FoxMCP v1.7.0

Added

• Official MCP Registry metadata and release publishing after PyPI succeeds.
  Manual release rehearsals validate the entry without publishing.

• Optional per-tab/origin consent for raw and predefined agent scripts, controlled
  by a default-off extension toggle. Sequential prompts activate each target tab
  and focus its window, with a 60-second decision deadline. Firefox Desktop 149+
  opens the toolbar popup automatically; older Firefox uses a toolbar-click
  fallback. Decisions reset on origin changes, tab closure and browser/extension
  restart. Toggle changes wait for pending injections to finish. Choosing Allow
  or Deny closes the popup before approved injection or the next prompt starts.
  Approval prompts hide connection and configuration controls. Pending prompt
  presentation recovers after same-origin history navigation or delayed window
  focus, retaining the original deadline.

Changed

• Allow 300 seconds for raw and predefined script tool responses, covering
  consent queue wait, approval and execution. Retain protocol ID 3 and existing
  request/response messages; no server transport changes are required.
• Separate MCPFrontend from BrowserServer, with direct local access or
  RemoteBrowser forwarding chosen at construction. Architecture diagrams and
  source names now match. Browser-only workers construct no MCP frontend;
  shared-stdio frontends construct no browser listener or registry. CLI, tool
  schemas remain unchanged. The refactor alone retained protocol ID 3.

Fixed

• With script approval disabled, origin-change events no longer cancel script
  execution. Enabled approval retains origin checks and stale-target rejection.

• Correct protocol examples, extension permission/content-script references and
  script setup instructions. Clarify the response-body retention limit.

• Correct developer Makefile lifecycle sequencing, Firefox path quoting and
  virtualenv overrides; isolate regression probes from inherited overrides.

• Preserve client-facing tool guidance across docstring paragraphs without
  including internal structured sections. Clarify connection discovery, tab
  closure, page reads, reloads and monitor lifecycle; correct the claim that
  stopping a monitor waits for in-flight requests. Tool names, input/output
  schemas and extension protocol remain unchanged.

• Hold Windows worker execution until the WMI broker has a stable process
  handle, preventing a short-lived worker from disappearing before its exit
  status can be observed. Preserve hidden launch, environment and independent
  worker lifetime; bound the startup wait if the broker disappears.

• Treat interrupted shared-server discovery reads and other network failures as
  temporary unavailability, allowing startup to recover when an owner closes an
  accepted connection during shutdown. Keep rejecting incompatible discovery
  responses; browser commands are never replayed.