v0.2.0

First tagged release since 0.1.0. Bundles months of accumulated work
plus a security fix found while auditing the project.

Security

• HTTP bridge CORS lockdown: the Express bridge on localhost:3747
  previously accepted requests from any origin, meaning any website open
  in the browser could POST to /api/capture, /api/note,
  /api/stage-groups, etc. and write attacker-controlled content into
  the local memory database or stage arbitrary tab groups. Replaced with
  an explicit Origin allowlist restricted to the extension's own origin.

Added

• Tab grouping: get_all_open_tabs and apply_tab_grouping tools,
  backed by a critic engine that rejects domain-name or catch-all group
  names before they reach the browser.
• Automated test suite (Node's built-in test runner), ESLint + typecheck
  in CI, and a live /api/status health check.

Changed

• Genuine extractive AI-fallback summaries when no LLM is configured.
• README rewrite: fixed a placeholder clone URL, corrected the MCP tool
  count (13 -> 16, two tab-grouping tools were undocumented), added a
  Security section.

Fixed

• MCP stdio corruption from dotenv's stdout output.
• Dual-process state handling and tool-error reporting.

Full history: see CHANGELOG.md.