envelope casing and the lockstep family | The envelope carriers answer the lowercase file name doctrine: DevThink.java and DevThinkCli.cs become devthink.java and devthinkcli.cs (the technical name lowercase, the class names keep the presentation name, the java class drops the public modifier so the file name rule holds — the registry lanes never compile the carriers). The release sync family adopts the two carriers and the dockerfile version stamps: a package.json bump now propagates to the java version constant, the csharp version constant and every dockerfile default in the same pass, and the zero-drift gate of the publishing pipeline watches all of them — the 2.0.3 release stamped those carriers by hand because no gate watched them. |
+| The staged manifest | The distpackage manifest carries the runtime dependency set of the root package: the server subpath resolves @prisma/client and the libsql adapter at the first database touch, so a consumer that exercises the persistence path finds every runtime dependency installed with the package — the 2.0.3 tarball shipped an empty dependency set and broke every consumer import. |
+
+### Fixed
+
+| Area | Change |
+| --- | --- |
+| The consumer imports | The consumer smoke reads the server subpath the published surface actually owns (the root barrel never exported the gateway family — @wenathlan/devthink/server is the entry the library contract documents), and the smoke covers the persistence path behind its environment flag against the installed tarball. |
+| The library modes typecheck | The vitest options form of the library modes suite answers the signature the types declare (the timeout rides the options object, not a fourth argument) — the whole-project typecheck the ladder now gates was carrying that error since the merge. |
+| The pipeline expectations | The release job list the publishing pipeline asserts answers the auto-tag job the 2.0.3 release added (the ladder order the workflow actually declares), and the workflow check drops the stale node-version pin expectation the lanes replaced with the .nvmrc baseline. |
+
+## 2.0.3 — the prisma context home, the boundary completed, the release lane of the family
+
+### Changed
+
+| Area | Change |
+| --- | --- |
+| The prisma context home | The whole prisma context answers the web workbench the doctrine owns: the repository root carries no prisma folder anymore — the local sqlite home of the gateway lineage moves inside web/ (web/prisma/, the marker keeps the directory present so a fresh checkout resolves the local file urls without a bootstrap step), the schema stays canonical at web/schema.prisma, and every default url (prisma.config.ts, database.ts, the scaffolded templates of server.ts, the .env example, the engine silent test database) resolves file:./web/prisma/devthink.db against the new home. The scaffold creates web/prisma/ beside web/schema.prisma for the consumer, the gitignore tracks the db artifacts at their new path, and the doc trees (the gateway console page, the type documentation) draw the folder the consumer will actually see. |
+| The boundary completed | The interior audit of the root surface closes the interface-versus-logic doctrine the 2.0.2 release opened: the ansi render family of ui.ts (banner, box, status bar, spinner, the format helpers — pure terminal drawing, zero business logic) merges into web/terminal-ui.tsx where the design of the whole project lives, the command family imports the drawing from the design room, and the legacy ui.ts dissolves; the glyph and destination vocabulary of workspace.ts crosses the same way (every consumer already lived in the web pages). The root keeps the logic the library owns and the web owns the drawing — the direction the doctrine pinned: the web imports the root, the root never imports the web except through the design room contract the terminal entry already carried. |
+| The release lane of the family | The release workflow learns the auto-tag doctrine of the saddle line: a push to main that touches package.json and CHANGELOG.md resolves the bumped version against the latest existing tag, extracts the changelog section of the version (a version without a section refuses to ship — the release body contract), cuts the tag, archives the tagged tree at zip -9 under the family asset name and creates the release — the whole pipeline fires without a manual step, and the maintenance ladder that pre-cuts its own tags finds nothing left to cut (the version equals the tag, the detector skips). |
+| The asset lanes | The four asset lanes of the rich distribution (the extension build, the container, the desktop binaries and the mobile shells) restore the workflow_run dual trigger the grand merge dropped: the release event the githubrelease job publishes with the repository token never reaches a workflow (the anti-recursion suppression the family documented), so each lane now listens to the completed DevThink Release workflow with the tag and conclusion guards, resolves the release tag from the live release when the event carries none, checks the tagged source out and attaches its artifacts on the automatic path — the sixteen assets of the 2.0.2 release needed a manual dispatch, the 2.0.3 chain assembles itself. |
+| The publish lanes | The five registry lanes gain the conclusion guard (a failed release never fires a publish), the event-scoped concurrency groups (a push and its workflow_run twin run side by side, no lane cancels its sibling), the rubygems lane reads the node baseline from the .nvmrc the engines pin, and the npmjs lane degrades gracefully without NPM_TOKEN the way the family contract always stated (the token rides the environment, never an if condition). |
+| The pin family | One version per action across the whole workflow corpus: setup-java answers v6.0.1 everywhere (the mobile and maven lanes carried v5.7.0, the verify lane v6.0.1), deploy-pages answers v5.0.1, the codeql action family answers v4.38.0 (the bare v4 the scorecard lane carried), and the runtime setups pin what they run (dotnet 10.0.112, ruby 3.4.10, the rust toolchain 1.120) — the mutable latest and stable the lanes carried never build the same artifact twice. |
+| The envelope family | The metadata lockstep closes its gaps: DevThink.java and DevThinkCli.cs join the version stamps at 2.0.3 (they answered 2.0.0 since the merge — no gate watched them), the Dockerfile carries the version in every default the build args ride (the five places the 2.0.0 defaults stamped), the .npmrc answers the family engine policy (engine-strict false — the registry install of a consumer with a different toolchain never fails), and the extension remnants of the release machinery (the artifact catalog of release.mjs, the maven and nuget identities of pack.ts, the release notes tests) answer the devthink names the channels actually publish. The dead configs of the extension folder (the zero-byte netlify manifest, the vercel manifest, the capacitor json with the appId of the old identity) leave the tree — zero references, the mobile lane derives the real capacitor config from web/capacitor.config.ts. |
+| The container hardening | The Dockerfile adopts the apt retry of the saddle standard: the update and the install retry together (five attempts, the mirror drift the family documented never fails a build), the comments of the pinned build stages drop the emulation talk the $BUILDPLATFORM pin retired, and the web netlify baseline answers the node line the .nvmrc pins (26.8.2 — the 22 the manifest carried predates the merge). |
+
+### Fixed
+
+| Area | Change |
+| --- | --- |
+| The typecheck of the root | The exactOptionalPropertyTypes discipline reaches the gateway pairing client: the context builder never assigns an explicit undefined to an optional property (the pre-generate error the whole-project typecheck carried since the merge, invisible to the build tsconfig the declaration emit rides) — and the biome config loses its duplicate suspicious block (the second key shadowed the first, the linter answered one error on its own config file). |
+| The maintenance lane | The propose job of the maintenance ladder answers a real run every firing: outside its window it reports the no-op as a notice instead of skipping — the board carries green runs, never skipped jobs (the nothing-skipped doctrine). The cache retention of the cleaner and the maintenance sweep align on the family baseline (6h — the drift the two lanes carried). |
+| The secrets check | The scanner gate answers its own rename: checksecrets.ts (the lowercase-no-hyphen naming doctrine) with every reference — the package script, the Dockerfile step and the internal file list — reading the same module. |
+
 ## 2.0.2 — the design room boundary, the freeze resync, the latent red of the dissolved envelope
 
 ### Changed

package/bridge.d.ts

@@ -428,7 +428,7 @@ import type { jsonrpcframe } from "./types.js";
 /** The native bridge protocol major version this build speaks: the handshake reports it, the upgrade path keeps compatibility for exactly one major version, and a host that speaks another major version degrades instead of breaking the run. */
 export declare const nativebridgeprotocolmajor = 1;
 /** The installer version the installer stamps into the install state; the upgrade path compares it so a manifest written by an older installer reports before it overwrites. */
-export declare const nativehostinstallerversion: "2.0.2";
+export declare const nativehostinstallerversion: "2.0.9";
 /** The generated extension id placeholder the host manifest template carries: the installer replaces the token with the extension id of the installed build, so the template never pins an identity the user did not generate. */
 export declare const nativehostidplaceholder = "__generated_extension_id__";
 /** The native messaging directory name of the chromium user profile: the installer writes the host manifest beside it, never into a system directory without the explicit flag. */

package/bridge.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.2 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.9 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.2";
+var packageversion = "2.0.9";
 var protocolmajor = 2;
 
 // types.ts

package/bun.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.2 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.9 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.2";
+var packageversion = "2.0.9";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 
@@ -43621,7 +43621,7 @@ function vsixvsixmanifest(fields, entries) {
     <Description xml:space="preserve">${fields.description}</Description>
     <Properties>
       <Property Id="Microsoft.VisualStudio.Code.Engine" Value="${fields.engines.vscode ?? ""}" />
-      <Property Id="Microsoft.VisualStudio.Services.Links.Source" Value="https://github.com/wenathlan/extension" />
+      <Property Id="Microsoft.VisualStudio.Services.Links.Source" Value="https://github.com/wenathlan/devthink" />
       <Property Id="Microsoft.VisualStudio.Services.License" Value="GPL-3.0-only" />
       <Property Id="devthink.telemetry" Value="off" />
       <Property Id="devthink.relayurldefault" Value="" />
@@ -43812,12 +43812,12 @@ function mavenattachedartifacts(version) {
 function mavenpackinfo() {
   return {
     groupid: "io.github.wenathlan",
-    artifactid: "extension",
-    name: "Devthink browser extension distribution",
-    description: "The single Devthink maven distribution: every consumption mode \u2014 the library core, the cli, the headless entry and the mcp server \u2014 embedded as jar resources in the one io.github.wenathlan.extension artifact, with the extension zip and the declarations zip attached as classifier artifacts beside it.",
-    url: "https://github.com/wenathlan/extension",
-    scmurl: "https://github.com/wenathlan/extension",
-    scmconnection: "scm:git:https://github.com/wenathlan/extension.git",
+    artifactid: "devthink",
+    name: "DevThink single distribution",
+    description: "The single DevThink maven distribution: every consumption mode \u2014 the library core, the cli, the headless entry and the mcp server \u2014 embedded as jar resources in the one io.github.wenathlan.devthink artifact, with the extension zip and the declarations zip attached as classifier artifacts beside it.",
+    url: "https://github.com/wenathlan/devthink",
+    scmurl: "https://github.com/wenathlan/devthink",
+    scmconnection: "scm:git:https://github.com/wenathlan/devthink.git",
     license: "GPL-3.0-only",
     licenseurl: ""
   };
@@ -43841,7 +43841,7 @@ function mavenpackpomtext(version) {
   const schemalocation = ["http", "s://maven.apache.org/xsd/maven-4.0.0.xsd"].join("");
   const includes = mavenjarresources().map((resource) => `          <include>${resource}</include>`).join("\n");
   const licenseurl = ["http", "s://www.gnu.org/licenses/gpl-3.0.html"].join("");
-  const publishurl = ["http", "s://maven.pkg.github.com/wenathlan/extension"].join("");
+  const publishurl = ["http", "s://maven.pkg.github.com/wenathlan/devthink"].join("");
   return `<?xml version="1.0" encoding="UTF-8"?>
 <project xmlns="${pomnamespace}" xmlns:xsi="${xsinamespace}" xsi:schemaLocation="${pomnamespace} ${schemalocation}">
   <modelVersion>4.0.0</modelVersion>
@@ -43915,9 +43915,9 @@ function nugetframeworktargets() {
 }
 function nugetpackinfo() {
   return {
-    packageid: "extension",
-    projecturl: "https://github.com/wenathlan/extension",
-    repositoryurl: "https://github.com/wenathlan/extension",
+    packageid: "devthink",
+    projecturl: "https://github.com/wenathlan/devthink",
+    repositoryurl: "https://github.com/wenathlan/devthink",
     license: "GPL-3.0-only",
     readme: "README.md",
     description: "Distribution package containing the Devthink library bundles, the cli, headless and mcp entries, the declaration files for ide integration, the browser extension ZIPs and the sample fixtures.",
@@ -43944,7 +43944,7 @@ function containerbuildstages() {
     },
     {
       name: "builder",
-      purpose: "builds every dist target through node tests/build.mjs and runs the deterministic build checks, the vitest suite (the arm64 leg through qemu with the scaled timeouts) and the packageextension verification",
+      purpose: "builds every dist target through node tests/build.mjs and runs the deterministic build checks, the vitest suite (native on both legs through the build platform pin, with the timeout guard a native arm64 build node reads) and the packageextension verification",
       checks: [
         "node tests/build.mjs",
         "node dist/cli.js manifest",

package/caps/background.json

@@ -1,6 +1,6 @@
 {
   "surface": "background",
-  "release": "2.0.2",
+  "release": "2.0.9",
   "protocolmajor": 2,
   "messages": [
     "applyprofile",

package/caps/cli.json

@@ -1,6 +1,6 @@
 {
   "surface": "cli",
-  "release": "2.0.2",
+  "release": "2.0.9",
   "protocolmajor": 2,
   "messages": [
     "commands",

package/caps/library.json

@@ -1,6 +1,6 @@
 {
   "surface": "library",
-  "release": "2.0.2",
+  "release": "2.0.9",
   "protocolmajor": 2,
   "messages": [
     "a11ycapture",

package/caps/mcp.json

@@ -1,6 +1,6 @@
 {
   "surface": "mcp",
-  "release": "2.0.2",
+  "release": "2.0.9",
   "protocolmajor": 2,
   "messages": [
     "browser.a11ytree",

package/caps/pagebridge.json

@@ -1,6 +1,6 @@
 {
   "surface": "pagebridge",
-  "release": "2.0.2",
+  "release": "2.0.9",
   "protocolmajor": 2,
   "messages": [
     "canvasdata",

package/caps/popup.json

@@ -1,6 +1,6 @@
 {
   "surface": "popup",
-  "release": "2.0.2",
+  "release": "2.0.9",
   "protocolmajor": 2,
   "messages": [
     "bridge",

package/caps/sidepanel.json

@@ -1,6 +1,6 @@
 {
   "surface": "sidepanel",
-  "release": "2.0.2",
+  "release": "2.0.9",
   "protocolmajor": 2,
   "messages": [
     "applyprofile",

package/checksums.txt

@@ -1,35 +1,35 @@
-efd012f05692db93532b4dab76af07332ff1ece6df2b8acae3b58261340a09ce  CHANGELOG.md
+06fbcf6ec59efdb705fe2f2aaf49fcd4ab1a2a2a854f0ecc8dee9e9a8666da42  CHANGELOG.md
 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986  LICENSE
 45beaf5c548c643cb2e8b88cebd7a11a2329ca5ad4b9187d6c53ca30fbbdd9bb  README.md
-0b1f81d97087a85c54f7720ab248282a59e767b4dc3139bdeca358e28ca7059f  bridge.d.ts
+91287b5f2b8099a46cbfcfeab9add70761bc923329f3d8ed7e40a6558274dd5c  bridge.d.ts
 491396250f301ebd65093f530bd983a91f41e33b246ae80d2a974a7d7e93aa57  bridge.d.ts.map
-cd908114acbbf28923a241f235ed3bee6c1103aed49a8322f3fb3619da1c0be7  bridge.js
+79bf33b43d6e4a38e3d83148dbc972901cc1de819606dde7618a45d10c8b4304  bridge.js
 9557339c2c57fb58212c3b90e8e5934ddba56066a2537d645e4cb34439fdc2ff  bun.d.ts
 601a75f547bb845b8a81fa59a21d560691561eb17d598acb3fd1f4ac8421e424  bun.d.ts.map
-594d3e71451b0efe71c4589533b19c86875499c615ec73b0c1ad79e318cffd93  bun.js
-55aaea4e39a8648840141d591dc598628a3c77580d8d0c3d4fe4bf6af2e2fe12  caps/background.json
-f76665d25030f55106e7143dfb40efa2db615538b14d455c29864854fafc474f  caps/cli.json
-4f9e4eb7c2a45ec992461d0a39bab9459e09e8e929413d58a1497fa5c2699ba0  caps/library.json
-db8dfc41e455df47756238dd55fcc2d6f7ab332a9c4f079fe683ab2dabd8f5a2  caps/mcp.json
-f0fabfeac083d900404b113e8e561a04909fbd77a2b7814e58943c6da9fa2e16  caps/pagebridge.json
-f7f86c7770b268dd8ea8c738b57dab39f0d4e2e38ec2281ecb2ae9189c79489e  caps/popup.json
-3f284d54e3365ff6269e84e15b6f1f57845a4b70edd1c12d947c6b3a8cf64061  caps/sidepanel.json
+7b4a8458b2d340e49333ea041cede93fdd131d7fbd33df1f0be300bc3affe42b  bun.js
+6a557e7c2c899fe8b3aa625a12a73a234493fc9ddf26ec055914d259041aacc5  caps/background.json
+9957e1fafcb8da0a8d3089cab984f9f66738090c078eaa12a5f7fdd18e683556  caps/cli.json
+cbda3f22a7bc8bce4d953c50dfae8e6de73fb97f08c5abe8d51479d0ead6c69f  caps/library.json
+5fac6fa3a8e81ad14f021c766bb4345060cb859021031be56d2c37e47d35a6cc  caps/mcp.json
+b151543dad4da5e153230de57c9f4b7630ddf56d5affcf1a6246f3c4c88f6022  caps/pagebridge.json
+4baac14487460e58eb4cf71b9ffd6d67a6ee32eda90200d2db67270f7a982581  caps/popup.json
+99109d8c82460cb1c06afd1ba7bd84f1105906777c1fd210fafd276e459fb7e6  caps/sidepanel.json
 d35d001526d77c8f37371a39146587ea6ad86179167d82862284557adcd70f17  cli.d.ts
 f7bb3e1903702366effe6c081837b1060c26479740a808f11e0a08ea85e849c9  cli.d.ts.map
-733705ed49ab5cca8bb1ce7b6aa3c3686ff351f262c0f267d440b3f97277a351  cli.js
+1b28a4de9eb1bb908c2bd9ccad9bddbc97ef16130495e796b5ec78304489bbd1  cli.js
 6d47383663f5efa626bfbc31977bc3df7cfb383725b243ce08057c059234e42f  companion.d.ts
 df25256c8176fc547298c2fb5666bcbf0f01bec284a0dc94f66350f6c29a38be  companion.d.ts.map
-6f5019359d3e8f841ad3d6db36db1105f5ae76257ca39dd3d71bdfc089908b98  companion.js
+80a4a85c62dce3baca15ce3a74a16e146f09f224489ae1f27ec44f160575bff3  companion.js
 85824f4b1603769f1c117b524925f05a42d37f2bcb41e9d4d377e5408615721f  crossbrowser.d.ts
 a7c4cd26ce8402a9ec1d11bd8dab4222d3c73a0e6f84915402c2fd60f8282d95  crossbrowser.d.ts.map
-8067a6b6639abeebf8f2d8e0d32e99c69fbc5d60b7c4be4f0fb559eaa1f6ddb3  crossbrowser.js
+00f49041e1a5a5df9edc184cde055c4917c84f12863e627973902cb674078141  crossbrowser.js
 bc8f0d95430875b0fd8aff5c0744580d3dd07c5a0927aad4f2c54d34b83be016  dashdone.d.ts
 4d7e32ac75985463dd38a5c408e154276c902c1a1a9ba032d610bffc2b89eee5  dashdone.d.ts.map
-eb04d6a05821b025c3147fc084176e6bd7011dd0f6a116c6be0df5a815204392  dashdone.js
+2c84701886845553df74c0d3512ace9ca7c50064735ae79024e454ebad0b52c2  dashdone.js
 fea8d906a8c3b0608a9ae4b622c0b88c78d535ed151aa9db29922d817c387495  deno.d.ts
 3b07bf585688565ff818934d7d38f26c0188fcaf44ddbc8727ad3c76999b826c  deno.d.ts.map
-a135f3d2f941a8c50d21dcbd7eddb6bc2505cd36bc4918cd65ff3a1c430bac74  deno.js
-fa50832fd76fa71fd6eca0a6a974429436edb8cccbe92161ede4090ed0f65aa1  devthink.umd.js
+385f7b4d9c0dc43ee8ffff38e37c2fe0d9c904f5c01b7b4dd880231d1f2a9a1c  deno.js
+187b9ae1907888c9f9a3df4aaf950272a9654b13f06ca58620f052b8296ec075  devthink.umd.js
 d8b6d1f6446da72d359dae978c5495244257dc70660415f8aaad96dd5075e241  fixtures/bun.ts
 702c21459e5d6d8d0b914a86bb6c3646a0be40e132b2d40cc04f2994cfbd1cf3  fixtures/cjs.js
 6bd268717a28a23405e5200264d47bb68aaf9c0d6d911674eaa22477bf19d003  fixtures/deno.ts
@@ -87,42 +87,42 @@ c93c417dbf3a43736845e653598624ee48e79f69bf93d36e3b19655e0a23b792  fixtures/recip
 6b757866f79c4a16098879f7cfffdb85557b7fb6ca4ec7b1c0cd1d1169c3e3c0  gallery.json
 16f6a0cdd78820a257d0fbb501784ed031dcffcdc4b9841d5279c8273e3776f4  hardening.d.ts
 eb153f3fa619ca8f59dd8abb598f33213a98026392854a32a7c305a73688bc95  hardening.d.ts.map
-16731533da50223d29f45e490314a6cc12276d71cc13fbe0486411eda9caeef3  hardening.js
+2f4c8f2239e86f8e3d2308f99d6521a559dc2089d7178a6a7bce6cce4cb8d63d  hardening.js
 2e560159a8c3b121c91d83545e0dcfa03b79399ed052bc23a425b2d355839362  headless.d.ts
 f6a7bced8d6b26f05ca971e70aaa177b8be9fb5a7e25a17ab5f2235a8f9ed590  headless.d.ts.map
-4f46313ddee9a7f1a448adfa0bb62402e5b230d4a6f05589299cf00a6eb6a51d  headless.js
+fd19956d37b1ec2efaf5ff86bf4e01f54534cbcf34da74cbced25824bac30804  headless.js
 7aed8c110caffd11caf27d63b993ad71328851905f4faeea2a8e1442eba8e257  http.d.ts
 b1ab1184756d92fb301a71d5a696ed4cd70bb4953f292002f01930c9e4893024  http.d.ts.map
-11ba65851c45cb71de2c577352ca74a350bed2d0d776f6b212f41d26dc04b666  http.js
-736b9438962b04bbe221f366ec2faf879f98f217eb5d1b08928a1bd4c01639a7  index.cjs
+246116b730c5d826607fb3aee241db0de8e08efbb2d8c125ec9bab074c32e356  http.js
+48d3715deae99c92125e889ae802c890a5166708dff3aa2325e9e8b4e7374e71  index.cjs
 31b2f3e15bb0b8cbef623b438f01bb8424909686424a98dd88366412d063d7ed  index.d.ts
 9398106d8b2277fb1c40892eff062a8cc8e605837d01f191fb783517367860fc  index.d.ts.map
-21f8f05337e19f0043b14b42e3962ae3565d51afe3610d75307466803dccb0f6  index.js
-5f80b12ff3146d11a3ffce8fed38fc5f80d7fdf76aa14c2a6312870f535d4df6  index.neutral.js
-471c8a949f99e16596919ffa50112befa6e2a446d1edc06a3be38b6103bad7fd  manifest.json
+9aedc8dce90c1a7979bd1b21fd9065847474d78f115e767a7be6a06bbb763082  index.js
+2e7c1256f18ec135b04c022b61df06137ba7274ab5c94ed5ef76c4c9ff304db4  index.neutral.js
+c57d825d074141c2eddbdb2b4e8c4a1549d856d5bdb0cee30cb5680b4c059a61  manifest.json
 4a4a38d5c2f25f6e33d7fea853a074d4c82dfe5c721506ca4636b1d65c130f10  mcp.d.ts
 dd22f998da99d77485e863c4e7f1f906bb46dc03ee500efe99a5c09a935f4539  mcp.d.ts.map
-ff00e382c00e16ab31ecab5a970c716e96cefcf64a38f6c57ecd90c189272701  mcp.js
+0ea5cfe7e685fddf62d38383f2c83e1bdbfbab70a18885c292a1953f3063a0d2  mcp.js
 ce98408283eccac2d435ac0e0ceb6bb5456e1eb70edb03a03e347a9f82f99c69  memory.d.ts
 9f4c19494bb1b2260a4d15c4c2dce4d2b3f5da96f07b8fbe9037f9b5fe31c8e1  memory.d.ts.map
-3b8fdd5f39a6773f0ca515d7071f67c3987602d7c9f8c803f34a7b65ca62a74b  memory.js
-547ecdbf3eee3f5ca66b490bfb6d698ef417f96c75eccfd441d180a1156acd1f  nativehost.template.json
-9a8ef0381a69227d08347be279e385a721c845dde5d79e7ad03f8b9ffeb9e725  node.cjs
+c5029a4b9818ab36e90f093124818c5bf7dbba3a5e9ce2b86dc09f5e69a58093  memory.js
+0e6c4db85759f98be8a0d94012a4d6626a69551a827234c782397279b30ae928  nativehost.template.json
+d9732b06e19ebb342d58a9b88b2d81b00e51072c8d765065a5f03a0b3e19d6ae  node.cjs
 705d895c58fe6816958f0fed4bef0a6f79e5fc521ab49d9cf83e0fbcd9d71afe  node.d.ts
 45f4394eca20fc889fe1128059ce20130d26a5ae0d89008a7ca93f0e4d52841b  node.d.ts.map
-92c089431d7763da36d58ac28f30d60d8babbc2577c1851f14442b22920f5834  pack.d.ts
-2007381406dac56e75d041a2f03faed850c1171966616b55068f229d810ca427  pack.d.ts.map
-178447b61f7acbc1275fc79440e739196077a57cef1bf084b6f0fecae9f39c1d  pack.js
-eb2b70dbf7e2cd64ac7017162a902f5a3bfc561df454ebb4778d04ad0a7a4915  package.json
+5ec83bc409bed888ae13ab55d1f329ac630a3cf2f0db0e2414c28324329c055b  pack.d.ts
+619d43a5239d770c3382af3dd57e2588dd067ded81ca8c106d404e6709324a63  pack.d.ts.map
+714eb91dbecc794b777ffe6966eea54bbbee9c43ac9dc72b83a015b1f6b9152e  pack.js
+e4799e3ad2a2ad2f96a16584d84fb3778c8cf0e618d5ecb767b956cd7065f2de  package.json
 e3a2ed944a0bc1ef4943ee250a57e428ce49d781d30de6072571e0bc5d8c0259  policy.d.ts
 8f4fabc57c883e12ac7c7ab280749dc7c2d402c4fce401bef235c5e451b6975a  policy.d.ts.map
-927c5e982f826e6403c4b96c2f57a9c3397c0036c1da28e0bb53e17f47e2225d  policy.js
+bbad719f9944d76f00a67b61e0740413a065bd969153180d4408cbff0b7c53f4  policy.js
 ea621ab35e610fbe8acb8e91f21ed2c74a6b20bba537c5982f31458d6878b90b  progress.d.ts
 33383e690d77faf6f5959846839603079e7f90e1e3dd17cbcc9a4e3fcf1c5641  progress.d.ts.map
-bf48c449ae5673b637ce06fc8de1ceb4d251adc38d84b8cc295db7c09fad7537  progress.js
+6763db0025bbc0075a18c450a4f4388616ecdcc08d49a16b3a44d886350821d7  progress.js
 d2e54016f0cad51928752882d780066ccf2267d383deb2407ea7b2f97dfd26e7  protocol.d.ts
 487f8fc63061cb26cbda7f122409d9952810ba3a76b19d147c98d151d4f45d64  protocol.d.ts.map
-799cd0645e0e420bec5d2cecdf08e00bd14061215565b0d20cd4ab4e96e341a3  protocol.js
+a011dff52eddc4eba496e557605785ba0d191053a62f44ad7ca55461a533ce82  protocol.js
 456c4a26fd65c728f2dcb9e615ec6e4d446d7e4228bfa3f70ce2b17ee3d6a2c2  schemas/audit.schema.json
 ea272aa6bf4df585ae1ca8ca63e36d7ec713c46187f37ed86ff3620a0e8509b2  schemas/capability.schema.json
 6e9d2291dc54f7d01463e5f70c8f0793d952a63f4096d61ee4dbc4bfd6f6b0a0  schemas/envelope.schema.json
@@ -134,9 +134,9 @@ a02073c153d1248638fa3cbb5f0749534382cf262d09671018cdfc538ae74430  schemas/progre
 d0e0365a7641c0127338c14a5318c4591dc598b7d2a36b7b2944219921d1ce4e  schemas/session.schema.json
 5bb7d16534b52ca3a7171178065fb7b283947accd1b616ce89e330eb7a91b82e  schemas/tool.schema.json
 76f61b03cb67ab85b1bfd0f14014ff87ef5689975ab37e7b598ad6cdf837bafd  server.d.ts
-57b4c291fb36447d5c5d3eaa7ccb5118970ba042a68fe66118442031cde7a13f  server.d.ts.map
-09aa1a60a9973a6fddec257177f8ec286a5d1b5246d1fc13d7d58dae81d6e428  server.js
-da2f45bd48b1dbcab3b7d6e4f862d0b9aa8342bb7a9c972893f8df47d9beef54  umd-example.html
+850b93b66b2cbce29044f4c7c5d2dc199d90165de3a531a6cea39813b6dca234  server.d.ts.map
+4d1195ec774710021d7064e230b69a94661255cc13b9a0ed8b9a2f3cebd8e9ec  server.js
+bee076015fa5085226516a83f2295ffe9475773201f523573dd9f814a5519a8d  umd-example.html
 16f66af22e038e4f9328420a0ed0ee34145ca79c938940e8c2e6d232e25a7c09  umd.d.ts
 ac25f7481155ac9321c5a657e7c4a53570bee8b3f63fe3527045260523a494c8  umd.d.ts.map
 58e21373cec5ade3e6698da5b36ecc2bf7e7e2f755c6fb5e3a6605b535b93985  manifest.json key

package/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-/*! devthink 2.0.2 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.9 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // cli.ts
 import { createInterface } from "node:readline/promises";
@@ -569,7 +569,7 @@ function endcall(input) {
 }
 
 // version.ts
-var packageversion = "2.0.2";
+var packageversion = "2.0.9";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/companion.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.2 companion — the optional native host of the native bridge — GPL-3.0-only — built with plain node, no native compiler */
+/*! devthink 2.0.9 companion — the optional native host of the native bridge — GPL-3.0-only — built with plain node, no native compiler */
 
 // companion.ts
 import { createHash, randomBytes } from "node:crypto";
@@ -16,7 +16,7 @@ var nativehosttemplatejson = `{
   "devthinkBanner": "devthink __devthink_version__ native host manifest template \u2014 GPL-3.0-only \u2014 the chromium host manifest of the optional companion process"
 }
 `;
-var companionbuild = "2.0.2";
+var companionbuild = "2.0.9";
 var companionprotocol = 1;
 var companionsurfaces = ["osdialog", "notification"];
 var maxnativemessage = 1024 * 1024;

package/crossbrowser.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.2 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.9 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // crossbrowser.ts
 var browserpolyfillflags = [

package/dashdone.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.2 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.9 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // dashdone.ts
 function dashboardviewerof(input) {

package/deno.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.2 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.9 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.2";
+var packageversion = "2.0.9";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 
@@ -43621,7 +43621,7 @@ function vsixvsixmanifest(fields, entries) {
     <Description xml:space="preserve">${fields.description}</Description>
     <Properties>
       <Property Id="Microsoft.VisualStudio.Code.Engine" Value="${fields.engines.vscode ?? ""}" />
-      <Property Id="Microsoft.VisualStudio.Services.Links.Source" Value="https://github.com/wenathlan/extension" />
+      <Property Id="Microsoft.VisualStudio.Services.Links.Source" Value="https://github.com/wenathlan/devthink" />
       <Property Id="Microsoft.VisualStudio.Services.License" Value="GPL-3.0-only" />
       <Property Id="devthink.telemetry" Value="off" />
       <Property Id="devthink.relayurldefault" Value="" />
@@ -43812,12 +43812,12 @@ function mavenattachedartifacts(version) {
 function mavenpackinfo() {
   return {
     groupid: "io.github.wenathlan",
-    artifactid: "extension",
-    name: "Devthink browser extension distribution",
-    description: "The single Devthink maven distribution: every consumption mode \u2014 the library core, the cli, the headless entry and the mcp server \u2014 embedded as jar resources in the one io.github.wenathlan.extension artifact, with the extension zip and the declarations zip attached as classifier artifacts beside it.",
-    url: "https://github.com/wenathlan/extension",
-    scmurl: "https://github.com/wenathlan/extension",
-    scmconnection: "scm:git:https://github.com/wenathlan/extension.git",
+    artifactid: "devthink",
+    name: "DevThink single distribution",
+    description: "The single DevThink maven distribution: every consumption mode \u2014 the library core, the cli, the headless entry and the mcp server \u2014 embedded as jar resources in the one io.github.wenathlan.devthink artifact, with the extension zip and the declarations zip attached as classifier artifacts beside it.",
+    url: "https://github.com/wenathlan/devthink",
+    scmurl: "https://github.com/wenathlan/devthink",
+    scmconnection: "scm:git:https://github.com/wenathlan/devthink.git",
     license: "GPL-3.0-only",
     licenseurl: ""
   };
@@ -43841,7 +43841,7 @@ function mavenpackpomtext(version) {
   const schemalocation = ["http", "s://maven.apache.org/xsd/maven-4.0.0.xsd"].join("");
   const includes = mavenjarresources().map((resource) => `          <include>${resource}</include>`).join("\n");
   const licenseurl = ["http", "s://www.gnu.org/licenses/gpl-3.0.html"].join("");
-  const publishurl = ["http", "s://maven.pkg.github.com/wenathlan/extension"].join("");
+  const publishurl = ["http", "s://maven.pkg.github.com/wenathlan/devthink"].join("");
   return `<?xml version="1.0" encoding="UTF-8"?>
 <project xmlns="${pomnamespace}" xmlns:xsi="${xsinamespace}" xsi:schemaLocation="${pomnamespace} ${schemalocation}">
   <modelVersion>4.0.0</modelVersion>
@@ -43915,9 +43915,9 @@ function nugetframeworktargets() {
 }
 function nugetpackinfo() {
   return {
-    packageid: "extension",
-    projecturl: "https://github.com/wenathlan/extension",
-    repositoryurl: "https://github.com/wenathlan/extension",
+    packageid: "devthink",
+    projecturl: "https://github.com/wenathlan/devthink",
+    repositoryurl: "https://github.com/wenathlan/devthink",
     license: "GPL-3.0-only",
     readme: "README.md",
     description: "Distribution package containing the Devthink library bundles, the cli, headless and mcp entries, the declaration files for ide integration, the browser extension ZIPs and the sample fixtures.",
@@ -43944,7 +43944,7 @@ function containerbuildstages() {
     },
     {
       name: "builder",
-      purpose: "builds every dist target through node tests/build.mjs and runs the deterministic build checks, the vitest suite (the arm64 leg through qemu with the scaled timeouts) and the packageextension verification",
+      purpose: "builds every dist target through node tests/build.mjs and runs the deterministic build checks, the vitest suite (native on both legs through the build platform pin, with the timeout guard a native arm64 build node reads) and the packageextension verification",
       checks: [
         "node tests/build.mjs",
         "node dist/cli.js manifest",

package/devthink.umd.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.2 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.9 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 (function (root, factory) {
   if (typeof define === "function" && define.amd) { define([], factory); }
   else if (typeof module === "object" && module.exports) { module.exports = factory(); }
@@ -2365,7 +2365,7 @@ __export(umd_exports, {
 module.exports = __toCommonJS(umd_exports);
 
 // version.ts
-var packageversion = "2.0.2";
+var packageversion = "2.0.9";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 
@@ -45985,7 +45985,7 @@ function vsixvsixmanifest(fields, entries) {
     <Description xml:space="preserve">${fields.description}</Description>
     <Properties>
       <Property Id="Microsoft.VisualStudio.Code.Engine" Value="${fields.engines.vscode ?? ""}" />
-      <Property Id="Microsoft.VisualStudio.Services.Links.Source" Value="https://github.com/wenathlan/extension" />
+      <Property Id="Microsoft.VisualStudio.Services.Links.Source" Value="https://github.com/wenathlan/devthink" />
       <Property Id="Microsoft.VisualStudio.Services.License" Value="GPL-3.0-only" />
       <Property Id="devthink.telemetry" Value="off" />
       <Property Id="devthink.relayurldefault" Value="" />
@@ -46176,12 +46176,12 @@ function mavenattachedartifacts(version) {
 function mavenpackinfo() {
   return {
     groupid: "io.github.wenathlan",
-    artifactid: "extension",
-    name: "Devthink browser extension distribution",
-    description: "The single Devthink maven distribution: every consumption mode \u2014 the library core, the cli, the headless entry and the mcp server \u2014 embedded as jar resources in the one io.github.wenathlan.extension artifact, with the extension zip and the declarations zip attached as classifier artifacts beside it.",
-    url: "https://github.com/wenathlan/extension",
-    scmurl: "https://github.com/wenathlan/extension",
-    scmconnection: "scm:git:https://github.com/wenathlan/extension.git",
+    artifactid: "devthink",
+    name: "DevThink single distribution",
+    description: "The single DevThink maven distribution: every consumption mode \u2014 the library core, the cli, the headless entry and the mcp server \u2014 embedded as jar resources in the one io.github.wenathlan.devthink artifact, with the extension zip and the declarations zip attached as classifier artifacts beside it.",
+    url: "https://github.com/wenathlan/devthink",
+    scmurl: "https://github.com/wenathlan/devthink",
+    scmconnection: "scm:git:https://github.com/wenathlan/devthink.git",
     license: "GPL-3.0-only",
     licenseurl: ""
   };
@@ -46205,7 +46205,7 @@ function mavenpackpomtext(version) {
   const schemalocation = ["http", "s://maven.apache.org/xsd/maven-4.0.0.xsd"].join("");
   const includes = mavenjarresources().map((resource) => `          <include>${resource}</include>`).join("\n");
   const licenseurl = ["http", "s://www.gnu.org/licenses/gpl-3.0.html"].join("");
-  const publishurl = ["http", "s://maven.pkg.github.com/wenathlan/extension"].join("");
+  const publishurl = ["http", "s://maven.pkg.github.com/wenathlan/devthink"].join("");
   return `<?xml version="1.0" encoding="UTF-8"?>
 <project xmlns="${pomnamespace}" xmlns:xsi="${xsinamespace}" xsi:schemaLocation="${pomnamespace} ${schemalocation}">
   <modelVersion>4.0.0</modelVersion>
@@ -46279,9 +46279,9 @@ function nugetframeworktargets() {
 }
 function nugetpackinfo() {
   return {
-    packageid: "extension",
-    projecturl: "https://github.com/wenathlan/extension",
-    repositoryurl: "https://github.com/wenathlan/extension",
+    packageid: "devthink",
+    projecturl: "https://github.com/wenathlan/devthink",
+    repositoryurl: "https://github.com/wenathlan/devthink",
     license: "GPL-3.0-only",
     readme: "README.md",
     description: "Distribution package containing the Devthink library bundles, the cli, headless and mcp entries, the declaration files for ide integration, the browser extension ZIPs and the sample fixtures.",
@@ -46308,7 +46308,7 @@ function containerbuildstages() {
     },
     {
       name: "builder",
-      purpose: "builds every dist target through node tests/build.mjs and runs the deterministic build checks, the vitest suite (the arm64 leg through qemu with the scaled timeouts) and the packageextension verification",
+      purpose: "builds every dist target through node tests/build.mjs and runs the deterministic build checks, the vitest suite (native on both legs through the build platform pin, with the timeout guard a native arm64 build node reads) and the packageextension verification",
       checks: [
         "node tests/build.mjs",
         "node dist/cli.js manifest",

package/hardening.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.2 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.9 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // security.ts
 var maskmarker = "[redacted]";

package/headless.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.2 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.9 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.2";
+var packageversion = "2.0.9";
 var protocolmajor = 2;
 
 // runtime.ts