@wenathlan/devthink 2.0.84 → 2.0.89

package/CHANGELOG.md

@@ -1,5 +1,64 @@
 # DevThink release notes
 
+## 2.0.89 — the sixth logic campaign
+
+### Changed
+
+| Area | Change |
+| --- | --- |
+| The cadria roots | The video and image home grows six pure logics with their node test companions: the tick clock of the exact frame math, the editing algebra of overwrite, insert, lift, extract, split, trim, roll, slip, slide and rate stretch, the separable blend formulas of the compositing standard with the W3C alpha composite, the color conversions across the sRGB transfer curve, the HSL and HSV cylinders, OKLab and the studio-swing YCbCr families, the influence and speed ease curves with the handle algebra and the mask planes of the add, subtract and intersect ops. |
+| The debonair roots | The audio home grows five pure logics with their node test companions: the beat grid of the tempo map, the remix plan of the onset segmentation, the sidechain ducking envelope, the loudness measure of the gated meter and the speech alignment of the energy split and the grid fit. |
+| The stealhead roots | The shooter closes its official logic gap with four pure logics and their node test companions: the spawn planner of the seeded fair points, the deterministic physics of the fixed step and the swept collision, the netcode of the delta snapshot and the input reconciliation and the hud logic of the vitals, the minimap, the hit markers and the killfeed. |
+
+## 2.0.88 — the green gates ride again
+
+### Fixed
+
+| Area | Change |
+| --- | --- |
+| The permission baseline | The permdiff baseline restamps against the release the package carries after every bump, so the deterministic suite reads a clean permission diff of 2.0.88 against 2.0.87 with zero added, removed or reordered entries and the readiness decision answers go across the ci, release and verify lanes. |
+| The dependency lock | The shell-quote override pins the transitive dependency of react-devtools-core to ^1.11.0 and the resolved lockfile carries 1.12.0, clearing the critical advisory from the osv and trivy scans the security lane runs over the lock. |
+
+## 2.0.87 — names without dots
+
+### Changed
+
+| Area | Change |
+| --- | --- |
+| The naming doctrine | The composite dotted filenames of the root logic flatten to plain lowercase names across the whole family — the dotted compound becomes a rare exception, so `clean.url.ts`, `json.policy.ts`, `calculator.logic.ts`, `media.probe.mp4.ts`, `sandbox.spec.ts`, `web.server.ts` and every sibling turn into `cleanurl.ts`, `jsonpolicy.ts`, `calculator.ts`, `mediaprobemp4.ts`, `sandboxprofile.ts`, `webserver.ts`, while the sse parser, the dnssec validator and the mixer graph keep their themes; imports, dynamic imports, test companions, headers, error strings and run scripts follow, and the framework configs keep their hyphen. |
+
+## 2.0.86 — the windows identity rides every app
+
+### Changed
+
+| Area | Change |
+| --- | --- |
+| The windows identity | Every application of the family now wears the real Windows 11 language read from the open-source clone: the `#202020` window floor with the Mica tint (`radial-gradient(#1a1f35 25%, #202020 100%)`), the Fluent shadow stacks (focused window `0 32px 64px`), the Fluent motion curves (decelerate entries, accelerate exits), the authentic system accent `#4cc2ff`/`#0067c0` on the spots Windows uses it (active indicators, toggles, focus underlines, selection, links) and the identity colors of each app reserved to their marks, tiles and content actions. |
+| The acrylic texture | The taskbar, the start menu, the tooltips, the session panel and every floating panel carry the noise grain of the Windows acrylic — an inline `feTurbulence` shader blended over the `saturate(3) blur(20px)` material, no image file, with the reduced-transparency guards answering with solid floors. |
+| The interaction | The Windows scrollbar recipe lands everywhere (invisible until hover, the thumb growing under the pointer), tooltips ride the acrylic, focus underlines the accent, selection and links follow the system accent, and the light theme answers with `#0067c0` and the light Mica. |
+| The pages | The page folders of the Sol theme ride their own names with zero nesting: the games, music studio and video studio pages live directly beside the other pages and the launcher carries its own named folder — every application of the family answers the flat contract with no subfolder inside a page. |
+| The json model | The typed decision layer grows the competitor practice: the confidence policies of the decision gates (band tables, honest measurement with the per-decision trail, the rollout ladder from shadow to active, the reference router that rotates the recipe when the hit rate drops) and the type-safe schema bridge (a declared schema compiles to the instruction the model answers with and to the validator that keeps it inside), with the irreversible-action guard wired to the chat turn as an opt-in that never blocks. |
+| The navigation | The desktop icons of the family open the deploy units themselves — the click resolves the mount base frozen at boot and loads the family application in full, so every icon answers where it lives. |
+
+### Fixed
+
+| Area | Change |
+| --- | --- |
+| The deploy base | The mount base freezes at boot instead of deriving from a restored workspace route, so cross-application links resolve against the real mount point on every host. |
+| The launcher routes | The catalog routes of the native apps follow the flat page folders. |
+
+## 2.0.85 — the gates answer go
+
+### Fixed
+
+| Area | Change |
+| --- | --- |
+| The changelog coverage | The lost 2.0.44 heading returns to the changelog restored verbatim from its own tag, so the doccheck changelog-coverage check reads every released version documented again and the candidate gates record the green run. |
+| The freeze artifact | The frozen contract record rides the current release again — the release cycle now walks the apifreeze sync with the version stamps, so the verification matrix answers 18 of 18 cells and the readiness review answers go with zero blocked gates. |
+| The probe evidence | The probe evidence trees (the browser screenshots and the profiles they carry) left the tracked contract — the flat-structure contract reads no duplicated content from idempotent probe reruns, and the ad-hoc probe outputs stay out of the tree. |
+| The dependency graph | The lockfiles ride the patched lines past the osv advisories: postcss-selector-parser to 7.1.6, source-map-js to 1.2.2 and proxy-addr to 2.0.8 through the overrides sections of the application and the saddle lock, keeping the osv, trivy and audit gates green without dropping a package. |
+| The publish lane | The container lane builds from a tag that carries every repair — the in-container suite sees the same green artifacts the ladder sees, so the ghcr image publishes with the rest of the family packages. |
+
 ## 2.0.84 — the theme rides trylle
 
 ### Changed
@@ -483,6 +542,8 @@
 | The four next shapes | Every site ships four next archives beside the complete site: the next normal (the plain standard template with no folder blocking), the next zai (the standard template the Z.AI platform accepts riding the gateway skill, the prisma schema and the deploy map), the next fifty (the same shape with the forbidden folders blocked and the deploy reading the root) and the next personalized (the house tree one hundred percent personalized). Every shape carries the platform file set at its root (.npmrc, .nvmrc, biome, tsconfig, vercel, netlify, wrangler, the dev vars example, the manifest) and the icons follow the blocking rule. |
 | The deploy order | The gateway skill teaches the order: the personalized first, then the zai, then the fifty, then the normal, with the four-step flow unchanged. |
 
+## 2.0.44 — the scan gates close the whole dependency graph
+
 ### Fixed
 
 | Area | Change |

package/README.md

@@ -204,7 +204,7 @@ the app root carries the theme roots and Sol/ carries the component folders
 
 ## OS view (dissolved devthink/os)
 
-The former Next.js DevThink OS (`devthink/os`, single route "/") is absorbed as the page folder `os/` and served at the `/os` route of this workbench. The folder owns its components (dotted names: `Os.tsx` anchor, `gateway.home`, `command.menu`, `app.header`, `aura.chat`, one `<app>.view` per family app) and its folder logics (`clean.url.ts`, `use.stored.state.ts`, `os.events.ts`, `os.types.ts`, `apps.ts`, `os.gateway.ts`, `reveal.ts`). The Next.js `page.tsx`/`layout.tsx` pair is not carried over: this is a Vite+wouter SPA, so the anchor is routed from `App.tsx`, the metadata lives in `index.html` and the engine stylesheet was merged into the "OS view" section of `index.css` with the `--sol-*` tokens remapped onto the `--dt-*` workbench tokens (the Sol design prevails).
+The former Next.js DevThink OS (`devthink/os`, single route "/") is absorbed as the page folder `os/` and served at the `/os` route of this workbench. The folder owns its components (dotted names: `Os.tsx` anchor, `gateway.home`, `command.menu`, `app.header`, `aura.chat`, one `<app>.view` per family app) and its folder logics (`cleanurl.ts`, `use.stored.state.ts`, `os.events.ts`, `os.types.ts`, `apps.ts`, `osgateway.ts`, `reveal.ts`). The Next.js `page.tsx`/`layout.tsx` pair is not carried over: this is a Vite+wouter SPA, so the anchor is routed from `App.tsx`, the metadata lives in `index.html` and the engine stylesheet was merged into the "OS view" section of `index.css` with the `--sol-*` tokens remapped onto the `--dt-*` workbench tokens (the Sol design prevails).
 
 Still-true rules of the os surface:
 

package/bridge.d.ts

@@ -428,7 +428,7 @@ import type { jsonrpcframe } from "./types.js";
 /** The native bridge protocol major version this build speaks: the handshake reports it, the upgrade path keeps compatibility for exactly one major version, and a host that speaks another major version degrades instead of breaking the run. */
 export declare const nativebridgeprotocolmajor = 1;
 /** The installer version the installer stamps into the install state; the upgrade path compares it so a manifest written by an older installer reports before it overwrites. */
-export declare const nativehostinstallerversion: "2.0.84";
+export declare const nativehostinstallerversion: "2.0.89";
 /** The generated extension id placeholder the host manifest template carries: the installer replaces the token with the extension id of the installed build, so the template never pins an identity the user did not generate. */
 export declare const nativehostidplaceholder = "__generated_extension_id__";
 /** The native messaging directory name of the chromium user profile: the installer writes the host manifest beside it, never into a system directory without the explicit flag. */

package/bridge.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.84";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 
 // types.ts

package/bun.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.84";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/caps/background.json

@@ -1,6 +1,6 @@
 {
   "surface": "background",
-  "release": "2.0.84",
+  "release": "2.0.89",
   "protocolmajor": 2,
   "messages": [
     "applyprofile",

package/caps/cli.json

@@ -1,6 +1,6 @@
 {
   "surface": "cli",
-  "release": "2.0.84",
+  "release": "2.0.89",
   "protocolmajor": 2,
   "messages": [
     "commands",

package/caps/library.json

@@ -1,6 +1,6 @@
 {
   "surface": "library",
-  "release": "2.0.84",
+  "release": "2.0.89",
   "protocolmajor": 2,
   "messages": [
     "a11ycapture",

package/caps/mcp.json

@@ -1,6 +1,6 @@
 {
   "surface": "mcp",
-  "release": "2.0.84",
+  "release": "2.0.89",
   "protocolmajor": 2,
   "messages": [
     "browser.a11ytree",

package/caps/pagebridge.json

@@ -1,6 +1,6 @@
 {
   "surface": "pagebridge",
-  "release": "2.0.84",
+  "release": "2.0.89",
   "protocolmajor": 2,
   "messages": [
     "canvasdata",

package/caps/popup.json

@@ -1,6 +1,6 @@
 {
   "surface": "popup",
-  "release": "2.0.84",
+  "release": "2.0.89",
   "protocolmajor": 2,
   "messages": [
     "bridge",

package/caps/sidepanel.json

@@ -1,6 +1,6 @@
 {
   "surface": "sidepanel",
-  "release": "2.0.84",
+  "release": "2.0.89",
   "protocolmajor": 2,
   "messages": [
     "applyprofile",

package/checksums.txt

@@ -1,35 +1,35 @@
-cafb4db13887dc944ef8cf071b0783ef69acc1a2d04d20b499122c79904be86f  CHANGELOG.md
+97b22d9c793c9714936625b7746221e34bc2ded3ddefd9bd9e5a3dcaacd07480  CHANGELOG.md
 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986  LICENSE
-5cd53341fba07b9b817af048af8a8bc0075af5f4faacbbeb3cd79a7713891966  README.md
-944297a77536a9a3f4beae0b455b80e67e046ad445ef961298311c3820a1f19f  bridge.d.ts
+9dfe38a3b873d150550355596958cc83eb440c6e8ac2e4038dfc5609fc0f8f82  README.md
+405557af158d437e151b7dd81cd37327a3dcf7f248252ffdc9fba94e38b9a1ef  bridge.d.ts
 a6d353d03e0e2d2cb116a057fcab7a2a6e3594290bcf66bc0ff5ea2656757c94  bridge.d.ts.map
-994bb79912e1bf584e5f4e6e81c4e41bdf2e4a98562931633b9b83e9347f48d0  bridge.js
+e579abdfafce39fa6edfbdb4284bb0f42d22707d06bc02209007953c096b77ab  bridge.js
 9557339c2c57fb58212c3b90e8e5934ddba56066a2537d645e4cb34439fdc2ff  bun.d.ts
 601a75f547bb845b8a81fa59a21d560691561eb17d598acb3fd1f4ac8421e424  bun.d.ts.map
-9928e479867972a8ef631bc17c219585a2172285eaa69634409a876ac4c66c86  bun.js
-0539749ef33022b47495285a824f024754cb4ec4f18d6e87b88638957cee8210  caps/background.json
-85c7ce4b59c35c616ade0cdd3d4d11686e5c04c28e3f51024298d8c324d3f68e  caps/cli.json
-480057cc03383794b3c753473de28827e3250a852d55bf7544b62ca46b293650  caps/library.json
-f607a3a0ca417d38b8115d4ba0f351a7c9dc310691dda8ac76c95a77d565b185  caps/mcp.json
-159f5027ec79d068a596a3ac7694ec9fa610388d42a051a3d4f72cae979f2421  caps/pagebridge.json
-91c1a34565a01126e16db86a717a7cda7224c98c314c2ee17aeda482fe7aefc6  caps/popup.json
-7a293821fcfd5472e1db6af5ed6cba916e8827e97dd58e6b742f3bdab25422a2  caps/sidepanel.json
+13b5754f65bfde3b8d934ba60f70b05013626272dd2b08a02c34d5593d97190c  bun.js
+e72be837d5d4e0408f682277eb3f496ea2b16d58ea95cfd87ab8d6fec82f5363  caps/background.json
+f3771250d2c057d3a2574f3ca642a5275cc9fe9d234dc57886065e75c17ee8c0  caps/cli.json
+ba6fc4436be5bf0fedfd845ec08069043c3f3e42a0ffa70e84ec975a245bec0d  caps/library.json
+0e622f220d9e2ec8ec24b6d82d2ec0aa46ac4d789a9e95d9a715e0239fbff0a3  caps/mcp.json
+b4eb4f0414fe6199357080ba8212e18f86f8ec42869e2d61a1f712c8d2e3615d  caps/pagebridge.json
+205e44d57af93a6e81ab9799eb1f5f99f8d57f55a7c5f74fc394c485e13ceb0e  caps/popup.json
+693c1dbaeb66b05c3ff6de67e43e24ae13695e2102ff1ac72cee26fbb4738a3d  caps/sidepanel.json
 d35d001526d77c8f37371a39146587ea6ad86179167d82862284557adcd70f17  cli.d.ts
 f7bb3e1903702366effe6c081837b1060c26479740a808f11e0a08ea85e849c9  cli.d.ts.map
-ed285b604667deca488291d206715c0ecb5b9576aab32b86137f1c9d44ddc210  cli.js
+2e4b82ba856754c3c5de6773adc10af62c80cb0ec298b0aacaadaf93e655e824  cli.js
 6d47383663f5efa626bfbc31977bc3df7cfb383725b243ce08057c059234e42f  companion.d.ts
 df25256c8176fc547298c2fb5666bcbf0f01bec284a0dc94f66350f6c29a38be  companion.d.ts.map
-e6b8e2ad054e07b617856522cdc578a618034c893230cd59213c7107e049fbec  companion.js
+e62e8235e9d7f02637e5fd7c23b9d223a411a7cfe5faa2d17869d169dc4277f5  companion.js
 85824f4b1603769f1c117b524925f05a42d37f2bcb41e9d4d377e5408615721f  crossbrowser.d.ts
 a7c4cd26ce8402a9ec1d11bd8dab4222d3c73a0e6f84915402c2fd60f8282d95  crossbrowser.d.ts.map
-ba0db04d152159b0b0522b3af15aa33fe52ac63c7f3924b0107d77dc07759805  crossbrowser.js
+bb42f476c3c24357959a09142ed5f6044342e808bbad4f9245cb19ba488c3a25  crossbrowser.js
 bc8f0d95430875b0fd8aff5c0744580d3dd07c5a0927aad4f2c54d34b83be016  dashdone.d.ts
 4d7e32ac75985463dd38a5c408e154276c902c1a1a9ba032d610bffc2b89eee5  dashdone.d.ts.map
-ab26a9022ee0c15124f2b1e1b2aca12004e998bb489be9a6e9865c78b01fe1b9  dashdone.js
+16da312f6b0e1a3451c5f5b2c0a1b6971d82166bce45b92ebf30b417e7df8961  dashdone.js
 fea8d906a8c3b0608a9ae4b622c0b88c78d535ed151aa9db29922d817c387495  deno.d.ts
 3b07bf585688565ff818934d7d38f26c0188fcaf44ddbc8727ad3c76999b826c  deno.d.ts.map
-08a8c7abc24d5c6b4730c7fccdc1c8e039a9376d83539ad10b6f0cad6b149aba  deno.js
-a2466fec7d978061064a795995e33412afe31dcbde1c12a9b3635b32decce591  devthink.umd.js
+6c992f4ab22a781ef411167a4721fa390abe40d7b8b55588bee5dc236f9cf494  deno.js
+c4bdb97c0f2de238c977e1df7424bc87f7751ef2cd79f6070e099423cbdba6de  devthink.umd.js
 d8b6d1f6446da72d359dae978c5495244257dc70660415f8aaad96dd5075e241  fixtures/bun.ts
 702c21459e5d6d8d0b914a86bb6c3646a0be40e132b2d40cc04f2994cfbd1cf3  fixtures/cjs.js
 6bd268717a28a23405e5200264d47bb68aaf9c0d6d911674eaa22477bf19d003  fixtures/deno.ts
@@ -87,42 +87,42 @@ c93c417dbf3a43736845e653598624ee48e79f69bf93d36e3b19655e0a23b792  fixtures/recip
 6b757866f79c4a16098879f7cfffdb85557b7fb6ca4ec7b1c0cd1d1169c3e3c0  gallery.json
 16f6a0cdd78820a257d0fbb501784ed031dcffcdc4b9841d5279c8273e3776f4  hardening.d.ts
 eb153f3fa619ca8f59dd8abb598f33213a98026392854a32a7c305a73688bc95  hardening.d.ts.map
-0902bd8580e2ad6d434119366857cda441a74cd7e6cc51fb5f1ef6e500cef89e  hardening.js
+4afe22e183506bf7f037a1665ca8423c3b97231dab37de95571182070dcefa94  hardening.js
 2e560159a8c3b121c91d83545e0dcfa03b79399ed052bc23a425b2d355839362  headless.d.ts
 f6a7bced8d6b26f05ca971e70aaa177b8be9fb5a7e25a17ab5f2235a8f9ed590  headless.d.ts.map
-eff5475060419e8cd19303c6277779706060940e952c736a720cae257a923b30  headless.js
+643976324fca0f802762951e6e40209a8be34d6b818c73ccc2c5a615da9e61dc  headless.js
 7aed8c110caffd11caf27d63b993ad71328851905f4faeea2a8e1442eba8e257  http.d.ts
 b1ab1184756d92fb301a71d5a696ed4cd70bb4953f292002f01930c9e4893024  http.d.ts.map
-6d41870ab8a330aabd550b09ce60110fb1e1e3bf64964fab79c66f3eef9ba2c2  http.js
-58e5caecf2e2c8af29771af38c0771f2cfec18971af67646481945123df09345  index.cjs
+e09ebdc66ff6f211ab15b4b033120972cb2502ef05386b8799240aba77d73ee6  http.js
+253a91b948421f5edf94b58cbcf13701b220b045d2cf365bde9477320489d808  index.cjs
 31b2f3e15bb0b8cbef623b438f01bb8424909686424a98dd88366412d063d7ed  index.d.ts
 9398106d8b2277fb1c40892eff062a8cc8e605837d01f191fb783517367860fc  index.d.ts.map
-a211628b2086aa5c8942fa74ddf1b5b023d7f52e848910934fd3825c1fc7650f  index.js
-b62d8117874310bab75b944591e21e2aea655ce2f6baec6be5218212099ad465  index.neutral.js
-6d7be835b4233bd544f66810b9c15c8f3e6c809cb52fc6a992e5f818203bc1d0  manifest.json
+a4912f26cb66691ffebfe101bc88c7b5f2367b9ef54124bac19903b0fc073295  index.js
+7718b8fac1c82d710ca8e63abca0b5f77be703df78393cde29e22109c0f87fd3  index.neutral.js
+ccaf7c435d4be8bb6de0ceeaf7a77ebb0d0a1a4543f653dc0e51c0b6169624bb  manifest.json
 4a4a38d5c2f25f6e33d7fea853a074d4c82dfe5c721506ca4636b1d65c130f10  mcp.d.ts
 dd22f998da99d77485e863c4e7f1f906bb46dc03ee500efe99a5c09a935f4539  mcp.d.ts.map
-15ba539c31fc92748572453ee83e3b4813d0374cde1ee8e13362e32aaf422af1  mcp.js
+ead8049e027abb1354a2a046cfad546495edc0aece0e0c8da093b8b809fa24bd  mcp.js
 ce98408283eccac2d435ac0e0ceb6bb5456e1eb70edb03a03e347a9f82f99c69  memory.d.ts
 9f4c19494bb1b2260a4d15c4c2dce4d2b3f5da96f07b8fbe9037f9b5fe31c8e1  memory.d.ts.map
-c010f12733f72e9e70d7348d5d4904365fcad594ebd1e1ddf53bdb7608045469  memory.js
-abe72e88c2a3741e9ff5946b13a07a1aa7c99fc63fb8d691e9bc23fb66770005  nativehost.template.json
-c1bdff10a989a4d0fae2c077c4036d509a2a62ad5abdbdd32750516cce19e994  node.cjs
+3d05ba6e245e6653154af41874f844670714f4035b720f6a0c8a22372147812a  memory.js
+89cef88e6d9e4e2082b40ab560d06cad0e343e431f3b103c2964b1c203c0cdb4  nativehost.template.json
+f4f929fd3d614ed287230b77cc9f2d6ae83481a35e21669e5e6e937efa70318e  node.cjs
 705d895c58fe6816958f0fed4bef0a6f79e5fc521ab49d9cf83e0fbcd9d71afe  node.d.ts
 45f4394eca20fc889fe1128059ce20130d26a5ae0d89008a7ca93f0e4d52841b  node.d.ts.map
 5ec83bc409bed888ae13ab55d1f329ac630a3cf2f0db0e2414c28324329c055b  pack.d.ts
 619d43a5239d770c3382af3dd57e2588dd067ded81ca8c106d404e6709324a63  pack.d.ts.map
-98a95885eade9566ce94e40194e8af1eab9f9f1cd5f39edacebdeb787fded952  pack.js
-5d458b4cc3a6494f34d65cb87a3c8e7b18776f140cba3ef3eca4db367b3722e5  package.json
+b75e210536a57401efa546f4331b0e38d181bfcf45473906a88ba86116a4920c  pack.js
+91bf70d00e530381a32a70b6b3488f2d76158e41087ad7506a5d851419545c88  package.json
 e3a2ed944a0bc1ef4943ee250a57e428ce49d781d30de6072571e0bc5d8c0259  policy.d.ts
 8f4fabc57c883e12ac7c7ab280749dc7c2d402c4fce401bef235c5e451b6975a  policy.d.ts.map
-4cfad9dd9af6a7f5339de6056e71166909d7e9155818ce37106cd40f586c42d6  policy.js
+f1db6e1b8baff970513cbcec7bd19db65a78c422193528ba31bb7deda3bad226  policy.js
 ea621ab35e610fbe8acb8e91f21ed2c74a6b20bba537c5982f31458d6878b90b  progress.d.ts
 33383e690d77faf6f5959846839603079e7f90e1e3dd17cbcc9a4e3fcf1c5641  progress.d.ts.map
-6ca02c8ebb08d2488bc8c6fc2a9fcba3900d6b2db86863d1ced7bfa91c15397a  progress.js
+dd8843733677bc4da53e03d33df4fe867a61f8cada8e56f192afc8c7c51cb74f  progress.js
 d2e54016f0cad51928752882d780066ccf2267d383deb2407ea7b2f97dfd26e7  protocol.d.ts
 487f8fc63061cb26cbda7f122409d9952810ba3a76b19d147c98d151d4f45d64  protocol.d.ts.map
-f3263ad7888c388b54161763e36aecd9dcc464aecab28cd99cf5eba305c9b653  protocol.js
+a234253f0ee606d6e4c5ff06598a9c7dc998e7900b3ba1ef3b3bd960d3f3d391  protocol.js
 456c4a26fd65c728f2dcb9e615ec6e4d446d7e4228bfa3f70ce2b17ee3d6a2c2  schemas/audit.schema.json
 ea272aa6bf4df585ae1ca8ca63e36d7ec713c46187f37ed86ff3620a0e8509b2  schemas/capability.schema.json
 6e9d2291dc54f7d01463e5f70c8f0793d952a63f4096d61ee4dbc4bfd6f6b0a0  schemas/envelope.schema.json
@@ -135,8 +135,8 @@ d0e0365a7641c0127338c14a5318c4591dc598b7d2a36b7b2944219921d1ce4e  schemas/sessio
 5bb7d16534b52ca3a7171178065fb7b283947accd1b616ce89e330eb7a91b82e  schemas/tool.schema.json
 76f61b03cb67ab85b1bfd0f14014ff87ef5689975ab37e7b598ad6cdf837bafd  server.d.ts
 6d552a1dab4691bbf673148a5b5915017eed900ef10dc7573c0c1d7125fa4328  server.d.ts.map
-c4b893aebc2f2af70db9085c148c94dee449ee16a37d764ee694dbf402af254b  server.js
-e8425969b90750fbbfdef2ad1251e27a8e871a3f964141eeb7b79227c090dd22  umd-example.html
+e076cc384731ab178fd62a5bd956810e0df6835b2f443f689d0cb8b69dd2bd21  server.js
+54426144e7e23b4abf0ea026b7b8951c7f2a18b5a5765d144739a248f4c913fb  umd-example.html
 16f66af22e038e4f9328420a0ed0ee34145ca79c938940e8c2e6d232e25a7c09  umd.d.ts
 ac25f7481155ac9321c5a657e7c4a53570bee8b3f63fe3527045260523a494c8  umd.d.ts.map
 58e21373cec5ade3e6698da5b36ecc2bf7e7e2f755c6fb5e3a6605b535b93985  manifest.json key

package/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // cli.ts
 import { createInterface } from "node:readline/promises";
@@ -569,7 +569,7 @@ function endcall(input) {
 }
 
 // version.ts
-var packageversion = "2.0.84";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/companion.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.84 companion — the optional native host of the native bridge — GPL-3.0-only — built with plain node, no native compiler */
+/*! devthink 2.0.89 companion — the optional native host of the native bridge — GPL-3.0-only — built with plain node, no native compiler */
 
 // companion.ts
 import { createHash, randomBytes } from "node:crypto";
@@ -16,7 +16,7 @@ var nativehosttemplatejson = `{
   "devthinkBanner": "devthink __devthink_version__ native host manifest template \u2014 GPL-3.0-only \u2014 the chromium host manifest of the optional companion process"
 }
 `;
-var companionbuild = "2.0.84";
+var companionbuild = "2.0.89";
 var companionprotocol = 1;
 var companionsurfaces = ["osdialog", "notification"];
 var maxnativemessage = 1024 * 1024;

package/crossbrowser.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // crossbrowser.ts
 var browserpolyfillflags = [

package/dashdone.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // dashdone.ts
 function dashboardviewerof(input) {

package/deno.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.84";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/devthink.umd.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 (function (root, factory) {
   if (typeof define === "function" && define.amd) { define([], factory); }
   else if (typeof module === "object" && module.exports) { module.exports = factory(); }
@@ -2365,7 +2365,7 @@ __export(umd_exports, {
 module.exports = __toCommonJS(umd_exports);
 
 // version.ts
-var packageversion = "2.0.84";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/hardening.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // security.ts
 var maskmarker = "[redacted]";

package/headless.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.84";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 
 // runtime.ts

package/http.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.84";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 
 // types.ts

package/index.cjs

@@ -1,4 +1,4 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 "use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -2356,7 +2356,7 @@ __export(cjs_exports, {
 module.exports = __toCommonJS(cjs_exports);
 
 // version.ts
-var packageversion = "2.0.84";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/index.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.84";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/index.neutral.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // debug.ts
 var cdpkinds = [
@@ -2010,7 +2010,7 @@ function sessionbundleof(input) {
 }
 
 // version.ts
-var packageversion = "2.0.84";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": 3,
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOEjO8Z0PDgQyfvawGcaO2j+o0GLCFTLNj7TkYC/Avo9l2NenMRq7gp90Nfd7E9MViv/OMcCKSYZ5unv12QPRtv31C+a5UQWDFAOP/cH5mwMd6hsayElrSoW8ta+FwFqmr9dIFkn7cQEU3YhZr4Gcbs+ycUHOxVgDA4NBKB0rQ6e9VW5LvTw0isRYUrqM+M72vKxHk9zUIYYn/LGPvottKBYi2GLr0PHSeC2UE+Shmq7vcFIXj6hDjvD4kLJ5sKoUllEcZ1TPuBcnHUQ9ndKA5iktXDQOIJCUJmi7a0YJ2PGg7fvpYfT9k0ai/qZ+pIoRfoOEwE01bPoDn7NjeYnNQIDAQAB",
   "name": "DevThink",
-  "version": "2.0.84",
+  "version": "2.0.89",
   "description": "A consent-first bridge for reviewed browser-agent tasks.",
   "icons": {
     "16": "icons/16.png",

package/mcp.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.84";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/memory.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // debug.ts
 function expireprofilerecords(input) {

package/nativehost.template.json

@@ -6,5 +6,5 @@
   "allowed_origins": [
     "chrome-extension://__generated_extension_id__/"
   ],
-  "devthinkBanner": "devthink 2.0.84 native host manifest template — GPL-3.0-only — the chromium host manifest of the optional companion process"
+  "devthinkBanner": "devthink 2.0.89 native host manifest template — GPL-3.0-only — the chromium host manifest of the optional companion process"
 }

package/node.cjs

@@ -1,4 +1,4 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 "use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -2357,7 +2357,7 @@ __export(node_exports, {
 module.exports = __toCommonJS(node_exports);
 
 // version.ts
-var packageversion = "2.0.84";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/pack.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // pack.ts
 function artifactchannels() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wenathlan/devthink",
-  "version": "2.0.84",
+  "version": "2.0.89",
   "description": "DevThink is the merged AI development workbench: the provider-owned gateway engine, the DevThink browser extension (the agent surface), the Antigravity engine and the workbench CLI — one product, one binary, one metadata.",
   "type": "module",
   "license": "GPL-3.0-only",
@@ -24,7 +24,7 @@
     "web-workbench"
   ],
   "dependencies": {
-    "@hono/node-server": "^2.1.3",
+    "@hono/node-server": "^2.1.4",
     "@libsql/client": "^0.18.0",
     "@prisma/adapter-libsql": "^7.10.0",
     "@prisma/client": "^7.10.0",
@@ -36,7 +36,7 @@
   },
   "engines": {
     "bun": ">=1.4.2 <2",
-    "node": ">=26.10.0 <27",
+    "node": ">=26.11.1 <27",
     "npm": ">=12.2.0 <13",
     "deno": ">=2.0.0 <3"
   },

package/policy.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // debug.ts
 var cdpdomains = ["Runtime", "Log", "Debugger", "DOM", "Network", "Page"];
@@ -350,7 +350,7 @@ function sessionrecordvalid(value) {
 }
 
 // version.ts
-var packageversion = "2.0.84";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/progress.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // version.ts
-var packageversion = "2.0.84";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 
 // progress.ts

package/protocol.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 
 // debug.ts
 var cdpdomains = ["Runtime", "Log", "Debugger", "DOM", "Network", "Page"];
@@ -1255,7 +1255,7 @@ function cronvalue(value, min, max, names) {
 }
 
 // version.ts
-var packageversion = "2.0.84";
+var packageversion = "2.0.89";
 var protocolmajor = 2;
 
 // types.ts

package/server.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.84 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
+/*! devthink 2.0.89 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/devthink */
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {

package/umd-example.html

@@ -1,4 +1,4 @@
-<!-- devthink 2.0.84 umd example page — GPL-3.0-only -->
+<!-- devthink 2.0.89 umd example page — GPL-3.0-only -->
 <!doctype html>
 <html lang="en">
 <head>