llm-cli-gateway 2.0.0 went out on 4 June 2026. npm now reports 2.0.0 as the latest version, and the public GitHub release carries the platform binaries, bundled installers, SHA256 checksums, release manifest, and Sigstore bundles.
The headline change is simple: production persistence no longer depends on better-sqlite3. The gateway now uses Node's built-in node:sqlite, behind a single adapter in src/sqlite-driver.ts, and that one architectural change removes an entire class of install-time supply-chain risk from the consumer tree.
That matters because the recent 1.17.x work was not really about SQLite as a database. It was about the native-module install path around better-sqlite3, specifically the prebuild-install, tar-fs, and tar-stream chain. In 2.0.0 that chain is not patched, worked around, or hidden behind an advisory. It is absent from production installs. The release verification now asserts that consumers get no better-sqlite3, no prebuild-install, and no tar-stream in the installed tree.
The cost is a real breaking change: Node >=24.4.0 is now required. That is not arbitrary. The gateway's persistence layer binds plain objects like { id: ... } to @id SQL placeholders, and Node 24.4 is the point where node:sqlite has the bare named parameter behaviour this code relies on. The test suite pins that behaviour so future changes fail loudly rather than turning into quiet persistence bugs.
