Michael Ramos b849ac217d test(webmcp): engine, tracker, nudges, catalog, inReplyTo and iframe isolation ...

Plain bun tests with a fake ModelContext cover registration, abort,
StrictMode double attach, in-place handler swaps, duplicate-name
skipping, the envelope (throws, undefined, cycles, schema errors),
watermarks and tombstones, every nudge code, the anchoring cascade, the
ownership rule, requestId idempotency, windowing, hints, name and
description budgets, and the absence of decision verbs. DOM-gated tests
(listed explicitly in test.yml) pin mount/unmount and toggle behavior
through useToolset and useDocumentWebMcp, panel threading, and the
indicator-only-after-first-call policy. iframeIsolation.test.ts pins at
source level that the srcdoc viewer keeps sandbox=allow-scripts with no
allow attribute, the live-app iframe gets no allow=tools, and the bridge
never references the entry point.

2026-08-26 13:46:50 -07:00

..

assets

docs: correct privacy and network claims (#1163)

2026-07-31 11:22:19 -07:00

ISSUE_TEMPLATE

feat(github): minimal bug-report issue form (#1100)

2026-07-20 19:02:24 -07:00

plugin

chore: bump version to 0.17.0

2026-04-06 12:36:15 -07:00

workflows

test(webmcp): engine, tracker, nudges, catalog, inReplyTo and iframe isolation

2026-08-26 13:46:50 -07:00

dependabot.yml

ci: harden releases and add security scanning (#1274)

2026-08-12 11:40:15 -07:00

renovate.json

chore: bump version to 0.19.0

2026-04-21 19:36:02 -07:00