deepbom 1.98.0 → 1.99.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "deepbom",
-  "version": "1.98.0",
+  "version": "1.99.1",
   "mcpName": "io.github.JunHwan-Kwon/deepbom",
   "description": "Local multi-format deployment-artifact analysis for on-device AI models",
   "type": "module",

package/pkg/release-manifest.json

@@ -1,8 +1,8 @@
 {
   "schema": "deepbom.npm_release.v1",
-  "version": "1.98.0",
+  "version": "1.99.1",
   "source": {
-    "git_commit": "46636ebe3cfdd43fcd782178862073ecbdd5c760",
+    "git_commit": "e745104b3ee64cf0257d84ac96a530da5ea532c4",
     "git_state": "clean",
     "distribution": "public_channel"
   },

package/skills/deepbom/SKILL.md

@@ -17,7 +17,7 @@ If no exact local installation is available, ask before running:
 node "<skill-root>/scripts/verify-deepbom.mjs" --allow-download
 ```
 
-That explicit fallback may download `deepbom@1.98.0` through npm. Use the returned `invocation.command` and `invocation.prefix_args` for subsequent commands. Do not silently replace a version mismatch or network failure with an unverified executable.
+That explicit fallback may download `deepbom@1.99.1` through npm. Use the returned `invocation.command` and `invocation.prefix_args` for subsequent commands. Do not silently replace a version mismatch or network failure with an unverified executable.
 
 ## Start with discovery
 

package/skills/deepbom/references/failure-recovery.md

@@ -7,4 +7,4 @@
 5. For remote input, require an immutable identity: a full Hugging Face commit, GCS object generation, or HTTPS SHA-256 fragment.
 6. Do not raise download, response, or memory limits without explaining the cost and obtaining user approval.
 7. If no shell, local MCP, or local file access exists, explain that actual analysis cannot run in that client and provide the pinned `npx` command.
-8. Registry download is opt-in. Prefer a verified exact-version installation; use `npx -y deepbom@1.98.0` only after network and installation permission is clear.
+8. Registry download is opt-in. Prefer a verified exact-version installation; use `npx -y deepbom@1.99.1` only after network and installation permission is clear.

package/skills/deepbom/scripts/verify-deepbom.mjs

@@ -6,7 +6,7 @@ import path from "node:path";
 import process from "node:process";
 import { fileURLToPath } from "node:url";
 
-const VERSION = "1.98.0";
+const VERSION = "1.99.1";
 const allowDownload = process.argv.slice(2).includes("--allow-download");
 const attempts = [];
 const candidates = localCandidates();