v0.3.11 — one definition of a usable CA bundle

0.3.11

Fixed: "exists" and "not found" could disagree about the same path.

Presence was judged two ways — describeCaBundle demanded a regular file, while the export refused to overwrite on a plain existsSync, which is also true for a directory. A path occupied by a directory therefore reported "file not found" in the settings page while the export refused with reason: exists. Both sides now go through one definition, and a failed write reports the real cause (EISDIR / ENOTDIR).

WAL is bounded. PRAGMA wal_autocheckpoint = 400 keeps knowledge.db-wal near 1.6 MB instead of letting the default 1000-page threshold leave a multi-megabyte side file behind.

Docs (added after release, commit f36bc4b). The README never described the 0.3.9 export row — it only mentioned caPemPath in the config table. Both language versions now cover what auto points at, that the package does not ship the file, the badge/button behaviour, the confirm-before-overwrite rule, and the caveat that exporting the system store does nothing if the proxy root was never installed there. Assertion 14 also stopped hardcoding 88 and now reads the count smoke.mjs reports, so it cannot rot again.

Gates: offline 102, client 27, packaging 20, release 34.