@wenathlan/devthink 2.0.82 → 2.0.89

package/CHANGELOG.md

@@ -1,5 +1,104 @@
 # DevThink release notes
 
+## 2.0.89 — the sixth logic campaign
+
+### Changed
+
+| Area | Change |
+| --- | --- |
+| The cadria roots | The video and image home grows six pure logics with their node test companions: the tick clock of the exact frame math, the editing algebra of overwrite, insert, lift, extract, split, trim, roll, slip, slide and rate stretch, the separable blend formulas of the compositing standard with the W3C alpha composite, the color conversions across the sRGB transfer curve, the HSL and HSV cylinders, OKLab and the studio-swing YCbCr families, the influence and speed ease curves with the handle algebra and the mask planes of the add, subtract and intersect ops. |
+| The debonair roots | The audio home grows five pure logics with their node test companions: the beat grid of the tempo map, the remix plan of the onset segmentation, the sidechain ducking envelope, the loudness measure of the gated meter and the speech alignment of the energy split and the grid fit. |
+| The stealhead roots | The shooter closes its official logic gap with four pure logics and their node test companions: the spawn planner of the seeded fair points, the deterministic physics of the fixed step and the swept collision, the netcode of the delta snapshot and the input reconciliation and the hud logic of the vitals, the minimap, the hit markers and the killfeed. |
+
+## 2.0.88 — the green gates ride again
+
+### Fixed
+
+| Area | Change |
+| --- | --- |
+| The permission baseline | The permdiff baseline restamps against the release the package carries after every bump, so the deterministic suite reads a clean permission diff of 2.0.88 against 2.0.87 with zero added, removed or reordered entries and the readiness decision answers go across the ci, release and verify lanes. |
+| The dependency lock | The shell-quote override pins the transitive dependency of react-devtools-core to ^1.11.0 and the resolved lockfile carries 1.12.0, clearing the critical advisory from the osv and trivy scans the security lane runs over the lock. |
+
+## 2.0.87 — names without dots
+
+### Changed
+
+| Area | Change |
+| --- | --- |
+| The naming doctrine | The composite dotted filenames of the root logic flatten to plain lowercase names across the whole family — the dotted compound becomes a rare exception, so `clean.url.ts`, `json.policy.ts`, `calculator.logic.ts`, `media.probe.mp4.ts`, `sandbox.spec.ts`, `web.server.ts` and every sibling turn into `cleanurl.ts`, `jsonpolicy.ts`, `calculator.ts`, `mediaprobemp4.ts`, `sandboxprofile.ts`, `webserver.ts`, while the sse parser, the dnssec validator and the mixer graph keep their themes; imports, dynamic imports, test companions, headers, error strings and run scripts follow, and the framework configs keep their hyphen. |
+
+## 2.0.86 — the windows identity rides every app
+
+### Changed
+
+| Area | Change |
+| --- | --- |
+| The windows identity | Every application of the family now wears the real Windows 11 language read from the open-source clone: the `#202020` window floor with the Mica tint (`radial-gradient(#1a1f35 25%, #202020 100%)`), the Fluent shadow stacks (focused window `0 32px 64px`), the Fluent motion curves (decelerate entries, accelerate exits), the authentic system accent `#4cc2ff`/`#0067c0` on the spots Windows uses it (active indicators, toggles, focus underlines, selection, links) and the identity colors of each app reserved to their marks, tiles and content actions. |
+| The acrylic texture | The taskbar, the start menu, the tooltips, the session panel and every floating panel carry the noise grain of the Windows acrylic — an inline `feTurbulence` shader blended over the `saturate(3) blur(20px)` material, no image file, with the reduced-transparency guards answering with solid floors. |
+| The interaction | The Windows scrollbar recipe lands everywhere (invisible until hover, the thumb growing under the pointer), tooltips ride the acrylic, focus underlines the accent, selection and links follow the system accent, and the light theme answers with `#0067c0` and the light Mica. |
+| The pages | The page folders of the Sol theme ride their own names with zero nesting: the games, music studio and video studio pages live directly beside the other pages and the launcher carries its own named folder — every application of the family answers the flat contract with no subfolder inside a page. |
+| The json model | The typed decision layer grows the competitor practice: the confidence policies of the decision gates (band tables, honest measurement with the per-decision trail, the rollout ladder from shadow to active, the reference router that rotates the recipe when the hit rate drops) and the type-safe schema bridge (a declared schema compiles to the instruction the model answers with and to the validator that keeps it inside), with the irreversible-action guard wired to the chat turn as an opt-in that never blocks. |
+| The navigation | The desktop icons of the family open the deploy units themselves — the click resolves the mount base frozen at boot and loads the family application in full, so every icon answers where it lives. |
+
+### Fixed
+
+| Area | Change |
+| --- | --- |
+| The deploy base | The mount base freezes at boot instead of deriving from a restored workspace route, so cross-application links resolve against the real mount point on every host. |
+| The launcher routes | The catalog routes of the native apps follow the flat page folders. |
+
+## 2.0.85 — the gates answer go
+
+### Fixed
+
+| Area | Change |
+| --- | --- |
+| The changelog coverage | The lost 2.0.44 heading returns to the changelog restored verbatim from its own tag, so the doccheck changelog-coverage check reads every released version documented again and the candidate gates record the green run. |
+| The freeze artifact | The frozen contract record rides the current release again — the release cycle now walks the apifreeze sync with the version stamps, so the verification matrix answers 18 of 18 cells and the readiness review answers go with zero blocked gates. |
+| The probe evidence | The probe evidence trees (the browser screenshots and the profiles they carry) left the tracked contract — the flat-structure contract reads no duplicated content from idempotent probe reruns, and the ad-hoc probe outputs stay out of the tree. |
+| The dependency graph | The lockfiles ride the patched lines past the osv advisories: postcss-selector-parser to 7.1.6, source-map-js to 1.2.2 and proxy-addr to 2.0.8 through the overrides sections of the application and the saddle lock, keeping the osv, trivy and audit gates green without dropping a package. |
+| The publish lane | The container lane builds from a tag that carries every repair — the in-container suite sees the same green artifacts the ladder sees, so the ghcr image publishes with the rest of the family packages. |
+
+## 2.0.84 — the theme rides trylle
+
+### Changed
+
+| Area | Change |
+| --- | --- |
+| The theme foundation | Every surface of the platform now rides the trylle-grade token layer: one unified deep canvas, an eight-step surface scale instead of ad-hoc grays, Linear-style shadow stacks (a 1px ring plus doubling layers with the dark-mode top light), hairlines mixed from the foreground instead of hard borders, the fluid display type scale with tight tracking, a 150ms micro-feedback unit on `cubic-bezier(0.22, 1, 0.36, 1)` entries and a hard reduced-motion stop. |
+| The devthink shell | The start menu, floating windows, dock, chat, the /os surface, the terminal, boot, login and notfound all consume the new foundation — solid step surfaces over blur, one solar accent reserved to action and state, mono uppercase metadata labels and complete hover, focus, active and disabled states. |
+| The family | All nine applications carry the same pass: cards, buttons, tabs, badges, inputs, tables and toasts on the surface steps with Linear shadows; each accent now appears only on action and state; the floating panels of the family read nearly solid over their content. |
+| The floating panels | The start menu, the chat session panel, the /os dialogs and every family panel raised their tint toward solid so the content behind never ghosts through, in every engine, with the acrylic blur kept for the engines that render it. |
+| The stealhead pages | The ranking page previews the season duel with the root ladder arithmetic and the armory cards report the time to kill at the probe distance from the terminal ballistics logic — both computed in the browser from the root logics, with the season tables as parameters. |
+
+### Fixed
+
+| Area | Change |
+| --- | --- |
+| The panels | The floating panels no longer let the desktop icons and page content bleed through their acrylic in engines without backdrop filters. |
+
+## 2.0.83 — the shell speaks windows
+
+### Changed
+
+| Area | Change |
+| --- | --- |
+| The topbar | The shell chrome became the windows taskbar recipe read from real open-source desktops: a 48px acrylic bar with `saturate(3) blur(20px)`, the pinned applications as 38×38 icons without names — the name arrives as a tooltip on hover — a 3px open indicator that grows 6 to 12 pixels with the solar accent, the press squash at 100ms and the 800ms pop-in entrance. |
+| The start menu | The floating panel rebuilt on the windows recipe: 640px wide, an 8px radius, the slide-cum-fade entrance and exit on `cubic-bezier(0.79, 0.14, 0.15, 0.86)`, 96×84 tiles and a 64px footer. |
+| The windows | The floating windows fly with the real physics — one 250ms duration for open, close and minimize, the minimize flight that scales and glides into its dock icon, inactive windows desaturated with focus-graded shadows, wide rectangular caption buttons with the red close, eight resize handles, a 26px cascade and a 320px minimum. |
+| The desktop | The application icons sit in windows-sized cells with dotted selection, multi-layer text shadows and the press squash; the dock shares the taskbar grammar. |
+| The chat | The chat interior rides the same grammar: list rows with a functional 3px indicator, the composer as a windows search box instead of a pill, the gateway panel as the acrylic float with a real exit transition, and every gradient, white border and decorative orb removed. |
+| The family | All nine applications carry the taskbar grammar — the brand mark opens their floating panel, every page is a pinned icon with a tooltip and the active indicator burns in each application accent. |
+| The family surface | The operating surface, its launcher, views and floating panels ride the windows grammar end to end. |
+| The logic roots | The functional logic of every application moved to its root in pure TypeScript with tests: the streaming, retry, compaction, token and queue logics of the OS read from the leading competitors; the sandbox spec, lifecycle and quotas of the saddle; the zone diff and dnssec clocks of argan; the rotation and stream fallback of getry; the transcode plan and container probes of cadria; the match, ranking and weapon rules of stealhead; the mixer graph and timeline model of debonair — every tunable arrives as a parameter, nothing hardcoded. |
+| Visualize | The image-to-mesh library of cadria turns pixels into a triangulated heightmap with vertex colors, normals and OBJ/STL exports — pure TypeScript, zero dependencies, wired into the studio. |
+
+### Fixed
+
+| Area | Change |
+| --- | --- |
+| The pages | No page folder carries a subfolder and every pure logic lives at the application root beside the theme. |
+
 ## 2.0.82 — the platform answers at the root and the icons become assets
 
 ### Changed
@@ -443,6 +542,8 @@
 | The four next shapes | Every site ships four next archives beside the complete site: the next normal (the plain standard template with no folder blocking), the next zai (the standard template the Z.AI platform accepts riding the gateway skill, the prisma schema and the deploy map), the next fifty (the same shape with the forbidden folders blocked and the deploy reading the root) and the next personalized (the house tree one hundred percent personalized). Every shape carries the platform file set at its root (.npmrc, .nvmrc, biome, tsconfig, vercel, netlify, wrangler, the dev vars example, the manifest) and the icons follow the blocking rule. |
 | The deploy order | The gateway skill teaches the order: the personalized first, then the zai, then the fifty, then the normal, with the four-step flow unchanged. |
 
+## 2.0.44 — the scan gates close the whole dependency graph
+
 ### Fixed
 
 | Area | Change |

package/README.md

@@ -204,7 +204,7 @@ the app root carries the theme roots and Sol/ carries the component folders
 
 ## OS view (dissolved devthink/os)
 
-The former Next.js DevThink OS (`devthink/os`, single route "/") is absorbed as the page folder `os/` and served at the `/os` route of this workbench. The folder owns its components (dotted names: `Os.tsx` anchor, `gateway.home`, `command.menu`, `app.header`, `aura.chat`, one `<app>.view` per family app) and its folder logics (`clean.url.ts`, `use.stored.state.ts`, `os.events.ts`, `os.types.ts`, `apps.ts`, `os.gateway.ts`, `reveal.ts`). The Next.js `page.tsx`/`layout.tsx` pair is not carried over: this is a Vite+wouter SPA, so the anchor is routed from `App.tsx`, the metadata lives in `index.html` and the engine stylesheet was merged into the "OS view" section of `index.css` with the `--sol-*` tokens remapped onto the `--dt-*` workbench tokens (the Sol design prevails).
+The former Next.js DevThink OS (`devthink/os`, single route "/") is absorbed as the page folder `os/` and served at the `/os` route of this workbench. The folder owns its components (dotted names: `Os.tsx` anchor, `gateway.home`, `command.menu`, `app.header`, `aura.chat`, one `<app>.view` per family app) and its folder logics (`cleanurl.ts`, `use.stored.state.ts`, `os.events.ts`, `os.types.ts`, `apps.ts`, `osgateway.ts`, `reveal.ts`). The Next.js `page.tsx`/`layout.tsx` pair is not carried over: this is a Vite+wouter SPA, so the anchor is routed from `App.tsx`, the metadata lives in `index.html` and the engine stylesheet was merged into the "OS view" section of `index.css` with the `--sol-*` tokens remapped onto the `--dt-*` workbench tokens (the Sol design prevails).
 
 Still-true rules of the os surface:
 

package/bridge.d.ts

@@ -428,7 +428,7 @@ import type { jsonrpcframe } from "./types.js";
 /** The native bridge protocol major version this build speaks: the handshake reports it, the upgrade path keeps compatibility for exactly one major version, and a host that speaks another major version degrades instead of breaking the run. */
 export declare const nativebridgeprotocolmajor = 1;
 /** The installer version the installer stamps into the install state; the upgrade path compares it so a manifest written by an older installer reports before it overwrites. */
-export declare const nativehostinstallerversion: "2.0.82";
+export declare const nativehostinstallerversion: "2.0.89";
 /** The generated extension id placeholder the host manifest template carries: the installer replaces the token with the extension id of the installed build, so the template never pins an identity the user did not generate. */
 export declare const nativehostidplaceholder = "__generated_extension_id__";
 /** The native messaging directory name of the chromium user profile: the installer writes the host manifest beside it, never into a system directory without the explicit flag. */

package/bridge.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.82";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 
 // types.ts

package/bun.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.82";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/caps/background.json

@@ -1,6 +1,6 @@
 {
   "surface": "background",
-  "release": "2.0.82",
+  "release": "2.0.89",
   "protocolmajor": 2,
   "messages": [
     "applyprofile",

package/caps/cli.json

@@ -1,6 +1,6 @@
 {
   "surface": "cli",
-  "release": "2.0.82",
+  "release": "2.0.89",
   "protocolmajor": 2,
   "messages": [
     "commands",

package/caps/library.json

@@ -1,6 +1,6 @@
 {
   "surface": "library",
-  "release": "2.0.82",
+  "release": "2.0.89",
   "protocolmajor": 2,
   "messages": [
     "a11ycapture",

package/caps/mcp.json

@@ -1,6 +1,6 @@
 {
   "surface": "mcp",
-  "release": "2.0.82",
+  "release": "2.0.89",
   "protocolmajor": 2,
   "messages": [
     "browser.a11ytree",

package/caps/pagebridge.json

@@ -1,6 +1,6 @@
 {
   "surface": "pagebridge",
-  "release": "2.0.82",
+  "release": "2.0.89",
   "protocolmajor": 2,
   "messages": [
     "canvasdata",

package/caps/popup.json

@@ -1,6 +1,6 @@
 {
   "surface": "popup",
-  "release": "2.0.82",
+  "release": "2.0.89",
   "protocolmajor": 2,
   "messages": [
     "bridge",

package/caps/sidepanel.json

@@ -1,6 +1,6 @@
 {
   "surface": "sidepanel",
-  "release": "2.0.82",
+  "release": "2.0.89",
   "protocolmajor": 2,
   "messages": [
     "applyprofile",

package/checksums.txt

@@ -1,35 +1,35 @@
-bf6d78417801e502afda6e66973ec9ddd5417429aefc9ee36e699592010d775e  CHANGELOG.md
+97b22d9c793c9714936625b7746221e34bc2ded3ddefd9bd9e5a3dcaacd07480  CHANGELOG.md
 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986  LICENSE
-5cd53341fba07b9b817af048af8a8bc0075af5f4faacbbeb3cd79a7713891966  README.md
-245619ae46b24dc3c1e979283f5b09290dd6ccfc96331d153a7fc050cf55c187  bridge.d.ts
+9dfe38a3b873d150550355596958cc83eb440c6e8ac2e4038dfc5609fc0f8f82  README.md
+405557af158d437e151b7dd81cd37327a3dcf7f248252ffdc9fba94e38b9a1ef  bridge.d.ts
 a6d353d03e0e2d2cb116a057fcab7a2a6e3594290bcf66bc0ff5ea2656757c94  bridge.d.ts.map
-f599e1579c2ff7667e57009e343839e399bcdded622ef0f015d74ca368d99421  bridge.js
+e579abdfafce39fa6edfbdb4284bb0f42d22707d06bc02209007953c096b77ab  bridge.js
 9557339c2c57fb58212c3b90e8e5934ddba56066a2537d645e4cb34439fdc2ff  bun.d.ts
 601a75f547bb845b8a81fa59a21d560691561eb17d598acb3fd1f4ac8421e424  bun.d.ts.map
-4305015329e39ca7cfa6eb069418fa4d2b8040f62ef7c98aaec02d654c995ef0  bun.js
-b8a878af6ec9a9427ebe2cb37b854c96c020ccbf6c931408b7933e584025316e  caps/background.json
-0efc1da6d79168de2667d119066254ffcfb92c70e1b08186038b3a0e237d9b84  caps/cli.json
-1d76d0a00f0c7e9e69e8de222ed2539653333e38f8cafcc11334dc75971806ed  caps/library.json
-fa11caed061525f4e834304365950fe9dc623605000a7c881e302709adbcd5ff  caps/mcp.json
-f3feac6e4d189e49877f9aab94829cab125e5acfe279ff7af0e40f6ecd4eef0c  caps/pagebridge.json
-f3782e8141e777c48849248b576ee5a2ed174e80a3e242c7bd58d12666c72a38  caps/popup.json
-6c6882af34ac3d35d1c503be6c781e5967c161d4e3c8c974720ae7b8fde7bcca  caps/sidepanel.json
+13b5754f65bfde3b8d934ba60f70b05013626272dd2b08a02c34d5593d97190c  bun.js
+e72be837d5d4e0408f682277eb3f496ea2b16d58ea95cfd87ab8d6fec82f5363  caps/background.json
+f3771250d2c057d3a2574f3ca642a5275cc9fe9d234dc57886065e75c17ee8c0  caps/cli.json
+ba6fc4436be5bf0fedfd845ec08069043c3f3e42a0ffa70e84ec975a245bec0d  caps/library.json
+0e622f220d9e2ec8ec24b6d82d2ec0aa46ac4d789a9e95d9a715e0239fbff0a3  caps/mcp.json
+b4eb4f0414fe6199357080ba8212e18f86f8ec42869e2d61a1f712c8d2e3615d  caps/pagebridge.json
+205e44d57af93a6e81ab9799eb1f5f99f8d57f55a7c5f74fc394c485e13ceb0e  caps/popup.json
+693c1dbaeb66b05c3ff6de67e43e24ae13695e2102ff1ac72cee26fbb4738a3d  caps/sidepanel.json
 d35d001526d77c8f37371a39146587ea6ad86179167d82862284557adcd70f17  cli.d.ts
 f7bb3e1903702366effe6c081837b1060c26479740a808f11e0a08ea85e849c9  cli.d.ts.map
-38fabd9e0175d86d6d0a7878056c21bfcdd64e67b9aa75dd2cb569b4cd9e236a  cli.js
+2e4b82ba856754c3c5de6773adc10af62c80cb0ec298b0aacaadaf93e655e824  cli.js
 6d47383663f5efa626bfbc31977bc3df7cfb383725b243ce08057c059234e42f  companion.d.ts
 df25256c8176fc547298c2fb5666bcbf0f01bec284a0dc94f66350f6c29a38be  companion.d.ts.map
-84bfea78dee0a8c8779791edf2195960a71ede32d3c0658bae560350ee258543  companion.js
+e62e8235e9d7f02637e5fd7c23b9d223a411a7cfe5faa2d17869d169dc4277f5  companion.js
 85824f4b1603769f1c117b524925f05a42d37f2bcb41e9d4d377e5408615721f  crossbrowser.d.ts
 a7c4cd26ce8402a9ec1d11bd8dab4222d3c73a0e6f84915402c2fd60f8282d95  crossbrowser.d.ts.map
-1709e4c0409a0aa27d6f217143cdad2853988cd006b10e10945f97688ed141cc  crossbrowser.js
+bb42f476c3c24357959a09142ed5f6044342e808bbad4f9245cb19ba488c3a25  crossbrowser.js
 bc8f0d95430875b0fd8aff5c0744580d3dd07c5a0927aad4f2c54d34b83be016  dashdone.d.ts
 4d7e32ac75985463dd38a5c408e154276c902c1a1a9ba032d610bffc2b89eee5  dashdone.d.ts.map
-7bff937435553094d9d42f3017ec8d813841c444bc6536bc3487d8b6c8f3282d  dashdone.js
+16da312f6b0e1a3451c5f5b2c0a1b6971d82166bce45b92ebf30b417e7df8961  dashdone.js
 fea8d906a8c3b0608a9ae4b622c0b88c78d535ed151aa9db29922d817c387495  deno.d.ts
 3b07bf585688565ff818934d7d38f26c0188fcaf44ddbc8727ad3c76999b826c  deno.d.ts.map
-64d34a64bfd8950229512aca7508e4cdbb0187fe81d02911a1af7c6f9d4eaf00  deno.js
-ec5a90559fec52f4c13da1556bea2757b091233fc03f167baebaf03b3a2ba819  devthink.umd.js
+6c992f4ab22a781ef411167a4721fa390abe40d7b8b55588bee5dc236f9cf494  deno.js
+c4bdb97c0f2de238c977e1df7424bc87f7751ef2cd79f6070e099423cbdba6de  devthink.umd.js
 d8b6d1f6446da72d359dae978c5495244257dc70660415f8aaad96dd5075e241  fixtures/bun.ts
 702c21459e5d6d8d0b914a86bb6c3646a0be40e132b2d40cc04f2994cfbd1cf3  fixtures/cjs.js
 6bd268717a28a23405e5200264d47bb68aaf9c0d6d911674eaa22477bf19d003  fixtures/deno.ts
@@ -87,42 +87,42 @@ c93c417dbf3a43736845e653598624ee48e79f69bf93d36e3b19655e0a23b792  fixtures/recip
 6b757866f79c4a16098879f7cfffdb85557b7fb6ca4ec7b1c0cd1d1169c3e3c0  gallery.json
 16f6a0cdd78820a257d0fbb501784ed031dcffcdc4b9841d5279c8273e3776f4  hardening.d.ts
 eb153f3fa619ca8f59dd8abb598f33213a98026392854a32a7c305a73688bc95  hardening.d.ts.map
-11f664bf5d55cacb099bd63416afd9ce77e8726afe3c968fb2e18ce292abbb0a  hardening.js
+4afe22e183506bf7f037a1665ca8423c3b97231dab37de95571182070dcefa94  hardening.js
 2e560159a8c3b121c91d83545e0dcfa03b79399ed052bc23a425b2d355839362  headless.d.ts
 f6a7bced8d6b26f05ca971e70aaa177b8be9fb5a7e25a17ab5f2235a8f9ed590  headless.d.ts.map
-ec52493faeaaadfb14e398fff438e0877eb6b88187075e1f51839272cf538f11  headless.js
+643976324fca0f802762951e6e40209a8be34d6b818c73ccc2c5a615da9e61dc  headless.js
 7aed8c110caffd11caf27d63b993ad71328851905f4faeea2a8e1442eba8e257  http.d.ts
 b1ab1184756d92fb301a71d5a696ed4cd70bb4953f292002f01930c9e4893024  http.d.ts.map
-c33bc8484256892b433d88b48611ce296cc5ccd1e6541e7646a146322eba638d  http.js
-fec481f9e1510366b781bec6226ea710ef638b96db827bbce32c491f8f43bc93  index.cjs
+e09ebdc66ff6f211ab15b4b033120972cb2502ef05386b8799240aba77d73ee6  http.js
+253a91b948421f5edf94b58cbcf13701b220b045d2cf365bde9477320489d808  index.cjs
 31b2f3e15bb0b8cbef623b438f01bb8424909686424a98dd88366412d063d7ed  index.d.ts
 9398106d8b2277fb1c40892eff062a8cc8e605837d01f191fb783517367860fc  index.d.ts.map
-f8206ed4c6a778c6827db91cd67aad480c2da1827547fd4ef0274583ff7332a7  index.js
-f1794b4e9107dec1b80b58408034a41e131f86ca9c45eb70dae1f6ca777f42c3  index.neutral.js
-4ced06fb55c891f74fa63686330ed829873dd86bfe8b3cf6ebce89fc707ea3a0  manifest.json
+a4912f26cb66691ffebfe101bc88c7b5f2367b9ef54124bac19903b0fc073295  index.js
+7718b8fac1c82d710ca8e63abca0b5f77be703df78393cde29e22109c0f87fd3  index.neutral.js
+ccaf7c435d4be8bb6de0ceeaf7a77ebb0d0a1a4543f653dc0e51c0b6169624bb  manifest.json
 4a4a38d5c2f25f6e33d7fea853a074d4c82dfe5c721506ca4636b1d65c130f10  mcp.d.ts
 dd22f998da99d77485e863c4e7f1f906bb46dc03ee500efe99a5c09a935f4539  mcp.d.ts.map
-24f453f9904c183f7f44c6fb098a2e6f1edcf11b801038e7f7e8e116ae16b963  mcp.js
+ead8049e027abb1354a2a046cfad546495edc0aece0e0c8da093b8b809fa24bd  mcp.js
 ce98408283eccac2d435ac0e0ceb6bb5456e1eb70edb03a03e347a9f82f99c69  memory.d.ts
 9f4c19494bb1b2260a4d15c4c2dce4d2b3f5da96f07b8fbe9037f9b5fe31c8e1  memory.d.ts.map
-3506b18256a89244a768838893582791762a2f8a8e42cad16a48e35fe214d65a  memory.js
-8f2355994d16d8c2ba3bfb09cde536b8d50490431d9cf87a1c150e529b6f9d8c  nativehost.template.json
-3470e38fee61d7e4319a32db2bc450417649713eccb634981748ef635fa8c5d7  node.cjs
+3d05ba6e245e6653154af41874f844670714f4035b720f6a0c8a22372147812a  memory.js
+89cef88e6d9e4e2082b40ab560d06cad0e343e431f3b103c2964b1c203c0cdb4  nativehost.template.json
+f4f929fd3d614ed287230b77cc9f2d6ae83481a35e21669e5e6e937efa70318e  node.cjs
 705d895c58fe6816958f0fed4bef0a6f79e5fc521ab49d9cf83e0fbcd9d71afe  node.d.ts
 45f4394eca20fc889fe1128059ce20130d26a5ae0d89008a7ca93f0e4d52841b  node.d.ts.map
 5ec83bc409bed888ae13ab55d1f329ac630a3cf2f0db0e2414c28324329c055b  pack.d.ts
 619d43a5239d770c3382af3dd57e2588dd067ded81ca8c106d404e6709324a63  pack.d.ts.map
-ca02064cb4aadf607539420675f8ca690d61bfb386a57ca584eff2e14e19109b  pack.js
-6cdbf7e6cde8b761089559e2dc8df2565f0f3650e5aaede0d4e6a808c0be4e6d  package.json
+b75e210536a57401efa546f4331b0e38d181bfcf45473906a88ba86116a4920c  pack.js
+91bf70d00e530381a32a70b6b3488f2d76158e41087ad7506a5d851419545c88  package.json
 e3a2ed944a0bc1ef4943ee250a57e428ce49d781d30de6072571e0bc5d8c0259  policy.d.ts
 8f4fabc57c883e12ac7c7ab280749dc7c2d402c4fce401bef235c5e451b6975a  policy.d.ts.map
-3ac0dcd04fab1d7155e83fa61622651047422e0fe9679e199461730208afd332  policy.js
+f1db6e1b8baff970513cbcec7bd19db65a78c422193528ba31bb7deda3bad226  policy.js
 ea621ab35e610fbe8acb8e91f21ed2c74a6b20bba537c5982f31458d6878b90b  progress.d.ts
 33383e690d77faf6f5959846839603079e7f90e1e3dd17cbcc9a4e3fcf1c5641  progress.d.ts.map
-820f4dd135f630a814517f96a544fd81c83833213f15340bf3ebd90f27d7b943  progress.js
+dd8843733677bc4da53e03d33df4fe867a61f8cada8e56f192afc8c7c51cb74f  progress.js
 d2e54016f0cad51928752882d780066ccf2267d383deb2407ea7b2f97dfd26e7  protocol.d.ts
 487f8fc63061cb26cbda7f122409d9952810ba3a76b19d147c98d151d4f45d64  protocol.d.ts.map
-dcecaeaf5b3a95924a4bd04a53fe899ca0ddb183337c35d5c39c5343e75708d1  protocol.js
+a234253f0ee606d6e4c5ff06598a9c7dc998e7900b3ba1ef3b3bd960d3f3d391  protocol.js
 456c4a26fd65c728f2dcb9e615ec6e4d446d7e4228bfa3f70ce2b17ee3d6a2c2  schemas/audit.schema.json
 ea272aa6bf4df585ae1ca8ca63e36d7ec713c46187f37ed86ff3620a0e8509b2  schemas/capability.schema.json
 6e9d2291dc54f7d01463e5f70c8f0793d952a63f4096d61ee4dbc4bfd6f6b0a0  schemas/envelope.schema.json
@@ -135,8 +135,8 @@ d0e0365a7641c0127338c14a5318c4591dc598b7d2a36b7b2944219921d1ce4e  schemas/sessio
 5bb7d16534b52ca3a7171178065fb7b283947accd1b616ce89e330eb7a91b82e  schemas/tool.schema.json
 76f61b03cb67ab85b1bfd0f14014ff87ef5689975ab37e7b598ad6cdf837bafd  server.d.ts
 6d552a1dab4691bbf673148a5b5915017eed900ef10dc7573c0c1d7125fa4328  server.d.ts.map
-1d359b4960bef2f910abb954308fc71fab93005350a5211e5463214588669d20  server.js
-e07a41cfbfbe34cfb023844f44e90e0baacd325563961226d1dea28f9d5444d3  umd-example.html
+e076cc384731ab178fd62a5bd956810e0df6835b2f443f689d0cb8b69dd2bd21  server.js
+54426144e7e23b4abf0ea026b7b8951c7f2a18b5a5765d144739a248f4c913fb  umd-example.html
 16f66af22e038e4f9328420a0ed0ee34145ca79c938940e8c2e6d232e25a7c09  umd.d.ts
 ac25f7481155ac9321c5a657e7c4a53570bee8b3f63fe3527045260523a494c8  umd.d.ts.map
 58e21373cec5ade3e6698da5b36ecc2bf7e7e2f755c6fb5e3a6605b535b93985  manifest.json key

package/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // cli.ts
 import { createInterface } from "node:readline/promises";
@@ -569,7 +569,7 @@ function endcall(input) {
 }
 
 // version.ts
-var packageversion = "2.0.82";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/companion.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.82 companion — the optional native host of the native bridge — GPL-3.0-only — built with plain node, no native compiler */
+/*! devthink 2.0.89 companion — the optional native host of the native bridge — GPL-3.0-only — built with plain node, no native compiler */
 
 // companion.ts
 import { createHash, randomBytes } from "node:crypto";
@@ -16,7 +16,7 @@ var nativehosttemplatejson = `{
   "devthinkBanner": "devthink __devthink_version__ native host manifest template \u2014 GPL-3.0-only \u2014 the chromium host manifest of the optional companion process"
 }
 `;
-var companionbuild = "2.0.82";
+var companionbuild = "2.0.89";
 var companionprotocol = 1;
 var companionsurfaces = ["osdialog", "notification"];
 var maxnativemessage = 1024 * 1024;

package/crossbrowser.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // crossbrowser.ts
 var browserpolyfillflags = [

package/dashdone.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // dashdone.ts
 function dashboardviewerof(input) {

package/deno.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.82";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/devthink.umd.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 (function (root, factory) {
   if (typeof define === "function" && define.amd) { define([], factory); }
   else if (typeof module === "object" && module.exports) { module.exports = factory(); }
@@ -2365,7 +2365,7 @@ __export(umd_exports, {
 module.exports = __toCommonJS(umd_exports);
 
 // version.ts
-var packageversion = "2.0.82";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/hardening.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // security.ts
 var maskmarker = "[redacted]";

package/headless.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.82";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 
 // runtime.ts

package/http.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.82";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 
 // types.ts

package/index.cjs

@@ -1,4 +1,4 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 "use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -2356,7 +2356,7 @@ __export(cjs_exports, {
 module.exports = __toCommonJS(cjs_exports);
 
 // version.ts
-var packageversion = "2.0.82";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/index.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.82";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/index.neutral.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // debug.ts
 var cdpkinds = [
@@ -2010,7 +2010,7 @@ function sessionbundleof(input) {
 }
 
 // version.ts
-var packageversion = "2.0.82";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": 3,
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOEjO8Z0PDgQyfvawGcaO2j+o0GLCFTLNj7TkYC/Avo9l2NenMRq7gp90Nfd7E9MViv/OMcCKSYZ5unv12QPRtv31C+a5UQWDFAOP/cH5mwMd6hsayElrSoW8ta+FwFqmr9dIFkn7cQEU3YhZr4Gcbs+ycUHOxVgDA4NBKB0rQ6e9VW5LvTw0isRYUrqM+M72vKxHk9zUIYYn/LGPvottKBYi2GLr0PHSeC2UE+Shmq7vcFIXj6hDjvD4kLJ5sKoUllEcZ1TPuBcnHUQ9ndKA5iktXDQOIJCUJmi7a0YJ2PGg7fvpYfT9k0ai/qZ+pIoRfoOEwE01bPoDn7NjeYnNQIDAQAB",
   "name": "DevThink",
-  "version": "2.0.82",
+  "version": "2.0.89",
   "description": "A consent-first bridge for reviewed browser-agent tasks.",
   "icons": {
     "16": "icons/16.png",

package/mcp.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.82";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/memory.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // debug.ts
 function expireprofilerecords(input) {

package/nativehost.template.json

@@ -6,5 +6,5 @@
   "allowed_origins": [
     "chrome-extension://__generated_extension_id__/"
   ],
-  "devthinkBanner": "devthink 2.0.82 native host manifest template — GPL-3.0-only — the chromium host manifest of the optional companion process"
+  "devthinkBanner": "devthink 2.0.89 native host manifest template — GPL-3.0-only — the chromium host manifest of the optional companion process"
 }

package/node.cjs

@@ -1,4 +1,4 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 "use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -2357,7 +2357,7 @@ __export(node_exports, {
 module.exports = __toCommonJS(node_exports);
 
 // version.ts
-var packageversion = "2.0.82";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/pack.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // pack.ts
 function artifactchannels() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wenathlan/devthink",
-  "version": "2.0.82",
+  "version": "2.0.89",
   "description": "DevThink is the merged AI development workbench: the provider-owned gateway engine, the DevThink browser extension (the agent surface), the Antigravity engine and the workbench CLI — one product, one binary, one metadata.",
   "type": "module",
   "license": "GPL-3.0-only",
@@ -24,7 +24,7 @@
     "web-workbench"
   ],
   "dependencies": {
-    "@hono/node-server": "^2.1.3",
+    "@hono/node-server": "^2.1.4",
     "@libsql/client": "^0.18.0",
     "@prisma/adapter-libsql": "^7.10.0",
     "@prisma/client": "^7.10.0",
@@ -36,7 +36,7 @@
   },
   "engines": {
     "bun": ">=1.4.2 <2",
-    "node": ">=26.10.0 <27",
+    "node": ">=26.11.1 <27",
     "npm": ">=12.2.0 <13",
     "deno": ">=2.0.0 <3"
   },

package/policy.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // debug.ts
 var cdpdomains = ["Runtime", "Log", "Debugger", "DOM", "Network", "Page"];
@@ -350,7 +350,7 @@ function sessionrecordvalid(value) {
 }
 
 // version.ts
-var packageversion = "2.0.82";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/progress.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.82";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 
 // progress.ts

package/protocol.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // debug.ts
 var cdpdomains = ["Runtime", "Log", "Debugger", "DOM", "Network", "Page"];
@@ -1255,7 +1255,7 @@ function cronvalue(value, min, max, names) {
 }
 
 // version.ts
-var packageversion = "2.0.82";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 
 // types.ts

package/server.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.82 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {

package/umd-example.html

@@ -1,4 +1,4 @@
-<!-- devthink 2.0.82 umd example page — GPL-3.0-only -->
+<!-- devthink 2.0.89 umd example page — GPL-3.0-only -->
 <!doctype html>
 <html lang="en">
 <head>