Skip to content

feat: WebMCP tools (@profullstack/webmcp) - #360

Merged
ralyodio merged 1 commit into
masterfrom
feat/webmcp
Nov 11, 2026
Merged

ralyodio merged 1 commit into
masterfrom
feat/webmcp

Conversation

@ralyodio

Copy link
Copy Markdown
Contributor

Adds the @profullstack/webmcp embed to the root layout head: site_info and open_page (home, chat, about, security, encryption, premium, faq).

  • Deliberately no message/chat tools: chats are end-to-end encrypted in the page.
  • CSP is frame-ancestors only, nothing to change.

🤖 Generated with Claude Code

Root layout embed: site_info and open_page for an AI agent in the
visitor's browser. No message tools: chats are end-to-end encrypted.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@ralyodio

Copy link
Copy Markdown
Contributor Author

Merging without the Actions run: every profullstack workflow has sat in queued since ~07:53 UTC today (no runner picks anything up, org-wide). Local checks on this branch: layout-only change, reviewed. The change only adds the WebMCP embed/attributes; a failed build on dev2 leaves the running stack in place. (riotcoder)

@ralyodio
ralyodio merged commit 72f9628 into master Nov 11, 2026
9 checks passed
@ralyodio
ralyodio deleted the feat/webmcp branch November 11, 2026 08:27
@github-actions

Copy link
Copy Markdown

ThreatCrush Security Scan

18 finding(s)

MEDIUM: 14 | LOW: 4

Severity Rule Location
MEDIUM js-unescaped-html-sink src/app/blog/[slug]/page.jsx:38
MEDIUM js-unescaped-html-sink src/app/blog/[slug]/page.jsx:66
MEDIUM js-unescaped-html-sink src/app/faq/page.jsx:57
MEDIUM js-unescaped-html-sink src/app/layout.jsx:142
MEDIUM js-unescaped-html-sink src/app/layout.jsx:146
MEDIUM js-unescaped-html-sink src/app/page.jsx:50
MEDIUM js-open-redirect src/app/phone/page.jsx:70
MEDIUM redos-nested-quantifier src/lib/auth/dns-name.js:88
MEDIUM redos-nested-quantifier src/lib/chat/voice-mode.js:116
MEDIUM redos-nested-quantifier src/lib/chat/voice-mode.js:121
MEDIUM js-unescaped-html-sink src/lib/components/chat/MessageItem.jsx:85
MEDIUM js-unescaped-html-sink src/lib/components/chat/MessageItem.jsx:130
MEDIUM js-unescaped-html-sink src/lib/components/PitFooter.jsx:15
MEDIUM js-open-redirect src/lib/components/settings/CoinpaySettings.jsx:62
LOW secret-generic-credential src/app/api/auth/register-anon/route.test.js:32
LOW secret-jwt tests/debug-sms.js:10
LOW secret-generic-credential tests/private-key-import-export.test.js:252
LOW secret-generic-credential tests/private-key-import-export.test.js:264

Snippets are redacted; ThreatCrush never prints matched credential material.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant