[github-actions]

This PR was opened by the Changesets release GitHub action. When you're ready to do a release, you can merge this and the packages will be published to npm automatically. If you're not ready to do a release yet, that's fine, whenever you add more changesets to main, this PR will be updated.

Releases

@swissspidy/webmcp-audit@0.1.0

Minor Changes

• #16 7d0d42e Thanks @swissspidy! - Initial release.

  • @swissspidy/webmcp-lint: the rule engine (tool and page rules, injection scanning, capability-trifecta, tool-shadowing, third-party-registration, and the opt-in tool-name-style, tool-title-missing, description-when-to-use and annotations-explicit), lintTools(), snapshotFromFrames(), a webmcp-lint CLI, schema-driven smoke checks, tool contracts, coverage, scoring, codegen, docs, and the webmcp-evals argument and trajectory matchers.
  • @swissspidy/playwright-webmcp: test/expect with the webmcp fixture (discovery in every frame, call(), recording, lint, smoke, contracts, mocks, timeline), the CDP WebMCP collector, the promptApi fixture on Chromium's Prompt API tool-use protocol, toolsForAgent()/runAgent()/toPassEval for agents you run from Node, and a reporter that writes tools.json, coverage.json and TOOLS.md.
  • @swissspidy/webmcp-audit: a crawler and CLI that lints every page, runs smoke calls, detects cross-page drift, compares with a baseline and scores agent readiness.
  • @swissspidy/eslint-plugin-webmcp: the tool-scoped rules as ESLint rules for registerTool(), useWebMCP(), your own wrappers, tool-shaped object literals exported for registration elsewhere, and <form toolname> in JSX, plus valid-event-name, no-interpolated-text and navigation-consequential; loads in oxlint.

  Every rule has a generated reference page under docs/rules/, which is also where a finding's url points from the ESLint plugin.

  Everything runs against the browser's own WebMCP implementation (document.modelContext): Playwright's Chromium with --enable-features=WebMCP, or Chrome Beta and Canary.

Patch Changes

• Updated dependencies [7d0d42e]:
  • @swissspidy/webmcp-lint@0.1.0
  • @swissspidy/playwright-webmcp@0.1.0

@swissspidy/webmcp-lint@0.1.0

Minor Changes

• #16 7d0d42e Thanks @swissspidy! - Initial release.

  • @swissspidy/webmcp-lint: the rule engine (tool and page rules, injection scanning, capability-trifecta, tool-shadowing, third-party-registration, and the opt-in tool-name-style, tool-title-missing, description-when-to-use and annotations-explicit), lintTools(), snapshotFromFrames(), a webmcp-lint CLI, schema-driven smoke checks, tool contracts, coverage, scoring, codegen, docs, and the webmcp-evals argument and trajectory matchers.
  • @swissspidy/playwright-webmcp: test/expect with the webmcp fixture (discovery in every frame, call(), recording, lint, smoke, contracts, mocks, timeline), the CDP WebMCP collector, the promptApi fixture on Chromium's Prompt API tool-use protocol, toolsForAgent()/runAgent()/toPassEval for agents you run from Node, and a reporter that writes tools.json, coverage.json and TOOLS.md.
  • @swissspidy/webmcp-audit: a crawler and CLI that lints every page, runs smoke calls, detects cross-page drift, compares with a baseline and scores agent readiness.
  • @swissspidy/eslint-plugin-webmcp: the tool-scoped rules as ESLint rules for registerTool(), useWebMCP(), your own wrappers, tool-shaped object literals exported for registration elsewhere, and <form toolname> in JSX, plus valid-event-name, no-interpolated-text and navigation-consequential; loads in oxlint.

  Every rule has a generated reference page under docs/rules/, which is also where a finding's url points from the ESLint plugin.

  Everything runs against the browser's own WebMCP implementation (document.modelContext): Playwright's Chromium with --enable-features=WebMCP, or Chrome Beta and Canary.

@swissspidy/eslint-plugin-webmcp@0.1.0

Minor Changes

• #16 7d0d42e Thanks @swissspidy! - Initial release.

  • @swissspidy/webmcp-lint: the rule engine (tool and page rules, injection scanning, capability-trifecta, tool-shadowing, third-party-registration, and the opt-in tool-name-style, tool-title-missing, description-when-to-use and annotations-explicit), lintTools(), snapshotFromFrames(), a webmcp-lint CLI, schema-driven smoke checks, tool contracts, coverage, scoring, codegen, docs, and the webmcp-evals argument and trajectory matchers.
  • @swissspidy/playwright-webmcp: test/expect with the webmcp fixture (discovery in every frame, call(), recording, lint, smoke, contracts, mocks, timeline), the CDP WebMCP collector, the promptApi fixture on Chromium's Prompt API tool-use protocol, toolsForAgent()/runAgent()/toPassEval for agents you run from Node, and a reporter that writes tools.json, coverage.json and TOOLS.md.
  • @swissspidy/webmcp-audit: a crawler and CLI that lints every page, runs smoke calls, detects cross-page drift, compares with a baseline and scores agent readiness.
  • @swissspidy/eslint-plugin-webmcp: the tool-scoped rules as ESLint rules for registerTool(), useWebMCP(), your own wrappers, tool-shaped object literals exported for registration elsewhere, and <form toolname> in JSX, plus valid-event-name, no-interpolated-text and navigation-consequential; loads in oxlint.

  Every rule has a generated reference page under docs/rules/, which is also where a finding's url points from the ESLint plugin.

  Everything runs against the browser's own WebMCP implementation (document.modelContext): Playwright's Chromium with --enable-features=WebMCP, or Chrome Beta and Canary.

Patch Changes

• Updated dependencies [7d0d42e]:
  • @swissspidy/webmcp-lint@0.1.0

@swissspidy/playwright-webmcp@0.1.0

Minor Changes

• #16 7d0d42e Thanks @swissspidy! - Initial release.

  • @swissspidy/webmcp-lint: the rule engine (tool and page rules, injection scanning, capability-trifecta, tool-shadowing, third-party-registration, and the opt-in tool-name-style, tool-title-missing, description-when-to-use and annotations-explicit), lintTools(), snapshotFromFrames(), a webmcp-lint CLI, schema-driven smoke checks, tool contracts, coverage, scoring, codegen, docs, and the webmcp-evals argument and trajectory matchers.
  • @swissspidy/playwright-webmcp: test/expect with the webmcp fixture (discovery in every frame, call(), recording, lint, smoke, contracts, mocks, timeline), the CDP WebMCP collector, the promptApi fixture on Chromium's Prompt API tool-use protocol, toolsForAgent()/runAgent()/toPassEval for agents you run from Node, and a reporter that writes tools.json, coverage.json and TOOLS.md.
  • @swissspidy/webmcp-audit: a crawler and CLI that lints every page, runs smoke calls, detects cross-page drift, compares with a baseline and scores agent readiness.
  • @swissspidy/eslint-plugin-webmcp: the tool-scoped rules as ESLint rules for registerTool(), useWebMCP(), your own wrappers, tool-shaped object literals exported for registration elsewhere, and <form toolname> in JSX, plus valid-event-name, no-interpolated-text and navigation-consequential; loads in oxlint.

  Every rule has a generated reference page under docs/rules/, which is also where a finding's url points from the ESLint plugin.

  Everything runs against the browser's own WebMCP implementation (document.modelContext): Playwright's Chromium with --enable-features=WebMCP, or Chrome Beta and Canary.

Patch Changes

• Updated dependencies [7d0d42e]:
  • @swissspidy/webmcp-lint@0.1.0

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: e251b7e1-d6fc-4069-bc66-f95343b92e2e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}