- README Release section now matches CI reality: tag push publishes to the Gitea npm registry AND creates the Gitea release (was described as visibility-only, predating the npm publish step). - ESLint flat config (eslint + typescript-eslint recommended); `npm run lint` is now eslint (typecheck stays separate) and CI build-and-test gates on it. One real finding fixed: dead import in src/mail/index.ts. - New vitest coverage for the previously untested src/browser/actions.ts (click/fill retries, safeGoto, waitForUrlHost, assertPublicHost, BasePage URL building) and src/logging/redact.ts (redactSecrets).