Refresh runtime and SDK dependencies within verified compatibility limits

.changeset/dependency-refresh.md

@@ -0,0 +1,7 @@
+---
+"@mcp-b/do-runtime": patch
+---
+
+Refresh runtime and build dependencies, including SQLite WASM, Cap’n Web and
+structured clone. Validate conformance against workerd 1.20260911.1 and keep
+WebSocket readyState declarations aligned with the current DOM types.

README.md

@@ -214,7 +214,7 @@ Web Worker and supply the sqlite-wasm backend shown in the runnable examples.
 For a standalone TypeScript host, install the ambient Node and Workers types:
 
 ```bash
-pnpm add -D typescript @types/node @cloudflare/workers-types@5.20260907.1
+pnpm add -D typescript @types/node @cloudflare/workers-types@5.20260911.1
 ```
 
 Use the following `tsconfig.json`. An existing Workers project can keep its
@@ -514,7 +514,7 @@ it does not need a sibling checkout, SDK source aliases, or a local candidate
 archive. Publish a new source tag for each SDK change instead of replacing
 an existing release's assets. The runtime's npm release remains independent.
 
-Change runtime behaviour with the corresponding workerd source open (line citations use release `v1.20260713.1`; the conformance oracle is pinned to `v1.20260907.1`). Ask the workerd lane an observable question before inventing a local rule; record any intentional divergence in the table above and in a conformance row. Keep host seams small and typed, keep gates internal, and keep product knowledge out of the port. See [`docs/decisions.md`](docs/decisions.md) for the invariants the code cites.
+Change runtime behaviour with the corresponding workerd source open (line citations use release `v1.20260713.1`; the conformance oracle is pinned to `v1.20260911.1`). Ask the workerd lane an observable question before inventing a local rule; record any intentional divergence in the table above and in a conformance row. Keep host seams small and typed, keep gates internal, and keep product knowledge out of the port. See [`docs/decisions.md`](docs/decisions.md) for the invariants the code cites.
 
 ## Acknowledgements
 

docs/decisions.md

@@ -8,8 +8,8 @@ the index the citations resolve to, not a second specification.
 Workerd line citations throughout the source use release `v1.20260713.1`, commit
 `03c396e9b14ea5644dfcfb696086d8df040a4efc` of
 [cloudflare/workerd](https://github.com/cloudflare/workerd). The conformance
-oracle is pinned separately to release `v1.20260907.1`, commit
-`beb7bd5c370d898e5ea81947aaa80ba5f48cd47e`.
+oracle is pinned separately to release `v1.20260911.1`, commit
+`925464ba9fe5751e4468626ce77f7a5810df274f`.
 The [September sync audit](workerd-sync.md) records the reviewed changes and
 remaining host-engine differences. New source comments name their upstream
 commit when the July line baseline no longer applies.

examples/extension/package.json

@@ -10,17 +10,17 @@
     "@cloudflare/think": "file:../../vendor/agents/packages/think",
     "@mcp-b/do-runtime": "workspace:*",
     "@modelcontextprotocol/server": "2.0.0",
-    "@sqlite.org/sqlite-wasm": "3.53.0-build1",
+    "@sqlite.org/sqlite-wasm": "3.53.4-build1",
     "agents": "file:../../vendor/agents/packages/agents",
     "ai": "7.0.18",
-    "capnweb": "0.10.0",
+    "capnweb": "0.12.0",
     "unenv": "2.0.0-rc.24",
-    "zod": "4.4.3"
+    "zod": "4.6.4"
   },
   "devDependencies": {
     "@babel/plugin-proposal-decorators": "8.0.2",
-    "@cloudflare/workers-types": "5.20260907.1",
-    "chrome-types": "^0.1.0",
-    "vite": "^8.2.1"
+    "@cloudflare/workers-types": "5.20260911.1",
+    "chrome-types": "^0.1.447",
+    "vite": "^8.3.0"
   }
 }

examples/extension/src/offscreen/offscreen.ts

@@ -228,7 +228,14 @@ async function runRelayRoundTrip(origin: string): Promise<RelayRoundTrip> {
       local = new AgentWebSocket("ws://actor.invalid/agents/counter/counter");
       local.binaryType = "arraybuffer";
       local.addEventListener("message", (localEvent) => {
-        if (relayHost.readyState === relayHost.OPEN) relayHost.send(localEvent.data);
+        if (relayHost.readyState === relayHost.OPEN) {
+          const data = localEvent.data;
+          relayHost.send(
+            ArrayBuffer.isView(data)
+              ? new Uint8Array(data.buffer, data.byteOffset, data.byteLength).slice()
+              : data,
+          );
+        }
       });
       local.addEventListener("close", (close) => {
         if (relayHost.readyState < relayHost.CLOSING) {

examples/vibe-platform/package.json

@@ -9,14 +9,14 @@
   },
   "dependencies": {
     "@mcp-b/do-runtime": "workspace:*",
-    "@rolldown/browser": "^1.1.5",
-    "@sqlite.org/sqlite-wasm": "3.53.0-build1",
+    "@rolldown/browser": "^1.2.8",
+    "@sqlite.org/sqlite-wasm": "3.53.4-build1",
     "agents": "file:../../vendor/agents/packages/agents",
-    "capnweb": "0.10.0",
+    "capnweb": "0.12.0",
     "unenv": "2.0.0-rc.24"
   },
   "devDependencies": {
-    "@cloudflare/workers-types": "5.20260907.1",
-    "vite": "^8.2.1"
+    "@cloudflare/workers-types": "5.20260911.1",
+    "vite": "^8.3.0"
   }
 }

package.json

@@ -125,9 +125,9 @@
     "sdk:pack": "pnpm sdk:build && rm -rf dist/sdk && pnpm --dir vendor/agents --filter agents --filter \"@cloudflare/*\" --fail-if-no-match -r pack --pack-destination \"$PWD/dist/sdk\""
   },
   "dependencies": {
-    "@ungap/structured-clone": "1.3.3",
-    "capnweb": "0.10.0",
-    "magic-string": "0.30.21"
+    "@ungap/structured-clone": "1.4.0",
+    "capnweb": "0.12.0",
+    "magic-string": "1.3.1"
   },
   "peerDependencies": {
     "vite": "^8.1.5"
@@ -139,21 +139,21 @@
   },
   "devDependencies": {
     "@arethetypeswrong/cli": "0.18.5",
-    "@changesets/cli": "^2.29.8",
-    "@cloudflare/vitest-pool-workers": "^0.18.8",
-    "@cloudflare/workers-types": "5.20260907.1",
-    "@sqlite.org/sqlite-wasm": "3.53.0-build1",
-    "@types/node": "^26.1.2",
+    "@changesets/cli": "^3.0.2",
+    "@cloudflare/vitest-pool-workers": "^0.22.0",
+    "@cloudflare/workers-types": "5.20260911.1",
+    "@sqlite.org/sqlite-wasm": "3.53.4-build1",
+    "@types/node": "^26.5.1",
     "@types/ungap__structured-clone": "1.2.0",
-    "@vitest/browser-playwright": "4.1.10",
-    "@vitest/coverage-v8": "4.1.10",
+    "@vitest/browser-playwright": "4.1.11",
+    "@vitest/coverage-v8": "4.1.11",
     "drizzle-orm": "^0.45.2",
-    "playwright": "1.61.1",
-    "publint": "0.3.23",
-    "typescript": "^5.9.3",
-    "vitest": "4.1.10",
-    "workerd": "1.20260907.1",
-    "wrangler": "^4.114.0"
+    "playwright": "1.63.0",
+    "publint": "0.3.24",
+    "typescript": "^6.0.3",
+    "vitest": "4.1.11",
+    "workerd": "1.20260911.1",
+    "wrangler": "^4.131.1"
   },
   "engines": {
     "node": ">=24.11.0"