@wenathlan/extension 2.0.10 → 2.0.11

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 2.0.11
+
+This release is the sixth rung of the bug-fix ladder, and it closes the two code scanning alerts the re-analysis of the security page surfaced beside the two the 2.0.7 rung already closed: the accessibility sweep script carried a replacement-expression sanitizer pair CodeQL refuses — the script stripper of `withoutscripts` (a `[\s\S]*?` alternation over unterminated blocks) flagged as a bad tag filter, and the inline tag strip of the button name scan (a `<[^>]*>` global replace) flagged as incomplete multi character sanitization. Both strips now walk plain index arithmetic the same linear way the tabular preface scans of the 2.0.7 rung read their markers: the script stripper finds each `<script` opening with its word boundary, walks to the closing tag and cuts the whole block (an unterminated block still strips to the fragment end exactly the documented convention), and the new `striptags` helper cuts every complete tag from the button text while an unterminated angle keeps its literal text the way the match never closed.
+
+The behavior stays identical — the sweep answers the same ten of ten checks green over the same built surfaces, the fixtures the strippers read parse to the same fragments, and no test changed — while the code scanning page answers zero open alerts once the analysis of this commit lands: the two polynomial regular expression alerts closed at the 2.0.7 linear scans and these two sanitizer alerts close here. The version stamps 2.0.11 land across the metadata family with the apifreeze artifact re-frozen and the permission baseline recorded, and the ladder rides beneath: the 2.0.9 browser flow fixes and the 2.0.10 emulation ceilings ship in this release.
+
 ## 2.0.10
 
 This release is the fifth rung of the bug-fix ladder, and it closes the container channel the 2.0.8 and 2.0.9 runs could not: the multi platform build the operator demanded (the four arch/os entries of linux/amd64 and linux/arm64 beside the per platform attestation manifests) ran its full validation chain on both legs, and the native amd64 leg went green in seventy four seconds — but the arm64 leg runs interpreted through qemu, and the interpreter answers the same green suite three to ten times slower, so fifteen tests crossed their native ceilings honestly: fourteen hit the five second vitest default timeout (the esbuild bundle builds of the library modes family, the v1 sunset negotiation, the publishing pipeline workflow check and the readiness gate walk) and the tab pattern linearity test crossed its one second performance budget while staying linear — the algorithm held, the emulated second is simply not a native second.

package/README.md

@@ -2,13 +2,13 @@
 
 Devthink is a **consent-first browser-agent bridge** distributed as a TypeScript library and a Chromium Manifest V3 extension. It turns a user-provided browser objective into a bounded, reviewable plan. The user must start the active-tab session and approve the plan before any page action reaches the browser.
 
-Version: **2.0.10**. License: **GPL-3.0-only**. The repository is `wenathlan/extension`; the npm-compatible scoped package identifier is `@wenathlan/extension`.
+Version: **2.0.11**. License: **GPL-3.0-only**. The repository is `wenathlan/extension`; the npm-compatible scoped package identifier is `@wenathlan/extension`.
 
 **Platform release status:** 2.0.0 is the closing release of the chain from 1.1.31 — the agentic browser platform with the frozen protocolv2 contract, the deprecation window closed (protocol major two only, with the migrateplan bridge and `docs/migrationguide.md` carrying version one assets forward), the example gallery of thirty six runnable recipes (`docs/gallery.md`), the readiness review with the go decision (`docs/readiness.md`) and every candidate gate green with its evidence in `tests/artifacts/`. The library ships on five package channels — npm, maven, nuget, the container image and the rubygems gem. The full chain from 1.1.31 to 2.0.0 lives in `docs/releasenotes.md`.
 
 ## What it does
 
-| Capability | Behavior in 2.0.10 |
+| Capability | Behavior in 2.0.11 |
 | --- | --- |
 | Active-tab session | The user starts a short-lived session for one HTTPS tab and one origin; the session records its origin grants. |
 | Page observation | The extension captures the complete semantic inventory: every interactive element, every form control, every select option and the full page text. |
@@ -97,7 +97,7 @@ The endpoint field intentionally has no default URL. Enter a URL such as `https:
 
 ```json
 {
-  "version": "2.0.10",
+  "version": "2.0.11",
   "objective": "User supplied objective",
   "session": { "id": "uuid", "tabid": 1, "origin": "https://example.com" },
   "observation": { "schemaversion": 3, "url": "https://example.com/path", "interactive": [] },

package/bridge.d.ts

@@ -428,7 +428,7 @@ import type { jsonrpcframe } from "./types.js";
 /** The native bridge protocol major version this build speaks: the handshake reports it, the upgrade path keeps compatibility for exactly one major version, and a host that speaks another major version degrades instead of breaking the run. */
 export declare const nativebridgeprotocolmajor = 1;
 /** The installer version the installer stamps into the install state; the upgrade path compares it so a manifest written by an older installer reports before it overwrites. */
-export declare const nativehostinstallerversion: "2.0.10";
+export declare const nativehostinstallerversion: "2.0.11";
 /** The generated extension id placeholder the host manifest template carries: the installer replaces the token with the extension id of the installed build, so the template never pins an identity the user did not generate. */
 export declare const nativehostidplaceholder = "__generated_extension_id__";
 /** The native messaging directory name of the chromium user profile: the installer writes the host manifest beside it, never into a system directory without the explicit flag. */

package/bridge.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 
 // version.ts
-var packageversion = "2.0.10";
+var packageversion = "2.0.11";
 var protocolmajor = 2;
 
 // types.ts

package/bun.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 
 // version.ts
-var packageversion = "2.0.10";
+var packageversion = "2.0.11";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/caps/background.json

@@ -1,6 +1,6 @@
 {
   "surface": "background",
-  "release": "2.0.10",
+  "release": "2.0.11",
   "protocolmajor": 2,
   "messages": [
     "applyprofile",

package/caps/cli.json

@@ -1,6 +1,6 @@
 {
   "surface": "cli",
-  "release": "2.0.10",
+  "release": "2.0.11",
   "protocolmajor": 2,
   "messages": [
     "commands",

package/caps/library.json

@@ -1,6 +1,6 @@
 {
   "surface": "library",
-  "release": "2.0.10",
+  "release": "2.0.11",
   "protocolmajor": 2,
   "messages": [
     "a11ycapture",

package/caps/mcp.json

@@ -1,6 +1,6 @@
 {
   "surface": "mcp",
-  "release": "2.0.10",
+  "release": "2.0.11",
   "protocolmajor": 2,
   "messages": [
     "browser.a11ytree",

package/caps/pagebridge.json

@@ -1,6 +1,6 @@
 {
   "surface": "pagebridge",
-  "release": "2.0.10",
+  "release": "2.0.11",
   "protocolmajor": 2,
   "messages": [
     "canvasdata",

package/caps/popup.json

@@ -1,6 +1,6 @@
 {
   "surface": "popup",
-  "release": "2.0.10",
+  "release": "2.0.11",
   "protocolmajor": 2,
   "messages": [
     "bridge",

package/caps/sidepanel.json

@@ -1,6 +1,6 @@
 {
   "surface": "sidepanel",
-  "release": "2.0.10",
+  "release": "2.0.11",
   "protocolmajor": 2,
   "messages": [
     "applyprofile",

package/checksums.txt

@@ -1,35 +1,35 @@
-ad5d08a8e441c2a9a5feabec309347323894da354eae4957c74470513b235692  CHANGELOG.md
+fd21d1a73d3406b9f6417e42499a8cf7785732c25c5af86e1e384fec5d2fc12d  CHANGELOG.md
 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986  LICENSE
-56119e4f63d1ada0fd39192af07ac5b3408b827cad7133cf154391946f9f6e84  README.md
-219e49ca89ec21fba8bae75194a37fb85306b4150f60c19e2a0a3501726000a7  bridge.d.ts
+4dad64c8ab0ceba5a6765cacc486c458a0783534eb7e3f55c77701eafef62870  README.md
+56a41ec46f1a4700278f12413334af1d082ceb73ca332fac3fd5bcc6b666f7f0  bridge.d.ts
 b94ed5a7b48ce8cc8f2a436d17aab70281711d1d870715dec234d9b9bafacae7  bridge.d.ts.map
-6d530f4948ab8e844700a950703152fc28e601048a6baaa43745b70559472e01  bridge.js
+e7b930447346cf6374cea6ed54ee31bbc4fce3b62cb209067097c0ea38d39b86  bridge.js
 9557339c2c57fb58212c3b90e8e5934ddba56066a2537d645e4cb34439fdc2ff  bun.d.ts
 12cf6503feb825b4aa5e86303eef9b1bc7cc99358b16e2821dd6ecc01adf1ea8  bun.d.ts.map
-077cf566ad56c3c6be83442d0d5c6b6a370b144181ec458ef0a3daee093c8427  bun.js
-3c6495ca11b2d3f88b4e4652e30b4c23abc1f16f96ba0d200ffa2e42703fb1ac  caps/background.json
-8353b63be2a7a9fe19dc6e3194978ec9a3f0f053b6a5482ed2d2a930454cab91  caps/cli.json
-c38a95472ecedbb7cee81ce39e976c4be7e5af2f19967952030903cb1a47563a  caps/library.json
-208e8048c5c373daf0a29882f83b6c9e242047d6417cea46ee48840756cb850c  caps/mcp.json
-b84883eb3e6c479a1af082578a78de31b93675717832086cba87d989868263b1  caps/pagebridge.json
-e2f5375c035c84851c8154c1719132529b5756f58d8baa87393c9a857dd4f84a  caps/popup.json
-d77b2a9a12e7a6a82dc1f033fc9db0204378a6ec6dc4a2e122fd6ab5af28d2cd  caps/sidepanel.json
+2303fc14698cce0c6d6384dcf2f19d3bda09e81ae3cd571c69124d52c027f644  bun.js
+ea4f977739d1858f0546f2c35e1a50e4c04fee986e45095218618de06f3d8979  caps/background.json
+c5e735966747ad00f0f2af34484a235dc8928efcd4591279cfa5de7f132bb968  caps/cli.json
+3297e8423b8e28f8fc41baa6c03414ee14eb83e6e13ebf0758d6446bc033ac9a  caps/library.json
+a8855daa3170482d103836684e258e4f611ce041b0a540cb28cc4d515fdf82c0  caps/mcp.json
+e1a247c2337d42dcf6e3739784fbd6ecf14525e7008d050ce4603195fd89d41e  caps/pagebridge.json
+b48c5b5304e38f5859fa177fcebd9affa1fd2c021cc8386050223e55cea655b1  caps/popup.json
+84955895d725286420a59d874af14ec8afd688ecba611575c082762dbafc3361  caps/sidepanel.json
 e7e6ef1e0354d12e5d81d87d2a99cae14e9f5238ccaecff8a98d8f7923fe6704  cli.d.ts
 9ff853b4bb864c68733d29abc408f79a212994bc72533c9324bf8ea8226b3bf7  cli.d.ts.map
-2a27b2921f0d3b3db5352e1d7863ffa7d78bf5c97c93cc75d045f7ab3483b35f  cli.js
+ba91caec128fb4f97b11eea96d86d08127caa407569710d0b8f3ee9588145fae  cli.js
 6d47383663f5efa626bfbc31977bc3df7cfb383725b243ce08057c059234e42f  companion.d.ts
 8839691d2e7362e7db2a198c869904ee05ffda66ac8ee30b0bec53f089a6e895  companion.d.ts.map
-0318731c71ea64812834ef89fbf46c0d426678fff1c3da61a006666beae3c02d  companion.js
+7a23f67760fbd25446e12992a2910981ac54077905b9a23b342b22f630fd3b00  companion.js
 0798e3f62c739f91718389f379f15abfaad3618607b0d1daabf7b736cdcfe014  crossbrowser.d.ts
 31c6cbef5f64c05662fd9c970e967d4e9afce057d0a0d4925486c3595a009563  crossbrowser.d.ts.map
-f920c06977020811523939978b385ca7c922b5f8993662c68abd137603249cf6  crossbrowser.js
+7181445c7ee72cd897b9621cec81a819f0f25225ec1dff34f602148503eba003  crossbrowser.js
 bc8f0d95430875b0fd8aff5c0744580d3dd07c5a0927aad4f2c54d34b83be016  dashdone.d.ts
 64e8394c9c4c0c1c8810ef8b0a384c2dafc920660f0ff5cce114b4a26b240b12  dashdone.d.ts.map
-25cb5043d591afee7234367519c270a372d982fda6cf7018316286bab3631345  dashdone.js
+b67e34865604202c437202dcc692765d75767d2e03c0bb3dbb02554f6a288061  dashdone.js
 fea8d906a8c3b0608a9ae4b622c0b88c78d535ed151aa9db29922d817c387495  deno.d.ts
 d4ec3fbf41854fa8117b0d68d11429e4a5f547213e79ee0e514aca9324aee80a  deno.d.ts.map
-8cfb3e8fac909f8f978a1787cf26bcc16ce0f50cd352dee050589fb68ec74e30  deno.js
-61e741d0555427f67669f59dde9775d1c05615ae2fd5a1a0093d9e48b1546f6e  devthink.umd.js
+7f2e3ba9a2fa386abcbdcca1bf4ede7fe85caf53898153527615a9bb05912ebd  deno.js
+d8ecba4a246ca56bcd7e6921e54bbed6f307c0f266453b8f304d1194e646de7b  devthink.umd.js
 d8b6d1f6446da72d359dae978c5495244257dc70660415f8aaad96dd5075e241  fixtures/bun.ts
 702c21459e5d6d8d0b914a86bb6c3646a0be40e132b2d40cc04f2994cfbd1cf3  fixtures/cjs.js
 6bd268717a28a23405e5200264d47bb68aaf9c0d6d911674eaa22477bf19d003  fixtures/deno.ts
@@ -87,45 +87,45 @@ c93c417dbf3a43736845e653598624ee48e79f69bf93d36e3b19655e0a23b792  fixtures/recip
 6b757866f79c4a16098879f7cfffdb85557b7fb6ca4ec7b1c0cd1d1169c3e3c0  gallery.json
 04ce1093ffee4722c8af9a71368ea78d20084473f13fedcf5815c0bc92aca53f  gateway.d.ts
 a1556096ab4ea705fdc92c6f223541c61fded19137cb5b02eb653066cefafa75  gateway.d.ts.map
-3f8d16e7c11e6b4b2c748b83bbf0f4900c3a587cfbd7082148a9b6d65c11f604  gateway.js
+6f5381136d2937cc4214c1396350be6dbb746478d0e8eda83fded0486013390a  gateway.js
 16f6a0cdd78820a257d0fbb501784ed031dcffcdc4b9841d5279c8273e3776f4  hardening.d.ts
 20c2435cd499f265e70881c868456950ca49ce52183dbf2412ba39be2ac843e1  hardening.d.ts.map
-49f1b310777a327e5bc280684755dc01f9cc366a17f270a7bebbfd5ef2c34e9b  hardening.js
+da61964d214ef288686d3c21807ae041a13d1f66a3856a5b5f512d4fd89e9475  hardening.js
 2e560159a8c3b121c91d83545e0dcfa03b79399ed052bc23a425b2d355839362  headless.d.ts
 0f695301ed2f81fed8c065eafd351f3d966ea29426f6e55fbdd4f5069ffcb9b0  headless.d.ts.map
-7e7aedd51131004fcaf85d7c8f829a70efe3daefd025aa742a8b1d9889691cc1  headless.js
+472707511b97a0f916f50cd758ab7b66b4bf2c3fc53358f97db7bab281e7652c  headless.js
 47d12b5bc91b84aa1be9910d7e64626d89471c8bc314a1aae5186cc1242067fd  http.d.ts
 26384b12778283537a8f9987fdf67fae1709ac169eebf15cd697cb52fd08dbdc  http.d.ts.map
-be01fed5658e6f624545b382bdc0acfe99b208fb0aa680f5d873dfa2c4a58423  http.js
-b4fc5671bcb9eedf4ef4e91c4a38ed069d021480c8e983d2dc07df3c4fb7a337  index.cjs
+a5242b23704779eb2a8aa9c3f84d0b7b66b70456b6ea36a702fc8abae9880d20  http.js
+87b62618d83da74d41751709e0f83963a79b0be276b9b3493efb169bed9168f7  index.cjs
 f2bfcb6fe460d8f6ad0c41369088bf844c052ac360f90661c4dbbea126294e72  index.d.ts
 c58e5c80f63f974fd5c9c91ce053bb156709fc94cd845757bf63b5ce9460f44a  index.d.ts.map
-24b21614369f95dad7cdf3021b54c8a37fabf13e653e5123d1a79a45587bb530  index.js
-6a7bc097f142640b6b5f296e3ddc37415385ceac57f4c55c5fb27bdabfa219c5  index.neutral.js
-944d30da8328418743a3292efbdda0ba2734f90bb18bba7c769abd4bcd5763b8  manifest.json
+b29cb97e1ed48f2def0e6c76a3cc9c914b2ba1d603787de8bd4f41997294fe9d  index.js
+6fb2d96d74c8c95ce075024c17c703288e7a36e41a0b78e32fc496c69725c558  index.neutral.js
+5313799b48f32e4879b1f562dd7720fb6f1ae16227c37c25cc4e815a82fd1a6b  manifest.json
 4a4a38d5c2f25f6e33d7fea853a074d4c82dfe5c721506ca4636b1d65c130f10  mcp.d.ts
 f6a3dca29e7520472f5fda98a14e9c2abe4fc25515158cda196d455534236f50  mcp.d.ts.map
-aeaea635a3f23d49eafa0216c115977e157cc229dd529f95f62948822904f4f6  mcp.js
+a1f4ce185c58a8485bb15db73b8b895414c5a38638222a9eebddf52b74952f15  mcp.js
 ce98408283eccac2d435ac0e0ceb6bb5456e1eb70edb03a03e347a9f82f99c69  memory.d.ts
 11e58fde47bb2b5bcbbb2e8a7ac4d793f661f006f9ad3b0b58b6e26b2c0ab80d  memory.d.ts.map
-fa9087460e2f275714ed2e4cd35a089d9941d942509e964b7fc254cd638c90d8  memory.js
-3f89b44a16ad7e36156ee66c5620a09b3d2037853030c68eaaa81213956fd287  nativehost.template.json
-e8b33168b9029187ac0fe3fedbb01d627c3fe031a76600e8d53a09d1ccecdb08  node.cjs
+41214772bb1f076acd778d5d0ba3da454d4c1d7ce2f76943161da22fc843db99  memory.js
+be31f260db804493cd06ed83f18ac12303dcf03b2f6a25a1cfe1c7b32db03ba7  nativehost.template.json
+a6c61dcf41087fa79e3f55fd0cf46077dafe5d5da737e00780ef7edd5f46dd18  node.cjs
 705d895c58fe6816958f0fed4bef0a6f79e5fc521ab49d9cf83e0fbcd9d71afe  node.d.ts
 36b9946ee17e28ccbd83b7260bf0e26031261b268eeb2ff8a0e8784840712a00  node.d.ts.map
 c40cdda184911cd77067737bbc91295de77535d09970dd540eeeacac2fbc33d9  pack.d.ts
 ddd8f8ca5410b77ce699ca52560c7a3ab4beabc88ae37e1f6c8d9ab8a5f6697b  pack.d.ts.map
-c5dc5ed90b0f34c2d61fbeda788def0e34c8d7e7a4de4aa97a4e294b225c88c6  pack.js
-e69a61a5bac8e6575508b54c420d84f0d2414933950aca0677c8f58f087e2a43  package.json
+19c0e0f803ec5447b685068646eb540bb51e3bb0a9cce583c0cf91c4793202cb  pack.js
+0a1d19383eeef19523972e87c9d0a0bbe7d5a1e24e620abbdfb276823e33abc1  package.json
 e3a2ed944a0bc1ef4943ee250a57e428ce49d781d30de6072571e0bc5d8c0259  policy.d.ts
 bf6531ec1b14a79cd95bddca0933208570157b0ddc514a6692c0a96734de9efa  policy.d.ts.map
-71fc6b617752c874c5a825bd0a9c5dc1cca3783d0dd3ac73bbc4de4b74ffa024  policy.js
+6f48900694b11b4db28b0025dc744a7b1753ea1ba90d08d7a6d2d13ffbc1b3ca  policy.js
 ea621ab35e610fbe8acb8e91f21ed2c74a6b20bba537c5982f31458d6878b90b  progress.d.ts
 a8638ca8a7376ef42055b934f3ce865c740a26b06c417445005c1f15ebe66eb5  progress.d.ts.map
-9c2f594907b78c1e59a49b7f04543a4375f9a44c77dc814f80d62aac702e3c43  progress.js
+2899dc89604bc35ae9d3a2d3212ed60369196b8f6e03eba5d27ff4192b252b89  progress.js
 d2e54016f0cad51928752882d780066ccf2267d383deb2407ea7b2f97dfd26e7  protocol.d.ts
 7185f297b17b448828568d7d6fdfb81efe9c961f692fd2375a3d0e457f69cb77  protocol.d.ts.map
-0cd12eccaf063f2f18c3e92eb0af4570f35a4f3a3186ec89c6e7a0e67cdd124a  protocol.js
+9239af73206b1c992739c2962a47bb7aa1c6f1712c8882e39f9c3c12a13274aa  protocol.js
 456c4a26fd65c728f2dcb9e615ec6e4d446d7e4228bfa3f70ce2b17ee3d6a2c2  schemas/audit.schema.json
 ea272aa6bf4df585ae1ca8ca63e36d7ec713c46187f37ed86ff3620a0e8509b2  schemas/capability.schema.json
 6e9d2291dc54f7d01463e5f70c8f0793d952a63f4096d61ee4dbc4bfd6f6b0a0  schemas/envelope.schema.json
@@ -136,7 +136,7 @@ a02073c153d1248638fa3cbb5f0749534382cf262d09671018cdfc538ae74430  schemas/progre
 8e104f945a846463c1020cbed21c655f233a943d6e2a18c88b37c7ab56b86de1  schemas/proposal.schema.json
 d0e0365a7641c0127338c14a5318c4591dc598b7d2a36b7b2944219921d1ce4e  schemas/session.schema.json
 5bb7d16534b52ca3a7171178065fb7b283947accd1b616ce89e330eb7a91b82e  schemas/tool.schema.json
-8032fcfbc5fd24519abc9037d2e83196e8d19293055441e9c7f9b6ca3b5965d3  umd-example.html
+e8b154d22e2f332597230ac54234051112288ee129d56bd351c6104043342b3e  umd-example.html
 16f66af22e038e4f9328420a0ed0ee34145ca79c938940e8c2e6d232e25a7c09  umd.d.ts
 ac25f7481155ac9321c5a657e7c4a53570bee8b3f63fe3527045260523a494c8  umd.d.ts.map
 58e21373cec5ade3e6698da5b36ecc2bf7e7e2f755c6fb5e3a6605b535b93985  manifest.json key

package/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 
 // cli.ts
 import { createInterface } from "node:readline/promises";
@@ -248,7 +248,7 @@ function endcall(input) {
 }
 
 // version.ts
-var packageversion = "2.0.10";
+var packageversion = "2.0.11";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/companion.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.10 companion — the optional native host of the native bridge — GPL-3.0-only — built with plain node, no native compiler */
+/*! devthink 2.0.11 companion — the optional native host of the native bridge — GPL-3.0-only — built with plain node, no native compiler */
 
 // companion.ts
 import { createHash, randomBytes } from "node:crypto";
@@ -16,7 +16,7 @@ var nativehosttemplatejson = `{
   "devthinkBanner": "devthink __devthink_version__ native host manifest template \u2014 GPL-3.0-only \u2014 the chromium host manifest of the optional companion process"
 }
 `;
-var companionbuild = "2.0.10";
+var companionbuild = "2.0.11";
 var companionprotocol = 1;
 var companionsurfaces = ["osdialog", "notification"];
 var maxnativemessage = 1024 * 1024;

package/crossbrowser.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 
 // crossbrowser.ts
 var browserpolyfillflags = ["sidepanel", "scripting", "storage.session", "tabs.executeScript", "notifications", "contextMenus", "clipboard", "downloads", "runtime.messaging", "runtime.geturl"];

package/dashdone.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 
 // dashdone.ts
 function dashboardviewerof(input) {

package/deno.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 
 // version.ts
-var packageversion = "2.0.10";
+var packageversion = "2.0.11";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/devthink.umd.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 (function (root, factory) {
   if (typeof define === "function" && define.amd) { define([], factory); }
   else if (typeof module === "object" && module.exports) { module.exports = factory(); }
@@ -2365,7 +2365,7 @@ __export(umd_exports, {
 module.exports = __toCommonJS(umd_exports);
 
 // version.ts
-var packageversion = "2.0.10";
+var packageversion = "2.0.11";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/gateway.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 
 // auth.ts
 function urlencodeform(fields) {

package/hardening.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 
 // security.ts
 var maskmarker = "[redacted]";

package/headless.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 
 // version.ts
-var packageversion = "2.0.10";
+var packageversion = "2.0.11";
 var protocolmajor = 2;
 
 // runtime.ts

package/http.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 
 // version.ts
-var packageversion = "2.0.10";
+var packageversion = "2.0.11";
 var protocolmajor = 2;
 
 // types.ts

package/index.cjs

@@ -1,4 +1,4 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 "use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -2356,7 +2356,7 @@ __export(cjs_exports, {
 module.exports = __toCommonJS(cjs_exports);
 
 // version.ts
-var packageversion = "2.0.10";
+var packageversion = "2.0.11";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/index.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 
 // version.ts
-var packageversion = "2.0.10";
+var packageversion = "2.0.11";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/index.neutral.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 
 // debug.ts
 var cdpkinds = ["attachcdp", "detachcdp", "cdpcmd", "watchcdp", "setbreakpoint", "stepcode", "watchexpr", "overridescript"];
@@ -1284,7 +1284,7 @@ function sessionbundleof(input) {
 }
 
 // version.ts
-var packageversion = "2.0.10";
+var packageversion = "2.0.11";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": 3,
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOEjO8Z0PDgQyfvawGcaO2j+o0GLCFTLNj7TkYC/Avo9l2NenMRq7gp90Nfd7E9MViv/OMcCKSYZ5unv12QPRtv31C+a5UQWDFAOP/cH5mwMd6hsayElrSoW8ta+FwFqmr9dIFkn7cQEU3YhZr4Gcbs+ycUHOxVgDA4NBKB0rQ6e9VW5LvTw0isRYUrqM+M72vKxHk9zUIYYn/LGPvottKBYi2GLr0PHSeC2UE+Shmq7vcFIXj6hDjvD4kLJ5sKoUllEcZ1TPuBcnHUQ9ndKA5iktXDQOIJCUJmi7a0YJ2PGg7fvpYfT9k0ai/qZ+pIoRfoOEwE01bPoDn7NjeYnNQIDAQAB",
   "name": "Devthink",
-  "version": "2.0.10",
+  "version": "2.0.11",
   "description": "A consent-first bridge for reviewed browser-agent tasks.",
   "icons": {
     "16": "icons/16.png",

package/mcp.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 
 // version.ts
-var packageversion = "2.0.10";
+var packageversion = "2.0.11";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/memory.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 
 // debug.ts
 function expireprofilerecords(input) {

package/nativehost.template.json

@@ -6,5 +6,5 @@
   "allowed_origins": [
     "chrome-extension://__generated_extension_id__/"
   ],
-  "devthinkBanner": "devthink 2.0.10 native host manifest template — GPL-3.0-only — the chromium host manifest of the optional companion process"
+  "devthinkBanner": "devthink 2.0.11 native host manifest template — GPL-3.0-only — the chromium host manifest of the optional companion process"
 }

package/node.cjs

@@ -1,4 +1,4 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 "use strict";
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -2357,7 +2357,7 @@ __export(node_exports, {
 module.exports = __toCommonJS(node_exports);
 
 // version.ts
-var packageversion = "2.0.10";
+var packageversion = "2.0.11";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/pack.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 
 // pack.ts
 function artifactchannels() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wenathlan/extension",
-  "version": "2.0.10",
+  "version": "2.0.11",
   "description": "Consent-first browser agent bridge and Manifest V3 extension.",
   "type": "module",
   "license": "GPL-3.0-only",

package/policy.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 
 // debug.ts
 var cdpdomains = ["Runtime", "Log", "Debugger", "DOM", "Network", "Page"];
@@ -316,7 +316,7 @@ function sessionrecordvalid(value) {
 }
 
 // version.ts
-var packageversion = "2.0.10";
+var packageversion = "2.0.11";
 var protocolmajor = 2;
 var protocolfloormajor = 2;
 

package/progress.js

@@ -1,7 +1,7 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 
 // version.ts
-var packageversion = "2.0.10";
+var packageversion = "2.0.11";
 var protocolmajor = 2;
 
 // progress.ts

package/protocol.js

@@ -1,4 +1,4 @@
-/*! devthink 2.0.10 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
+/*! devthink 2.0.11 — consent-first browser agent library — GPL-3.0-only — https://github.com/wenathlan/extension */
 
 // debug.ts
 var cdpdomains = ["Runtime", "Log", "Debugger", "DOM", "Network", "Page"];
@@ -987,7 +987,7 @@ function cronvalue(value, min, max, names) {
 }
 
 // version.ts
-var packageversion = "2.0.10";
+var packageversion = "2.0.11";
 var protocolmajor = 2;
 
 // types.ts

package/umd-example.html

@@ -1,4 +1,4 @@
-<!-- devthink 2.0.10 umd example page — GPL-3.0-only -->
+<!-- devthink 2.0.11 umd example page — GPL-3.0-only -->
 <!doctype html>
 <html lang="en">
 <head>