Michael Ramos 0ae40e73a4 feat(annotate): restore a restricted thumbs-up on comment-only HTML surfaces ...

The v0.27.5 comment-only ruling removed every label affordance from HTML
and live-app annotate surfaces, leaving no one-click positive feedback:
the only path was opening the composer and typing prose. Restore exactly
ONE affordance, the hardcoded 'Looks good' thumbs-up, on both input
routes:

- selection toolbar: commentOnly + a provided onQuickLabel now renders
  only the thumbs-up (no Delete, no Zap picker, Alt+digit suppressed);
  HtmlViewer passes a handler that filters by label id as defense in
  depth
- pinpoint: the composer gains an optional one-click 'Looks good'
  footer action (disabled once anything is typed, so it can never
  discard a draft), emitting the same isQuickLabel comment shape with
  the draft's multi-select targets

The trust-boundary clamp is untouched: redline/quickLabel modes stay
collapsed to selection, so a hostile page still cannot force a DELETION
or an arbitrary label. THUMBS_UP_LABEL moves to utils/quickLabels as
the canonical definition.

2026-08-24 09:27:43 -07:00

..

assets

docs: correct privacy and network claims (#1163)

2026-07-31 11:22:19 -07:00

ISSUE_TEMPLATE

feat(github): minimal bug-report issue form (#1100)

2026-07-20 19:02:24 -07:00

plugin

chore: bump version to 0.17.0

2026-04-06 12:36:15 -07:00

workflows

feat(annotate): restore a restricted thumbs-up on comment-only HTML surfaces

2026-08-24 09:27:43 -07:00

dependabot.yml

ci: harden releases and add security scanning (#1274)

2026-08-12 11:40:15 -07:00

renovate.json

chore: bump version to 0.19.0

2026-04-21 19:36:02 -07:00