@wenathlan/devthink 2.0.20 → 2.0.22

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # DevThink release notes
 
+## 2.0.22 — the dockle apt retry key
+
+### Changed
+
+| Area | Change |
+| --- | --- |
+| The dockle apt retry key | The 2.0.21 security lane answered red at the dockle best-practices gate: the CIS-DI-0010 heuristic flagged the apt mirror-sync retry counter (apt_update_tries) the family apt pattern of every apt RUN of the Dockerfile carries as a suspicious credential holder — the re-tokenized runtime layer the CVE closure widened (libssl3t64 and openssl joined the install line) surfaced it. The accept-key lists of the publish lane and the security lane gain the counter beside the smoke-boot loop variables (the same non-secret retry-counter class the owner doctrine documents), and the container best-practices gates answer green together with the trivy gates below them. |
+## 2.0.21 — the pinned supply chain and the container return
+
+### Changed
+
+| Area | Change |
+| --- | --- |
+| The pinned action supply chain | The code-scanning board answered 107 open Pinned-Dependencies alerts through 2.0.20 — every mutable reference the supply chain resolves. They close at the root: each of the thirty-one GitHub Action references the seven workflow files call now rides its immutable commit SHA with the release tag in the trailing comment (the SLSA pinning doctrine the family policy once waived as tag-is-the-contract now answers in full), and the workflow control gate's tag-literal expectations re-key to the repo prefix so the pin shape itself stays asserted. The mutable-tag updater the maintenance ladder runs leaves the pinned refs untouched by design — a SHA pin moves only through review. |
+| The pinned container bases | The three container base images the Dockerfile builds from ride their registry digests now: the node:26.8.2-bookworm-slim toolchain stages, the debian:trixie-slim runtime base of the five-architecture index and the distroless cc-debian12 nonroot binary runtime all resolve by the immutable digest the registry answers (the exact remediation the scanner proposed), so no moving tag remains anywhere the container supply chain resolves. |
+| The openssl CVE closure | The container publish lane answered red through 2.0.14–2.0.20 on the two HIGH findings the trivy gate reported (CVE-2026-14456 — the openssl QUIC unbounded memory growth riding libssl3t64 and openssl-provider-legacy): the runtime stage installs libssl3t64 and openssl beside libstdc++6 and libatomic1, so the apt step resolves the fixed 3.5.7 build the debian repositories answer at build time and the scanned image carries no HIGH or CRITICAL finding — the five-architecture index publishes again, and the latest channel alias the 2.0.16 realignment carries finally moves off the 1.1.16 image it was frozen on through the failed rungs. |
+| The github registry publish path | The github npm lane's publish step quoted the packed tarball as a bare relative path, and the npm resolver answered release/… as a git shorthand (ssh://git@github.com/release/…) instead of the local file beside it — the lane quotes the ./release/ path the npmjs lane and the release ladder already carry, the publish lands, and the latest dist-tag alignment that rides the publish step answers with it. |
 ## 2.0.20 — the session cache and the scope quoting
 
 ### Changed

package/bridge.d.ts

@@ -428,7 +428,7 @@ import type { jsonrpcframe } from "./types.js";
 /** The native bridge protocol major version this build speaks: the handshake reports it, the upgrade path keeps compatibility for exactly one major version, and a host that speaks another major version degrades instead of breaking the run. */
 export declare const nativebridgeprotocolmajor = 1;
 /** The installer version the installer stamps into the install state; the upgrade path compares it so a manifest written by an older installer reports before it overwrites. */
-export declare const nativehostinstallerversion: "2.0.20";
+export declare const nativehostinstallerversion: "2.0.22";
 /** The generated extension id placeholder the host manifest template carries: the installer replaces the token with the extension id of the installed build, so the template never pins an identity the user did not generate. */
 export declare const nativehostidplaceholder = "__generated_extension_id__";
 /** The native messaging directory name of the chromium user profile: the installer writes the host manifest beside it, never into a system directory without the explicit flag. */

package/bridge.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.20";
+var packageversion = "2.0.22";
 var protocolmajor = 2;
 
 // types.ts

package/bun.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.20";
+var packageversion = "2.0.22";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/caps/background.json

@@ -1,6 +1,6 @@
 {
   "surface": "background",
-  "release": "2.0.20",
+  "release": "2.0.22",
   "protocolmajor": 2,
   "messages": [
     "applyprofile",

package/caps/cli.json

@@ -1,6 +1,6 @@
 {
   "surface": "cli",
-  "release": "2.0.20",
+  "release": "2.0.22",
   "protocolmajor": 2,
   "messages": [
     "commands",

package/caps/library.json

@@ -1,6 +1,6 @@
 {
   "surface": "library",
-  "release": "2.0.20",
+  "release": "2.0.22",
   "protocolmajor": 2,
   "messages": [
     "a11ycapture",

package/caps/mcp.json

@@ -1,6 +1,6 @@
 {
   "surface": "mcp",
-  "release": "2.0.20",
+  "release": "2.0.22",
   "protocolmajor": 2,
   "messages": [
     "browser.a11ytree",

package/caps/pagebridge.json

@@ -1,6 +1,6 @@
 {
   "surface": "pagebridge",
-  "release": "2.0.20",
+  "release": "2.0.22",
   "protocolmajor": 2,
   "messages": [
     "canvasdata",

package/caps/popup.json

@@ -1,6 +1,6 @@
 {
   "surface": "popup",
-  "release": "2.0.20",
+  "release": "2.0.22",
   "protocolmajor": 2,
   "messages": [
     "bridge",

package/caps/sidepanel.json

@@ -1,6 +1,6 @@
 {
   "surface": "sidepanel",
-  "release": "2.0.20",
+  "release": "2.0.22",
   "protocolmajor": 2,
   "messages": [
     "applyprofile",

package/checksums.txt

@@ -1,35 +1,35 @@
-c5251b63fe1ba645ffec30a958d9b20c41e261efcb1ef27fac6d42ad6672b534  CHANGELOG.md
+24cd828533b23e290b9c1e7842f7d25df6507c6c8852f9486e245de2970b5a4f  CHANGELOG.md
 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986  LICENSE
 45beaf5c548c643cb2e8b88cebd7a11a2329ca5ad4b9187d6c53ca30fbbdd9bb  README.md
-61974a2c75589f7c005883dc020bb30945bbc5890e48afc6175c66c919aa5932  bridge.d.ts
+4482a40107d9b7299fea001814297e168ee9171fae8f1dec2a7465a6f57aa6cc  bridge.d.ts
 a6d353d03e0e2d2cb116a057fcab7a2a6e3594290bcf66bc0ff5ea2656757c94  bridge.d.ts.map
-16fa68ed49301d5040f13eb57dcdcf8d506273c5c4e51e1329b84b8bb2f3f6c8  bridge.js
+0a74a3dba1e1620d52c24c8a693cdab3746c9ea327518b96c74a44552e265672  bridge.js
 9557339c2c57fb58212c3b90e8e5934ddba56066a2537d645e4cb34439fdc2ff  bun.d.ts
 601a75f547bb845b8a81fa59a21d560691561eb17d598acb3fd1f4ac8421e424  bun.d.ts.map
-c92610d514ceeda01faf1625bea9b068aff3eb0ff0776efd5d692487c9b8b109  bun.js
-d55eecd7aed5d3671bef65a53a620ec4f62e897e57cfb13ebdd64113f71f05c1  caps/background.json
-c9d78154fa4e653e9b017334bdfa41282541204c445be239c3c0a8e83473b983  caps/cli.json
-84aaa257f367bfaffa2a27da4f549ffba16907d50de62c308a7a20fa5954f506  caps/library.json
-6b75fa33f3b074544974b5eb6edc0931f8910e839a73bc292b19b2f8e8df4074  caps/mcp.json
-9677b86ad92e35a2566a3b82c92f6735fb327890a142961dfa3aac42b5244201  caps/pagebridge.json
-c7403360448d832c6cac884970058ffee25a2624a0041aa2681eb95e8673e8ed  caps/popup.json
-406f888664a6b64692a37514a8022973f1eef6a3e9f3a6ae76970097e624134a  caps/sidepanel.json
+e5d64059aad87d2a819d24ee2478092d33a39306538ade6c51600d34ea982901  bun.js
+7de7e629783c14d4dfc20c48aaa11a452e157a9d82d101a5b6ba7bdffa2c2462  caps/background.json
+d55344beb7e8beea31c48c0baf299cb56b8548a4dd402e8e9f5199fc2aa431d0  caps/cli.json
+31e428f0b12f37334bce24d5888d5c27d52cc32a0108d79b23904e5cf17c3f43  caps/library.json
+fc3465904d755959b641c04f52bdd448ef2a003e72fad21126c4a52c73a3da90  caps/mcp.json
+357789f4b3c7fecdb8c7fd7186691ce2f602dc08f3049a7fd415739fe42fb23c  caps/pagebridge.json
+26d9563fa8b062be7b9322a88dcc5c31c0adf8b81204d88a54f5f4c238fc29a8  caps/popup.json
+2bb6b06ffa068b4d2552165407bdaa21582139e17571c15d65449aa0b89c7fd9  caps/sidepanel.json
 d35d001526d77c8f37371a39146587ea6ad86179167d82862284557adcd70f17  cli.d.ts
 f7bb3e1903702366effe6c081837b1060c26479740a808f11e0a08ea85e849c9  cli.d.ts.map
-580f9663f90c6b93d0a08e2425a6fd6074f36e76e105d16c82a831b560b5f4c9  cli.js
+9d1a93be3db9fe79b601d42ffff26316fc3ad5669d897677f88b72fca82a094b  cli.js
 6d47383663f5efa626bfbc31977bc3df7cfb383725b243ce08057c059234e42f  companion.d.ts
 df25256c8176fc547298c2fb5666bcbf0f01bec284a0dc94f66350f6c29a38be  companion.d.ts.map
-5916ee9cc85b243df303cb07d06e326aed943643dc65696cbe6e243f3a8c6b8a  companion.js
+b4d26073cf9c38ef073c836787854747a443a9aa5c5c45271a94971195affd3a  companion.js
 85824f4b1603769f1c117b524925f05a42d37f2bcb41e9d4d377e5408615721f  crossbrowser.d.ts
 a7c4cd26ce8402a9ec1d11bd8dab4222d3c73a0e6f84915402c2fd60f8282d95  crossbrowser.d.ts.map
-2237da5b473a73382c355b6cab940be67b88abfbb0cf85889eab30a54b6aca45  crossbrowser.js
+c3078153307aefd3fb516969c6932c6b4cf3ea8986e0c680bdb02d548a05d609  crossbrowser.js
 bc8f0d95430875b0fd8aff5c0744580d3dd07c5a0927aad4f2c54d34b83be016  dashdone.d.ts
 4d7e32ac75985463dd38a5c408e154276c902c1a1a9ba032d610bffc2b89eee5  dashdone.d.ts.map
-d9ef95cc7b2d95d9eb80b8a08c6d1769d20032e6e5a7c25681a46eb90b54882d  dashdone.js
+ebfe6f0964c16419614c34f246f82739b68fbc782135fe6216aec92c87dda476  dashdone.js
 fea8d906a8c3b0608a9ae4b622c0b88c78d535ed151aa9db29922d817c387495  deno.d.ts
 3b07bf585688565ff818934d7d38f26c0188fcaf44ddbc8727ad3c76999b826c  deno.d.ts.map
-1529190ddc5664ff100f3cdcaef0c08b7eb880620b23428f2a1e1caca841fcef  deno.js
-3aa0e9a59413f10044fa9ba38ae495d0ff390498e69640bf8754619546597223  devthink.umd.js
+21a85ca3ce188b8e075b880003811f41bf9786bc518f4cf9244ba62f6362436c  deno.js
+0bc5990ccdb3b0cec474e2dab29492d0ec4e4dec32ad3f23a90df44b7fbd0006  devthink.umd.js
 d8b6d1f6446da72d359dae978c5495244257dc70660415f8aaad96dd5075e241  fixtures/bun.ts
 702c21459e5d6d8d0b914a86bb6c3646a0be40e132b2d40cc04f2994cfbd1cf3  fixtures/cjs.js
 6bd268717a28a23405e5200264d47bb68aaf9c0d6d911674eaa22477bf19d003  fixtures/deno.ts
@@ -87,42 +87,42 @@ c93c417dbf3a43736845e653598624ee48e79f69bf93d36e3b19655e0a23b792  fixtures/recip
 6b757866f79c4a16098879f7cfffdb85557b7fb6ca4ec7b1c0cd1d1169c3e3c0  gallery.json
 16f6a0cdd78820a257d0fbb501784ed031dcffcdc4b9841d5279c8273e3776f4  hardening.d.ts
 eb153f3fa619ca8f59dd8abb598f33213a98026392854a32a7c305a73688bc95  hardening.d.ts.map
-55c47cc872e9ae2af442005561fee31dac7dc2776b4c6179fe8e4fd3fe361034  hardening.js
+8212a97df13828047a08deb9d1a6fed79008df11b771f123cd79aa12a83cc9af  hardening.js
 2e560159a8c3b121c91d83545e0dcfa03b79399ed052bc23a425b2d355839362  headless.d.ts
 f6a7bced8d6b26f05ca971e70aaa177b8be9fb5a7e25a17ab5f2235a8f9ed590  headless.d.ts.map
-0c4bc931be364d8137d58292dc4a7339b757c0944b0c6ce83b53de84f4e52831  headless.js
+a0c90ddd87d14b8f88e171f1046c3a926453ae3da8dbadba5c282564663aab4a  headless.js
 7aed8c110caffd11caf27d63b993ad71328851905f4faeea2a8e1442eba8e257  http.d.ts
 b1ab1184756d92fb301a71d5a696ed4cd70bb4953f292002f01930c9e4893024  http.d.ts.map
-2d7405e293314475c4f4d5e3b2f9dc60b0bb88fb0e2a06729057704831a38e8d  http.js
-5e14c1ddc68ee954ee4a22d4cf05af2e8346b851e6485a45f170b97985853eb3  index.cjs
+23c0784a9709ab497cf6466d8f1a8c7a6f50925c600e1e7b7e2c2171ba76226e  http.js
+d8606b74441f43190bf20bc902b7afb1a572b56e1ecb8f4d6754cb3e239ccc4e  index.cjs
 31b2f3e15bb0b8cbef623b438f01bb8424909686424a98dd88366412d063d7ed  index.d.ts
 9398106d8b2277fb1c40892eff062a8cc8e605837d01f191fb783517367860fc  index.d.ts.map
-dd66e68396a9f6b46531cbcd35a8feb9b9c882d540fa98303b7ac2eb80aa3f7c  index.js
-1b09d524bb204bb634bdb7bd0a9120c9ab7cf9abc75898e41498913e547e8c97  index.neutral.js
-e4f17ea3f7e875b24bfb9e4736a3f495cc8e56626b346298a43a2405a8aff8ec  manifest.json
+f965e2a3235da46f0de9afef906df1fe43bac6d40baa6515fb2293eb842a91a6  index.js
+3bfa0f3df262db4f772479cb71019adf9f651c0e1fe7f67d081339f07ebce1de  index.neutral.js
+993ce085d7c24e7908de3882c3827655fcb5e19cfc0f1f5085354efe5a621bef  manifest.json
 4a4a38d5c2f25f6e33d7fea853a074d4c82dfe5c721506ca4636b1d65c130f10  mcp.d.ts
 dd22f998da99d77485e863c4e7f1f906bb46dc03ee500efe99a5c09a935f4539  mcp.d.ts.map
-cc042cfafda4a591ec07ea600b14a78e652da8a0062c8cc21a6c92b5c643808c  mcp.js
+47f19c6956865e87ee797afd7d98d353cf7d724c556709c1c04a71587c5d9175  mcp.js
 ce98408283eccac2d435ac0e0ceb6bb5456e1eb70edb03a03e347a9f82f99c69  memory.d.ts
 9f4c19494bb1b2260a4d15c4c2dce4d2b3f5da96f07b8fbe9037f9b5fe31c8e1  memory.d.ts.map
-e9bf2962457526492764c499345f4d3baa58b89fef18752bbf123c13ed5af72a  memory.js
-9f0f15d54e02b4737b91a5474680ddee47c8fb630433f0776ab135083e7b0977  nativehost.template.json
-8517a68bda8b3403e50952202c1563f1dbd966f0901acfa9c12ffe341c250511  node.cjs
+75dae49620526c71398f82e5ee90e8d9690bc5e879e0d6312530be20535580fe  memory.js
+d1b51d5c89470ed2f4a010954b01fb6367e705a63d64d8f74dfbc576ffa3b464  nativehost.template.json
+1d2460a3472693b3ce6ebeec876f79c177b5fb4b4c5381c5feda55b8764f8588  node.cjs
 705d895c58fe6816958f0fed4bef0a6f79e5fc521ab49d9cf83e0fbcd9d71afe  node.d.ts
 45f4394eca20fc889fe1128059ce20130d26a5ae0d89008a7ca93f0e4d52841b  node.d.ts.map
 5ec83bc409bed888ae13ab55d1f329ac630a3cf2f0db0e2414c28324329c055b  pack.d.ts
 619d43a5239d770c3382af3dd57e2588dd067ded81ca8c106d404e6709324a63  pack.d.ts.map
-c4a281c0216edeb78ff7b4093e84df8a5885a24af17660914fa1208bc637527a  pack.js
-71de9a339fa5d4cc318cba8b424a9e4c0effac13ff5a829366acd7fca175bf27  package.json
+24b11e7e259aef8cfe62d1561d2be93cc351d39c0310ef01a840c41e9fcc1871  pack.js
+eb10998f60cbb1612a67a762fab990e766901d5866baf1292fae7db16c89ec85  package.json
 e3a2ed944a0bc1ef4943ee250a57e428ce49d781d30de6072571e0bc5d8c0259  policy.d.ts
 8f4fabc57c883e12ac7c7ab280749dc7c2d402c4fce401bef235c5e451b6975a  policy.d.ts.map
-e072e9d82d818d701f293c9eb074625a04729e876dd8229496e3805892c43650  policy.js
+23e29416458b195672738d343d92785d08afc44bf2930ff3e2347df1358a98d7  policy.js
 ea621ab35e610fbe8acb8e91f21ed2c74a6b20bba537c5982f31458d6878b90b  progress.d.ts
 33383e690d77faf6f5959846839603079e7f90e1e3dd17cbcc9a4e3fcf1c5641  progress.d.ts.map
-162ab02ab24e7ca255b0ba966125b29b6b028be9f3013de38a63ee9dd1006e4d  progress.js
+71e8f84884b6837397409c8ae883e65a11919dd76aaab108fce54f50949d4b42  progress.js
 d2e54016f0cad51928752882d780066ccf2267d383deb2407ea7b2f97dfd26e7  protocol.d.ts
 487f8fc63061cb26cbda7f122409d9952810ba3a76b19d147c98d151d4f45d64  protocol.d.ts.map
-9e162b17f6ae87f2d4465df57ffd73395c8ee7385f22f136b4e9f1044039d89f  protocol.js
+9af53a769699985791479a8e4f5768abedb776aeddfeea65a6c93d48b387e0bf  protocol.js
 456c4a26fd65c728f2dcb9e615ec6e4d446d7e4228bfa3f70ce2b17ee3d6a2c2  schemas/audit.schema.json
 ea272aa6bf4df585ae1ca8ca63e36d7ec713c46187f37ed86ff3620a0e8509b2  schemas/capability.schema.json
 6e9d2291dc54f7d01463e5f70c8f0793d952a63f4096d61ee4dbc4bfd6f6b0a0  schemas/envelope.schema.json
@@ -135,8 +135,8 @@ d0e0365a7641c0127338c14a5318c4591dc598b7d2a36b7b2944219921d1ce4e  schemas/sessio
 5bb7d16534b52ca3a7171178065fb7b283947accd1b616ce89e330eb7a91b82e  schemas/tool.schema.json
 76f61b03cb67ab85b1bfd0f14014ff87ef5689975ab37e7b598ad6cdf837bafd  server.d.ts
 850b93b66b2cbce29044f4c7c5d2dc199d90165de3a531a6cea39813b6dca234  server.d.ts.map
-461c11f54fd8194fd653ec34679839ff8319dbac746265e68c08a9e2b3c9757f  server.js
-28649d7a58329d4d28dd0eed1b8e0d522d61ccbbb68b226d3e130a11adb8c980  umd-example.html
+2fde52fde21575ab91f66b5953d67fba990a714d38bcb58a78c646319d98766f  server.js
+723fc507b74c4544ff04d01375da132847bc056fcdd3c68b115b9c16dddd5891  umd-example.html
 16f66af22e038e4f9328420a0ed0ee34145ca79c938940e8c2e6d232e25a7c09  umd.d.ts
 ac25f7481155ac9321c5a657e7c4a53570bee8b3f63fe3527045260523a494c8  umd.d.ts.map
 58e21373cec5ade3e6698da5b36ecc2bf7e7e2f755c6fb5e3a6605b535b93985  manifest.json key

package/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // cli.ts
 import { createInterface } from "node:readline/promises";
@@ -569,7 +569,7 @@ function endcall(input) {
 }
 
 // version.ts
-var packageversion = "2.0.20";
+var packageversion = "2.0.22";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/companion.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.20 companion — the optional native host of the native bridge — GPL-3.0-only — built with plain node, no native compiler */
+/*! devthink 2.0.22 companion — the optional native host of the native bridge — GPL-3.0-only — built with plain node, no native compiler */
 
 // companion.ts
 import { createHash, randomBytes } from "node:crypto";
@@ -16,7 +16,7 @@ var nativehosttemplatejson = `{
   "devthinkBanner": "devthink __devthink_version__ native host manifest template \u2014 GPL-3.0-only \u2014 the chromium host manifest of the optional companion process"
 }
 `;
-var companionbuild = "2.0.20";
+var companionbuild = "2.0.22";
 var companionprotocol = 1;
 var companionsurfaces = ["osdialog", "notification"];
 var maxnativemessage = 1024 * 1024;

package/crossbrowser.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // crossbrowser.ts
 var browserpolyfillflags = [

package/dashdone.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // dashdone.ts
 function dashboardviewerof(input) {

package/deno.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.20";
+var packageversion = "2.0.22";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/devthink.umd.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 (function (root, factory) {
   if (typeof define === "function" && define.amd) { define([], factory); }
   else if (typeof module === "object" && module.exports) { module.exports = factory(); }
@@ -2365,7 +2365,7 @@ __export(umd_exports, {
 module.exports = __toCommonJS(umd_exports);
 
 // version.ts
-var packageversion = "2.0.20";
+var packageversion = "2.0.22";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/hardening.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // security.ts
 var maskmarker = "[redacted]";

package/headless.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.20";
+var packageversion = "2.0.22";
 var protocolmajor = 2;
 
 // runtime.ts

package/http.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.20";
+var packageversion = "2.0.22";
 var protocolmajor = 2;
 
 // types.ts

package/index.cjs

@@ -1,4 +1,4 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 "use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -2356,7 +2356,7 @@ __export(cjs_exports, {
 module.exports = __toCommonJS(cjs_exports);
 
 // version.ts
-var packageversion = "2.0.20";
+var packageversion = "2.0.22";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/index.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.20";
+var packageversion = "2.0.22";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/index.neutral.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // debug.ts
 var cdpkinds = [
@@ -2010,7 +2010,7 @@ function sessionbundleof(input) {
 }
 
 // version.ts
-var packageversion = "2.0.20";
+var packageversion = "2.0.22";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": 3,
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOEjO8Z0PDgQyfvawGcaO2j+o0GLCFTLNj7TkYC/Avo9l2NenMRq7gp90Nfd7E9MViv/OMcCKSYZ5unv12QPRtv31C+a5UQWDFAOP/cH5mwMd6hsayElrSoW8ta+FwFqmr9dIFkn7cQEU3YhZr4Gcbs+ycUHOxVgDA4NBKB0rQ6e9VW5LvTw0isRYUrqM+M72vKxHk9zUIYYn/LGPvottKBYi2GLr0PHSeC2UE+Shmq7vcFIXj6hDjvD4kLJ5sKoUllEcZ1TPuBcnHUQ9ndKA5iktXDQOIJCUJmi7a0YJ2PGg7fvpYfT9k0ai/qZ+pIoRfoOEwE01bPoDn7NjeYnNQIDAQAB",
   "name": "Devthink",
-  "version": "2.0.20",
+  "version": "2.0.22",
   "description": "A consent-first bridge for reviewed browser-agent tasks.",
   "icons": {
     "16": "icons/16.png",

package/mcp.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.20";
+var packageversion = "2.0.22";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/memory.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // debug.ts
 function expireprofilerecords(input) {

package/nativehost.template.json

@@ -6,5 +6,5 @@
   "allowed_origins": [
     "chrome-extension://__generated_extension_id__/"
   ],
-  "devthinkBanner": "devthink 2.0.20 native host manifest template — GPL-3.0-only — the chromium host manifest of the optional companion process"
+  "devthinkBanner": "devthink 2.0.22 native host manifest template — GPL-3.0-only — the chromium host manifest of the optional companion process"
 }

package/node.cjs

@@ -1,4 +1,4 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 "use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -2357,7 +2357,7 @@ __export(node_exports, {
 module.exports = __toCommonJS(node_exports);
 
 // version.ts
-var packageversion = "2.0.20";
+var packageversion = "2.0.22";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/pack.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // pack.ts
 function artifactchannels() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wenathlan/devthink",
-  "version": "2.0.20",
+  "version": "2.0.22",
   "description": "DevThink is the merged AI development workbench: the provider-owned gateway engine, the DevThink browser extension (the agent surface), the Antigravity engine and the workbench CLI — one product, one binary, one metadata.",
   "type": "module",
   "license": "GPL-3.0-only",

package/policy.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // debug.ts
 var cdpdomains = ["Runtime", "Log", "Debugger", "DOM", "Network", "Page"];
@@ -350,7 +350,7 @@ function sessionrecordvalid(value) {
 }
 
 // version.ts
-var packageversion = "2.0.20";
+var packageversion = "2.0.22";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/progress.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.20";
+var packageversion = "2.0.22";
 var protocolmajor = 2;
 
 // progress.ts

package/protocol.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // debug.ts
 var cdpdomains = ["Runtime", "Log", "Debugger", "DOM", "Network", "Page"];
@@ -1255,7 +1255,7 @@ function cronvalue(value, min, max, names) {
 }
 
 // version.ts
-var packageversion = "2.0.20";
+var packageversion = "2.0.22";
 var protocolmajor = 2;
 
 // types.ts

package/server.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.20 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.22 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {

package/umd-example.html

@@ -1,4 +1,4 @@
-<!-- devthink 2.0.20 umd example page — GPL-3.0-only -->
+<!-- devthink 2.0.22 umd example page — GPL-3.0-only -->
 <!doctype html>
 <html lang="en">
 <head>