Cloudflare adds /cdn-cgi/challenge-platform/scripts/jsd/main.js to ordinary
pages as a passive bot check. cloudflareStrong matched any
challenge-platform, so a mod page carrying that script in its first 200 KB
was classified as a challenge. The background collection queue stopped on
it as a blocking cloudflare verdict, no captcha appeared since there was
none, and each restart stopped on the same file again (#10).

• response-classifier.js only takes a challenge's own
  challenge-platform/h/<v>/orchestrate/ path as a marker; the Cf-Mitigated
  header, _cf_chl_opt and the other markers are unchanged.
• LOAD_BUNDLE no longer records a background error when the page that
  asked was left or reloaded before the bundle arrived ("Frame with ID 0
  was removed").
• Tests pin the bot-check script on a file page and a signed-in page as
  not a challenge, and use a real challenge path for the strong marker.
• Bump to 2.7.3: manifest, changelog, README badges and store notes.

Fixes #10

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XJc2M5FiqsXYxaKs2NRnQg

Chromium before 130 parsed a URL of a scheme it did not know as an opaque
path: nxm://game/mods/1/files/2 had an empty hostname and the pathname
//game/mods/1/files/2. isSignedNxm took the game from the hostname, so on
Chrome 119 it refused the signed link Nexus had just generated and every
Vortex download ended as no_nmm_link (#9).

• download-url-parser.js splits an nxm:// link by hand instead of through
  URL. The authority must be a bare game domain, which also rules out
  credentials and a port; the path, key, expiry and user checks are unchanged.
• shared.js reads the game and path the same way for bug reports and for
  validateDownloadTarget's hostname.
• The Cloudflare recovery advice says to turn off a VPN or proxy when the
  check keeps coming back, in all 13 languages (#8).
• LegacyChromiumURL stands in for the old parser: the parser cases run
  under it, and nnw-parser-test replays the reported Vortex download.
• Bump to 2.7.2: manifest, changelog, README badges and store notes.

Fixes #9
Fixes #8

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

This release fixes imported Wabbajack modlists replacing a collection deck and leaving the page in a broken state by mounting the deck once, restoring the collection deck correctly on close, and keeping it in the content column when no deck exists. It also removes unused response classifiers from the worker, updates the 2.7.0 metadata and store listing, and tightens the related tests.

Serialize terminal download handling, retire exact browser download IDs before retrying, and guard queue state transitions against Stop/Restart races. Share Nexus response classification across contexts and add the v2.6.4 regression/build gate.

This release fixes several NDC download issues: transfers are validated against the server Content-Length instead of Nexus's often-wrong listing, selected downloads and collection updates now record history so Skip Downloaded stops re-fetching them, and failed temp files are deleted before retries. It also caps stored failure entries while keeping the true count, and updates the bug-report guidance to point users to the extension's Report a bug button.

• Milestone-based rating prompts: No longer a one-time prompt; now shows at 25, 120, 500, and 1500 downloads with a 21-day gap between asks.
• Queue ETA: Displays remaining time for collection/modlist runs based on measured download speeds.
• Wabbajack importer enhancements: Supports .zip containers, detects unreadable RAR/7z files, and reads .wabbajack inside archives without full extraction.
• Activity trail for bug reports: Records recent notable actions; removed DebugLogs setting.
• Better review links: Now chooses store based on extension ID rather than user agent.
• Ad-timer cookie refresh: Ensures 'ab' cookie is refreshed during collection runs.

• Prevented untrusted Nexus responses from being passed through the HTML parser.
• Corrected download folder handling in bug reports (no longer includes verbatim path).
• Resolved issue where modlists inside archives failed to import.
• Fixed review link going to wrong store (now uses extension ID).
• Made collection runs more robust with per-file failure tracking and rate-limit countdown.

• The welcome page was redesigned.
• Onboarding, popup, and locale strings updated.
• Multiple documentation and metadata updates.

• This release includes version bump to 2.6.2 and updates to privacy and troubleshooting docs.

Major New Features & Changes in Version 2.6.0:

• Wabbajack Modlist Import (Beta): You can now import .wabbajack files directly! When enabled in settings, a new button lets you read a modlist and queue its Nexus files using the extension's built-in queue system. It fully supports both Vortex and Browser download methods, and gracefully skips/reports external files or unsupported games.
• Cloudflare Challenge Handling: The background queue now correctly detects Cloudflare verification checks. Instead of failing downloads silently, it pauses the queue and allows you to complete the browser check before resuming.
• Download Speed Fix: Corrected an issue where bypassing the countdown timer inadvertently flagged users as using an adblocker, which capped download speeds to 1.5MB/s. Free users should now reach the full 3.0MB/s limit.
• Queue & Performance Optimizations: Massively hardened the collection queue state to prevent it from rolling backwards or freezing. Also heavily optimized page scanning (mod lists and buttons) so the extension uses significantly less CPU on heavy pages.
• UI & Localization: Streamlined and shortened several settings descriptions across all 13 supported languages for a cleaner look.

v2.5.0

• Popup redesigned with a tab bar — Controls and Help & Bugs are now separate tabs for a cleaner layout
• Support panel now offers GitHub Sponsors, PayPal (@Thomasthanos) and Revolut (@thomas2873) as donation options
• Vortex handoff now shows a countdown toast with a "Keep open" button before closing the tab, so a failed handoff is still recoverable
• New "How does it work?" panel in the popup explains the three steps and the sign-in requirement
• Bug reports now include what the extension was doing (manual click, auto, collection run) and a full session block
• New Cloudflare fallback toggle in page settings — you can now turn off the automatic tab navigation
• Fixed: archived file buttons could be attached to the wrong file when the DOM order differed
• Fixed: navigation poll now runs at 5-second intervals on non-mod pages instead of 1 second everywhere
• Fixed: Cloudflare fallback now has a deadline and reports an error if the Nexus button never appears